Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fhOe-FKlOT0Wl57xL_2AGsfLPvk.roa
File: fhOe-FKlOT0Wl57xL_2AGsfLPvk.roa (raw, json)
Hash identifier: 4fJwZWWmmSYX3CYNXJXSaR77+0Mun4IFu07TM5xSKao=
Subject key identifier: 7E:13:9E:F8:52:A5:39:3D:16:97:9E:F1:2F:FD:80:1A:C7:CB:3E:F9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019765BD5B2B8DAEED91A10EC4C79D6B8D7B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fhOe-FKlOT0Wl57xL_2AGsfLPvk.roa
Signing time: Thu 12 Jun 2025 20:03:17 +0000
ROA not before: Thu 12 Jun 2025 20:03:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a06:dfc0::/29 maxlen: 29
2a07:bb40::/29 maxlen: 29
2a09:b700::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:2d40::/29 maxlen: 29
2a0f:3240::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:36c0::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a10:31c0::/29 maxlen: 29
2a10:3340::/29 maxlen: 29
2a10:3540::/29 maxlen: 29
2a10:36c0::/29 maxlen: 29
2a10:3740::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a10:6d00::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7300::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
2a11:7440::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:3080::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
2a13:a100::/29 maxlen: 29
2a13:df00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:bd:5b:2b:8d:ae:ed:91:a1:0e:c4:c7:9d:6b:8d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 12 20:03:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e139ef852a5393d16979ef12ffd801ac7cb3ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:e2:5d:78:cf:58:2a:ec:f1:4d:a3:78:3a:
ac:f4:15:24:78:dd:38:a6:f3:f1:53:fa:f6:2b:26:
61:a9:a0:c3:11:c8:da:79:88:76:bb:ff:64:52:6a:
3f:a5:e0:25:80:da:de:fc:5b:ba:15:49:3e:7f:4e:
48:90:54:71:e4:8e:91:06:9c:6d:c6:91:86:68:15:
c0:47:23:20:06:55:d9:33:b6:c7:03:9b:19:59:95:
ce:2d:dc:e6:94:85:84:37:af:36:5a:20:f0:f1:ec:
0e:b3:d7:8c:2e:21:a9:5f:84:d0:5b:b9:75:f7:d6:
07:a2:e9:92:b0:d3:f2:ce:4e:e8:5d:40:39:46:67:
bb:84:83:ab:73:13:05:da:9c:46:78:a7:bb:6c:6b:
b8:0c:91:3f:4e:af:28:75:15:06:14:a0:2b:65:04:
65:62:1f:8b:a8:de:07:ed:8b:74:b8:ba:0a:04:7c:
09:07:ad:24:3a:ba:74:ad:5e:de:8f:6a:08:ef:51:
22:55:99:8c:b9:9a:bd:3f:7a:f6:ce:e3:a8:39:15:
b8:80:9a:c3:14:09:49:50:13:af:86:1f:4f:ec:9f:
3f:3a:fc:29:97:7d:a5:55:13:af:29:4b:24:44:6c:
02:f0:29:21:0b:75:4f:13:ad:68:f6:51:a6:c7:26:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:9E:F8:52:A5:39:3D:16:97:9E:F1:2F:FD:80:1A:C7:CB:3E:F9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fhOe-FKlOT0Wl57xL_2AGsfLPvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:dfc0::/29
2a07:bb40::/29
2a09:b700::/29
2a0d:8f80::/29
2a0f:e00::/29
2a0f:19c0::/29
2a0f:2300::/29
2a0f:2d40::/29
2a0f:3240::/29
2a0f:35c0::/29
2a0f:36c0::/29
2a0f:e540::/29
2a0f:e9c0::/29
2a10:30c0::/29
2a10:3140::/29
2a10:31c0::/29
2a10:3340::/29
2a10:3540::/29
2a10:36c0::/29
2a10:3740::/29
2a10:5400::/29
2a10:6400::/29
2a10:6500::/29
2a10:6b00::/29
2a10:6d00::/29
2a10:7100::/29
2a10:7300::/29
2a10:7500::/29
2a10:7b00::/29
2a10:7d00::/29
2a11:7440::/29
2a11:89c0::/29
2a12:d100::/29
2a13:200::/29
2a13:2bc0::/29
2a13:3080::/29
2a13:8f00::/29
2a13:a100::/29
2a13:df00::/29
Signature Algorithm: sha256WithRSAEncryption
40:a5:b7:95:5d:eb:0a:1f:b5:97:eb:72:1e:98:6d:81:7d:1c:
4e:2b:69:76:f8:e7:3f:21:78:af:6e:ef:7e:78:22:23:82:73:
49:1c:84:fe:71:c6:e9:9f:1f:23:90:47:7c:a0:93:dc:10:f1:
d8:df:d9:84:bd:5c:9c:ce:fd:e2:db:23:2e:06:24:9a:f8:46:
e0:8f:a3:7c:48:17:be:26:ca:78:6e:61:dd:db:1f:f4:93:30:
97:58:ee:01:f8:6e:06:dc:f5:2f:5c:af:54:9c:75:9e:3f:c8:
95:e6:7d:d8:b7:4f:f7:b7:31:31:fa:66:58:60:b8:d7:f8:86:
bd:9d:33:ed:af:77:1a:71:a7:ee:df:23:65:a6:2e:e9:11:3e:
57:03:30:16:23:0a:bf:3c:f0:f1:38:a9:3c:25:86:06:00:88:
3e:ce:f8:b3:90:e8:96:2a:2a:65:c4:02:e3:21:8f:70:41:28:
05:53:2c:87:eb:51:e7:1d:91:42:f5:ac:c0:61:35:49:92:07:
54:7e:05:09:1f:e5:0a:cd:45:9a:a5:69:a8:01:61:37:09:2a:
16:07:29:34:d5:eb:7c:be:7c:a6:45:52:73:60:ef:12:29:d4:
5f:73:bf:12:d8:48:cf:03:a5:ca:4e:d6:9e:31:f0:8d:21:b8:
16:d1:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:00:31 2025 by rpki-client