Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vcniCRcUOCIXhxFvwqdjBaaUqA0.roa
File: vcniCRcUOCIXhxFvwqdjBaaUqA0.roa (raw, json)
Hash identifier: OTgKrhvx9eZWYPaYpE9WGPbGX56SvV9Etv9bhzTRqYU=
Subject key identifier: BD:C9:E2:09:17:14:38:22:17:87:11:6F:C2:A7:63:05:A6:94:A8:0D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A3A6EAE0600E3A1E74A1D0223838DA329
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vcniCRcUOCIXhxFvwqdjBaaUqA0.roa
Signing time: Fri 31 Oct 2025 13:22:03 +0000
ROA not before: Fri 31 Oct 2025 13:22:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 2a0d:1140::/29 maxlen: 32
2a0e:e980::/29 maxlen: 32
2a0e:f500::/29 maxlen: 32
2a0f:3940::/29 maxlen: 32
2a0f:e640::/29 maxlen: 32
2a10:3640::/29 maxlen: 32
2a10:7d00::/29 maxlen: 32
2a11:1200::/29 maxlen: 32
2a12:2c80::/29 maxlen: 32
2a12:dc00::/29 maxlen: 32
2a13:cc0::/29 maxlen: 32
2a13:1940::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:6e:ae:06:00:e3:a1:e7:4a:1d:02:23:83:8d:a3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 31 13:22:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdc9e209171438221787116fc2a76305a694a80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:25:8f:d7:7e:e3:c3:a0:4d:1c:89:04:6d:
eb:fb:7f:c3:b4:68:aa:84:5f:24:48:ec:93:df:7e:
44:cf:7b:34:a6:af:f0:e9:8f:59:b6:0d:64:b6:78:
e6:ec:3a:4a:a4:88:c3:3a:da:5a:93:f4:bf:55:54:
1b:f1:6c:00:6e:a8:d9:42:23:c4:7c:6f:72:6d:b2:
a3:73:86:89:38:30:13:cb:7d:2c:d2:dc:5a:a1:9d:
2c:b0:ae:cd:80:3e:06:0e:55:40:c6:69:62:d9:c8:
74:74:89:ed:55:b4:85:49:89:fa:7d:c0:7f:b1:2c:
3b:66:2f:c6:6a:24:3a:86:46:eb:bf:d8:97:44:56:
b2:6d:f5:27:9f:3c:65:b5:a5:e4:eb:66:f7:02:24:
54:a8:0e:41:3b:98:0f:0c:3f:fb:64:8e:0c:e2:ba:
dc:e8:37:80:b2:0d:f7:4f:68:cd:82:72:40:99:b5:
0a:b2:78:b5:48:62:1a:4d:f4:20:1b:24:5c:93:6d:
59:86:18:32:e6:e1:65:09:b8:db:75:2b:1d:08:dd:
e8:2f:3e:fe:0c:81:72:ad:17:12:5b:5c:ab:41:9b:
1b:51:e5:33:7b:5e:de:82:e9:6a:0d:15:6d:d4:4b:
80:05:dc:ed:2a:29:9a:1d:80:b3:48:71:2a:6f:5a:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:E2:09:17:14:38:22:17:87:11:6F:C2:A7:63:05:A6:94:A8:0D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vcniCRcUOCIXhxFvwqdjBaaUqA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1140::/29
2a0e:e980::/29
2a0e:f500::/29
2a0f:3940::/29
2a0f:e640::/29
2a10:3640::/29
2a10:7d00::/29
2a11:1200::/29
2a12:2c80::/29
2a12:dc00::/29
2a13:cc0::/29
2a13:1940::/29
Signature Algorithm: sha256WithRSAEncryption
21:30:91:22:45:a6:88:be:8a:70:41:3f:d6:2c:6a:df:4c:4f:
31:7f:d9:e3:50:0e:14:27:38:2e:61:87:24:c0:54:6c:9a:70:
c4:f7:7e:23:a2:82:78:01:1a:73:8e:31:12:9b:e6:e2:e7:73:
e8:cc:22:a7:fc:85:05:c2:2a:c9:a0:6c:09:4a:de:a3:77:9c:
f7:ec:76:77:d0:89:4c:2e:1f:8e:4c:40:dd:1c:5f:af:ba:0f:
0b:5c:61:9a:6d:04:14:2c:6d:29:fc:cf:b0:a6:da:43:c2:0a:
d4:cf:cb:9e:ae:7a:0d:b2:86:e1:ed:9b:54:8a:b5:db:03:aa:
dc:d5:58:a5:5f:c4:28:65:61:a9:70:f8:06:00:17:5b:95:85:
d7:80:73:06:b5:b3:30:6c:ce:3a:3e:ac:e6:88:2d:03:94:d4:
d9:d7:c1:84:07:08:2e:cf:60:79:fb:ea:82:6f:56:36:07:5d:
2e:37:c0:27:24:7a:e4:e6:5c:9e:54:7e:f9:ec:e7:75:a8:47:
f9:23:d2:31:c0:56:d4:59:be:61:88:c7:30:72:44:7b:1f:0d:
21:32:a4:ce:4a:99:ab:1e:a1:59:39:f9:69:12:80:b8:af:f0:
6c:54:bc:52:ce:b3:09:2b:10:2c:94:25:02:a7:a5:b5:a2:f0:
52:e3:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:25 2025 by rpki-client