Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jUOgBC_faljzrLIBpHMVi7IbZtM.roa
File: jUOgBC_faljzrLIBpHMVi7IbZtM.roa (raw, json)
Hash identifier: q1lBbZpfEvneSMZKUoapfemS6UFsOjCS/YyPcXcc7ng=
Subject key identifier: 8D:43:A0:04:2F:DF:6A:58:F3:AC:B2:01:A4:73:15:8B:B2:1B:66:D3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198615E092564E7ED770648300669ADEF87
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jUOgBC_faljzrLIBpHMVi7IbZtM.roa
Signing time: Thu 31 Jul 2025 16:43:29 +0000
ROA not before: Thu 31 Jul 2025 16:43:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 2a06:1180:12bb::/48 maxlen: 48
2a0a:2d04:9825::/48 maxlen: 48
2a0c:7881:98dd::/48 maxlen: 48
2a0e:15c0:1213::/48 maxlen: 48
2a0f:7d00:32ba::/48 maxlen: 48
2a13:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:5e:09:25:64:e7:ed:77:06:48:30:06:69:ad:ef:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 31 16:43:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d43a0042fdf6a58f3acb201a473158bb21b66d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:0f:8f:95:4c:94:d9:bc:f8:4b:6c:6d:00:
d5:15:36:c9:a4:16:6d:e5:c0:a1:ad:29:97:0a:53:
dc:0c:7f:99:9d:c7:ad:98:c5:88:cf:ac:20:4e:d7:
70:1e:3c:85:c1:00:3c:9c:25:6b:ac:a7:07:4d:90:
2d:cb:8f:6c:62:60:2d:b2:5a:a4:fa:3b:fb:75:b8:
0c:12:f0:4a:f9:8f:fe:d5:f1:25:75:07:8b:7f:ba:
7b:09:e4:b7:5c:3e:40:dc:a2:da:0a:e7:65:dc:9a:
35:cc:c5:29:fd:8d:fb:a3:aa:c9:2b:f1:b5:10:70:
17:fb:74:34:3c:0b:a3:f6:c2:cd:73:47:ec:45:de:
f7:55:5f:4f:6c:f2:e9:6e:c4:7f:f3:6d:36:f2:e7:
2a:cf:75:a9:67:c1:02:be:78:95:d3:92:ba:33:86:
c6:f9:d2:a8:e5:21:9e:84:22:ae:8f:df:99:97:4a:
24:ad:be:77:45:84:09:00:a1:65:f2:ed:68:af:ae:
89:a5:ec:3b:d6:de:81:d3:10:f1:6d:41:83:0c:ba:
c8:0c:e3:42:38:1f:c4:32:52:b2:54:cd:87:71:a6:
ac:15:7e:a3:45:85:02:a8:d9:a5:7c:62:8d:6b:26:
4a:53:59:3b:a4:ba:3d:bb:ce:93:92:6d:07:96:a9:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:43:A0:04:2F:DF:6A:58:F3:AC:B2:01:A4:73:15:8B:B2:1B:66:D3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jUOgBC_faljzrLIBpHMVi7IbZtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:12bb::/48
2a0a:2d04:9825::/48
2a0c:7881:98dd::/48
2a0e:15c0:1213::/48
2a0f:7d00:32ba::/48
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
cc:39:24:43:4b:08:ec:ad:eb:0e:fe:a7:68:3a:5d:98:38:e4:
d7:83:00:52:ca:5e:e8:c9:0b:d3:5c:08:ac:bc:d6:d2:cd:49:
ac:61:0c:90:6b:e9:fd:57:87:e5:f5:1c:04:c6:47:11:1c:a3:
1f:2b:4c:46:af:c4:1a:ea:5a:62:63:4a:38:db:a1:95:d9:8a:
15:63:a4:28:bf:1c:95:46:8f:b3:46:ab:60:e8:5c:62:c7:9c:
26:a9:81:19:c2:5e:c4:3f:02:f1:cc:7c:06:f7:7c:c7:b8:4c:
9d:c4:0f:0f:d9:c4:46:00:cf:69:91:81:75:f0:e0:cc:a8:7d:
3f:b2:d3:84:c9:6b:a1:d9:07:af:3d:b1:04:fe:96:81:00:62:
72:97:32:9d:37:57:54:c2:e8:99:f4:92:11:c1:d7:b3:09:71:
64:86:39:4b:95:5a:a4:bc:00:d1:af:87:88:82:b6:91:6a:e9:
0f:d6:34:1d:9c:a1:e7:9e:b2:75:52:f9:b8:64:19:77:86:6f:
d7:2c:c3:e3:93:fc:29:a1:c0:2f:f0:3c:e8:c3:20:c4:ae:45:
94:b8:c6:a3:04:3f:5f:85:eb:eb:53:3e:80:ad:21:3d:a9:be:
38:9e:b1:3f:86:c4:91:4b:d2:43:87:31:50:e6:70:5b:c8:ba:
d6:a2:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:08 2025 by rpki-client