Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fRhNmf8x2HNrAY35ZvV_-E0ExF4.roa
File: fRhNmf8x2HNrAY35ZvV_-E0ExF4.roa (raw, json)
Hash identifier: iZh4l2yk6fOSJVJ8o1M5TGx2MmJ9rw7Pv/IXdYyDVBQ=
Subject key identifier: 7D:18:4D:99:FF:31:D8:73:6B:01:8D:F9:66:F5:7F:F8:4D:04:C4:5E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01977406E34FB0251540D04008E3B80A1F16
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fRhNmf8x2HNrAY35ZvV_-E0ExF4.roa
Signing time: Sun 15 Jun 2025 14:38:17 +0000
ROA not before: Sun 15 Jun 2025 14:38:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a12:ecc0:158::/48 maxlen: 48
2a13:18c6:66::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 04:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:06:e3:4f:b0:25:15:40:d0:40:08:e3:b8:0a:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 15 14:38:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d184d99ff31d8736b018df966f57ff84d04c45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:d2:43:0c:cd:dc:17:55:4c:ad:44:d9:77:
8f:e7:79:4c:14:99:ba:6f:88:33:bb:27:68:b8:be:
71:50:fe:bb:0f:35:00:c5:c7:fc:b7:a1:3f:58:4e:
a9:d1:e2:4b:0a:db:77:37:78:8a:9e:37:db:9e:41:
57:e3:80:3c:d6:66:69:9d:45:a2:3f:5c:35:cd:65:
ea:06:77:05:98:c4:18:57:66:0e:88:33:05:ff:0d:
d8:d1:44:67:a7:f7:a1:e9:7a:0c:c1:14:d7:3e:d6:
e7:1a:8f:73:fc:fd:e7:22:53:14:e0:fe:6a:b5:23:
c1:71:86:ae:97:00:c9:66:23:fb:8f:fb:ed:2e:e1:
fb:0b:ee:04:11:86:1f:46:68:31:22:3f:5b:2d:b0:
13:be:e7:24:80:36:86:db:b5:cb:74:2b:c4:48:fa:
9d:a5:d9:9c:75:7d:8b:02:49:07:b3:28:d4:eb:83:
87:b3:6c:79:de:df:06:be:da:0d:c4:2d:4d:23:64:
15:5e:a2:79:a1:53:50:f2:17:e5:c8:79:56:6a:2e:
97:e8:0b:83:89:40:1d:45:da:59:35:1b:7d:a3:ef:
e0:06:84:bb:d2:0e:59:2b:19:be:08:16:cc:84:ec:
91:8b:6f:55:7c:a2:71:86:12:04:6e:6e:26:e4:06:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:18:4D:99:FF:31:D8:73:6B:01:8D:F9:66:F5:7F:F8:4D:04:C4:5E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fRhNmf8x2HNrAY35ZvV_-E0ExF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.116.0/24
45.9.122.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0f:2500::/29
2a0f:d200::/29
2a0f:db40::/29
2a12:ecc0:158::/48
2a13:18c6:66::/48
2a13:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
36:65:55:a0:e7:20:7d:53:e5:d3:b7:90:5a:71:ae:c7:25:05:
71:46:c1:07:4f:af:a5:6b:c6:2e:71:29:e4:4f:77:4c:97:9f:
1a:19:f2:78:ca:e9:02:c0:6b:45:d1:1f:d7:2f:28:c4:2a:59:
2c:01:88:58:fc:fd:dd:be:91:3c:ff:f0:29:3a:99:eb:8a:b0:
22:4a:75:c9:83:51:6a:5d:28:ca:2f:23:35:3b:e2:18:3b:c3:
7e:98:90:35:56:6f:94:84:ab:50:56:4b:89:a5:5d:58:f9:80:
99:e6:73:b9:54:ef:94:42:6f:27:1d:84:09:e1:0a:10:31:ad:
10:f6:33:ec:cb:d0:51:e9:c5:fc:97:10:31:82:c2:9c:7d:fd:
ea:25:9a:71:14:73:44:97:6c:20:fe:e0:37:8b:13:20:ab:86:
76:1f:31:5a:c1:83:82:38:4b:6f:4c:20:35:46:86:90:5f:15:
82:50:49:0e:c6:91:44:a7:a3:11:7b:fe:35:78:cc:10:6b:2a:
56:1e:d7:5e:3b:01:10:b6:19:7f:d6:a3:6f:6c:9a:3b:e2:94:
de:0d:04:8c:c9:59:8a:fa:76:03:8c:b1:6d:b5:a5:5b:af:63:
ac:0d:7f:18:24:ea:26:0b:c2:af:47:84:85:a6:34:a8:26:51:
97:9a:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:05:10 2025 by rpki-client