Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q4-Kj3jUoHiAlka5J_8gnJ9LZbA.roa
File: q4-Kj3jUoHiAlka5J_8gnJ9LZbA.roa (raw, json)
Hash identifier: L880L80Zxmfj4mZbu06/sV2O1lO7jPEuoraaV5r8Sxk=
Subject key identifier: AB:8F:8A:8F:78:D4:A0:78:80:96:46:B9:27:FF:20:9C:9F:4B:65:B0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01984B672F0312B60B8B8D2D38974EC7D61E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q4-Kj3jUoHiAlka5J_8gnJ9LZbA.roa
Signing time: Sun 27 Jul 2025 10:21:50 +0000
ROA not before: Sun 27 Jul 2025 10:21:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197992
IP address blocks: 2a06:5280::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a0d:1140::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0f:27c0::/29 maxlen: 29
2a0f:3640::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a10:3040::/29 maxlen: 29
2a10:3640::/29 maxlen: 29
2a10:6300::/29 maxlen: 29
2a10:6900::/29 maxlen: 29
2a11:1880::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
2a11:90c0::/29 maxlen: 29
2a11:9340::/29 maxlen: 29
2a11:9e00::/29 maxlen: 29
2a11:b740::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a13:2f40::/29 maxlen: 29
2a13:4f00::/29 maxlen: 29
2a13:9100::/29 maxlen: 29
2a13:9480::/29 maxlen: 29
2a13:9b00::/29 maxlen: 29
2a13:9d00::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:67:2f:03:12:b6:0b:8b:8d:2d:38:97:4e:c7:d6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 27 10:21:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab8f8a8f78d4a078809646b927ff209c9f4b65b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:a3:d4:7c:09:c2:df:96:15:67:03:81:05:
cb:f5:98:e3:06:d0:2b:62:77:94:4d:0e:0d:c7:d9:
ac:49:6f:88:70:1e:f3:9b:59:4c:5d:fb:1b:5a:41:
d6:12:a3:64:3a:2f:cb:2b:6e:e0:e6:fb:ba:0e:12:
3e:a6:61:a0:78:25:9e:f6:60:76:60:f6:be:94:d8:
7c:f3:ba:0d:d3:d8:8e:61:a0:4b:c2:2d:47:c2:a2:
8d:c7:0a:ef:56:1d:a4:62:85:57:96:70:de:29:ef:
b2:d3:1a:bb:d4:b0:61:80:c0:31:82:0c:a4:a5:48:
cc:f1:d9:41:60:7d:8e:a9:d1:a0:93:a1:7e:1d:9d:
8d:64:3a:ba:bf:1e:59:3d:05:7c:78:ce:df:88:48:
15:ff:11:6a:56:1a:bf:fa:b1:05:72:17:b3:41:b6:
b9:fb:51:d9:44:b5:c7:04:c0:8d:38:ea:3b:3f:ce:
4e:11:88:de:b4:04:fb:70:94:95:3d:12:8e:af:9b:
cb:a4:82:96:fa:80:4d:7e:74:7a:fb:d0:5e:bb:87:
40:14:25:55:2a:d0:79:7c:f9:bd:a4:4c:05:3b:23:
70:b3:9a:1f:73:c7:e2:ee:bf:2e:0c:5c:80:2e:66:
b9:37:c5:49:f8:0d:d7:c1:41:b3:ed:42:ad:44:80:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8F:8A:8F:78:D4:A0:78:80:96:46:B9:27:FF:20:9C:9F:4B:65:B0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q4-Kj3jUoHiAlka5J_8gnJ9LZbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5280::/29
2a07:95c0::/29
2a0d:1140::/29
2a0d:a9c0::/29
2a0f:27c0::/29
2a0f:3640::/29
2a0f:7280::/29
2a0f:9600::/29
2a0f:ec00::/29
2a10:3040::/29
2a10:3640::/29
2a10:6300::/29
2a10:6900::/29
2a11:1880::/29
2a11:3f80::/29
2a11:90c0::/29
2a11:9340::/29
2a11:9e00::/29
2a11:b740::/29
2a11:f040::/29
2a13:2f40::/29
2a13:4f00::/29
2a13:9100::/29
2a13:9480::/29
2a13:9b00::/29
2a13:9d00::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
31:28:90:10:2e:c5:49:df:4e:a9:33:a2:cf:e2:c4:86:11:ae:
23:4e:06:59:11:68:8a:61:88:ae:84:20:71:fe:83:47:5b:c4:
8f:db:71:03:aa:60:39:9e:72:e9:01:32:a7:a5:70:5d:f6:ff:
79:88:99:f4:47:57:b3:bc:4c:fd:cb:77:1d:58:ed:33:49:57:
f6:35:43:c4:11:68:d1:7d:37:eb:36:02:5d:ca:b3:a4:42:77:
21:1d:dc:a4:86:8d:a9:33:02:22:d2:f6:83:14:4b:0a:b7:49:
a4:5e:7d:4d:fc:94:af:55:d7:74:2d:09:ba:5f:8c:3d:b5:ec:
31:c5:43:5c:04:09:8e:03:5a:7e:70:11:46:a4:22:bd:4d:65:
84:58:c5:02:2a:eb:58:a2:21:dd:a6:27:c2:a7:c3:17:02:77:
d2:f7:1d:df:05:7b:53:4b:0c:54:19:d4:fb:0f:79:5c:6a:00:
2c:c4:6b:fa:d2:41:e7:9a:a0:25:0a:8c:44:b0:49:67:9a:83:
6f:e4:15:66:64:84:fd:d9:b3:ad:db:fc:cf:67:82:bb:ae:21:
dd:5e:ad:5e:f0:b0:6f:cc:86:f1:ed:0c:5e:ab:7e:e1:a6:f1:
72:36:e5:73:6a:d9:d1:3d:80:2f:68:b8:14:e3:1f:11:b7:9a:
91:55:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:22:20 2025 by rpki-client