Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_8gi1iRtsS7d8iaN-9S3-FSa8nw.roa
File: _8gi1iRtsS7d8iaN-9S3-FSa8nw.roa (raw, json)
Hash identifier: HQ+JJifuAamYzmmkBjV14faKhK0J+KwEcHsfNT4qzhk=
Subject key identifier: FF:C8:22:D6:24:6D:B1:2E:DD:F2:26:8D:FB:D4:B7:F8:54:9A:F2:7C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019760257987D7CCD63DEE05E8860875F1BF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_8gi1iRtsS7d8iaN-9S3-FSa8nw.roa
Signing time: Wed 11 Jun 2025 17:59:18 +0000
ROA not before: Wed 11 Jun 2025 17:59:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 2a0c:7884::/32 maxlen: 32
2a0e:1a80:1::/48 maxlen: 48
2a0e:c785:1::/48 maxlen: 48
2a0e:f200::/48 maxlen: 48
2a0f:1203::/32 maxlen: 32
2a0f:1580::/32 maxlen: 32
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:3043::/32 maxlen: 32
2a0f:31c2::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d06:102::/48 maxlen: 48
2a0f:e847:acab::/48 maxlen: 48
2a10:67c2:3::/48 maxlen: 48
2a12:ac43:1::/48 maxlen: 48
2a13:18c0:2::/48 maxlen: 48
2a13:e103::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:25:79:87:d7:cc:d6:3d:ee:05:e8:86:08:75:f1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 11 17:59:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffc822d6246db12eddf2268dfbd4b7f8549af27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:11:1c:43:9f:3c:fe:8e:a7:f4:11:4d:54:
b7:5b:85:5b:9b:6e:4e:47:d8:3e:85:ca:da:23:1c:
61:f8:6b:87:ab:c0:50:23:aa:1c:d8:c3:93:ad:ef:
df:80:5c:3d:ab:89:db:6d:a0:e7:fa:f9:13:11:a8:
9b:22:35:a6:ba:f4:14:4e:d7:1e:d4:6d:46:74:ba:
dc:a0:63:99:4b:f9:2c:63:19:e2:23:90:1c:cc:b8:
30:17:b1:91:b5:5d:5c:9c:98:35:58:4e:5d:92:2b:
31:c6:47:b1:26:5b:10:f1:83:4b:2a:73:df:eb:6f:
ca:f1:36:41:b2:da:33:18:a5:a8:56:4c:0a:26:2c:
8c:09:1d:4f:56:71:76:92:e7:24:9c:0e:2f:bd:2e:
70:da:9f:e0:6e:a8:20:08:23:d8:8a:3e:23:4b:a2:
69:91:95:85:4a:cc:a3:45:e6:70:24:93:58:d2:46:
b4:da:cd:8e:ee:7b:56:d2:20:97:d4:5e:cf:db:1e:
a0:e8:99:96:5d:22:5d:7a:ba:04:7e:86:c7:53:30:
52:ff:84:ee:a6:7e:a5:45:3c:d3:d0:75:cb:e2:e3:
b7:e7:63:ca:0d:db:48:17:70:6f:3f:eb:82:89:16:
80:82:27:4c:a0:00:d2:54:9d:50:d1:81:e3:aa:2b:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C8:22:D6:24:6D:B1:2E:DD:F2:26:8D:FB:D4:B7:F8:54:9A:F2:7C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_8gi1iRtsS7d8iaN-9S3-FSa8nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0e:1a80:1::/48
2a0e:c785:1::/48
2a0e:f200::/48
2a0f:1203::/32
2a0f:1580::/32
2a0f:1e80:d9a8::/48
2a0f:3043::/32
2a0f:31c2::/32
2a0f:3d80:bac::/48
2a0f:7d06:102::/48
2a0f:e847:acab::/48
2a10:67c2:3::/48
2a12:ac43:1::/48
2a13:18c0:2::/48
2a13:e103::/32
Signature Algorithm: sha256WithRSAEncryption
bc:ca:99:da:03:e2:57:19:63:46:c2:d1:20:05:54:f3:f4:90:
16:15:e2:45:7e:17:77:dd:0b:5d:04:c6:66:90:da:31:77:bf:
1c:cc:b3:ad:c0:2c:7a:e8:bd:20:43:3c:5d:60:88:e7:6a:7e:
03:4f:7b:da:92:fb:f2:f1:8c:a3:8e:1b:e3:86:50:65:98:8a:
aa:55:a8:a1:93:d0:6b:d5:44:ad:13:d0:2d:b1:db:a9:4f:f0:
e4:fe:4a:e5:02:2f:0b:8b:55:ab:24:bb:f9:2c:86:b6:99:3a:
57:b7:13:ae:8d:69:92:76:9a:c9:be:0c:23:40:e9:29:31:32:
13:97:b0:af:7e:63:b5:c3:c8:43:cb:c0:7a:d1:98:3a:c2:c1:
92:f2:48:11:4d:39:fd:c3:5f:af:f2:be:cb:30:87:b7:37:75:
36:96:94:46:1f:bd:fc:bd:77:b8:61:bd:79:1d:a4:46:35:ee:
24:b8:bd:30:f9:07:61:52:09:cb:6e:b1:c6:71:5d:d8:7d:a3:
ca:15:d0:17:c0:9f:42:a0:8e:37:d6:34:1c:82:22:74:30:79:
0a:a1:ae:d3:eb:ca:57:fa:b2:65:c2:5b:9c:b1:55:97:05:09:
49:f1:98:c0:36:50:4b:e1:31:e8:1c:f9:ae:3b:fd:04:38:c1:
64:0c:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:18:48 2025 by rpki-client