Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fEL6riWNeds6Jc_dVAe__SclXx0.roa
File: fEL6riWNeds6Jc_dVAe__SclXx0.roa (raw, json)
Hash identifier: a2fdzgqa1KHvN7U5djsmMBgJJqtJRP6YI7mQdWlBdGk=
Subject key identifier: 7C:42:FA:AE:25:8D:79:DB:3A:25:CF:DD:54:07:BF:FD:27:25:5F:1D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A3023CAF1B21272665F4CBF6777C97362
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fEL6riWNeds6Jc_dVAe__SclXx0.roa
Signing time: Wed 29 Oct 2025 13:24:03 +0000
ROA not before: Wed 29 Oct 2025 13:24:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213505
IP address blocks: 2a0f:27c0::/29 maxlen: 29
2a13:540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:23:ca:f1:b2:12:72:66:5f:4c:bf:67:77:c9:73:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 29 13:24:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c42faae258d79db3a25cfdd5407bffd27255f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:70:88:11:7a:13:88:78:fc:50:c4:0f:0d:
f9:3b:0f:d0:3b:74:bd:75:55:ee:3e:06:20:1a:ff:
4e:38:62:86:28:d9:9f:c3:1f:a7:b1:a1:8b:fe:92:
f7:fb:20:73:25:f6:11:26:dd:6d:b0:a3:8f:3d:6d:
f2:79:39:01:27:4f:80:3e:f1:81:79:30:f0:eb:ad:
18:9f:11:c2:4d:fc:24:09:02:2a:5d:b3:74:2e:cb:
2d:fd:80:6e:88:49:9e:04:24:67:71:16:6a:bb:3c:
06:fe:ac:cd:2e:09:b9:c5:5c:ee:a6:13:4b:75:96:
62:a0:b2:22:a9:72:e0:89:3f:84:2c:2f:ce:c2:af:
29:3a:02:88:2f:61:29:3f:a1:f7:37:18:bd:58:b6:
22:af:79:8e:a3:90:0d:cd:e6:28:d0:be:07:af:b8:
cb:05:4c:f0:ef:f6:02:9d:26:d3:6d:e8:03:77:20:
cf:83:7c:9a:c0:be:ee:5f:ce:10:11:3c:be:c4:d3:
41:4c:ed:3a:6d:81:82:9a:f9:ad:38:3a:b6:26:73:
58:d0:3b:71:16:67:ce:c0:b3:b3:77:d9:1e:74:5e:
48:92:49:f9:60:17:8b:43:61:f0:7a:0e:c0:8a:e5:
c1:2a:4a:8e:ee:29:c9:de:45:6c:4b:56:de:3d:42:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:FA:AE:25:8D:79:DB:3A:25:CF:DD:54:07:BF:FD:27:25:5F:1D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fEL6riWNeds6Jc_dVAe__SclXx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:27c0::/29
2a13:540::/29
Signature Algorithm: sha256WithRSAEncryption
83:85:9e:57:a2:61:aa:d2:ab:93:07:1c:6d:f9:3c:b6:71:5c:
79:94:20:bd:a8:de:2c:98:1f:04:d7:f5:c8:89:9f:60:a9:87:
f4:86:40:31:77:fd:62:86:c4:65:a1:de:30:75:82:37:62:ba:
47:13:57:09:95:42:21:6a:22:13:f3:6d:dd:35:0a:5b:56:da:
7a:2e:6d:5c:02:d7:1d:4d:55:11:7b:41:e1:15:81:3d:22:b8:
95:25:cc:3e:08:e5:26:6c:85:ba:fe:a0:73:8b:e4:30:a9:59:
ca:cd:9e:97:3e:73:9c:50:f7:43:5f:6e:22:de:e4:df:80:1b:
ba:69:33:08:77:ec:13:72:a8:3c:c9:fe:77:f3:13:1b:86:dc:
6a:7a:88:b3:1b:cc:e7:0f:2b:38:28:56:69:a9:e3:27:6e:6d:
07:32:50:4d:14:61:67:e1:e5:a9:8a:e2:f5:9f:2e:c7:1f:42:
ac:4f:47:46:ed:d8:04:bb:61:f1:9d:df:8d:cb:51:a4:19:a7:
3b:cd:6b:96:2e:84:dd:8a:72:02:1a:6f:cf:c1:e3:ed:cb:4d:
e8:ec:c8:81:7d:a6:b9:4a:5e:55:ba:45:09:14:fc:da:b3:52:
88:c6:88:41:a0:6d:bc:ef:84:73:8d:14:20:19:7b:d7:2d:87:
6e:de:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:50 2025 by rpki-client