Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xCdpsCk_UYRsog0ch2-vBRYcIAw.roa
File: xCdpsCk_UYRsog0ch2-vBRYcIAw.roa (raw, json)
Hash identifier: Dlb4DTGaIOSEscf6Eg8LMGBV9OCPXqmQw/ZRC+tU40Q=
Subject key identifier: C4:27:69:B0:29:3F:51:84:6C:A2:0D:1C:87:6F:AF:05:16:1C:20:0C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A44B992779A2E4658B2B88B8411828CAE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xCdpsCk_UYRsog0ch2-vBRYcIAw.roa
Signing time: Sun 02 Nov 2025 13:20:03 +0000
ROA not before: Sun 02 Nov 2025 13:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 835
IP address blocks: 2a06:1180:1c5::/48 maxlen: 48
2a06:1181:100::/48 maxlen: 48
2a06:1183:9999::/48 maxlen: 48
2a06:1184:99::/48 maxlen: 48
2a09:17c1:ad::/48 maxlen: 48
2a0a:2d06:acab::/48 maxlen: 48
2a0c:7886:7b8a::/48 maxlen: 48
2a0d:1140::/29 maxlen: 32
2a0e:15c0:100::/48 maxlen: 48
2a0e:15c7:e8::/48 maxlen: 48
2a0e:e980::/29 maxlen: 32
2a0e:f500::/29 maxlen: 32
2a0e:f601:bf89::/48 maxlen: 48
2a0e:f603:11::/48 maxlen: 48
2a0f:1206:1312::/48 maxlen: 48
2a0f:1584:1312::/48 maxlen: 48
2a0f:1e80:100::/48 maxlen: 48
2a0f:3940::/29 maxlen: 32
2a0f:3d80:acab::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:7d04:2::/48 maxlen: 48
2a0f:7d06:11::/48 maxlen: 48
2a0f:e1c7:99::/48 maxlen: 48
2a0f:e200:5641::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e640::/29 maxlen: 32
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:55::/48 maxlen: 48
2a0f:e7c7:189::/48 maxlen: 48
2a0f:e844:8642::/48 maxlen: 48
2a10:3640::/29 maxlen: 32
2a10:7d00::/29 maxlen: 32
2a11:1200::/29 maxlen: 32
2a12:2c80::/29 maxlen: 32
2a12:ac44:b5a9::/48 maxlen: 48
2a12:dc00::/29 maxlen: 29
2a12:ecc0:316::/48 maxlen: 48
2a12:ecc3:acab::/48 maxlen: 48
2a13:cc0::/29 maxlen: 32
2a13:1940::/29 maxlen: 32
2a13:c900:9876::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:b9:92:77:9a:2e:46:58:b2:b8:8b:84:11:82:8c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 2 13:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c42769b0293f51846ca20d1c876faf05161c200c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:45:2d:9b:41:f8:a2:4c:c2:2c:ca:0b:80:
87:fa:f2:d7:e5:ff:86:30:da:81:14:bc:0a:d7:a6:
74:f0:a9:08:07:a4:8f:f6:35:a6:8b:a4:d4:35:c2:
b4:3f:2c:16:09:63:39:e1:8c:8b:60:8e:4a:7b:ba:
00:1e:5e:06:5c:2b:89:c5:45:fd:cd:db:31:3d:7b:
1b:58:e9:77:34:25:d1:55:ce:27:1a:5b:dc:42:2b:
1b:58:65:f2:f5:68:54:6d:6b:6a:81:4b:a7:47:12:
c8:3e:fc:15:96:b1:df:f7:b3:10:4d:6c:aa:28:e3:
16:3d:8b:c5:cc:c4:1b:cd:d3:a5:e4:e2:1f:7f:8c:
d0:9b:0c:34:f0:d5:51:6d:46:dd:eb:a9:26:89:a9:
0f:1b:c1:81:82:0e:20:78:9a:5b:ce:8e:80:72:c9:
23:24:41:45:07:85:2c:c6:30:79:10:7f:85:a3:f3:
09:73:f9:6f:96:a9:1b:ec:0a:d5:f5:85:6f:7f:7b:
3d:62:94:b7:ac:c9:1b:0c:b0:e9:16:86:7a:29:a9:
fb:39:2a:03:2a:fd:df:8f:45:a0:44:18:9d:af:8e:
bb:d5:38:64:d1:c7:b7:d7:4f:bf:bd:4c:b3:90:7b:
ab:44:59:99:4e:f5:7b:36:a0:06:ff:31:3b:3c:98:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:27:69:B0:29:3F:51:84:6C:A2:0D:1C:87:6F:AF:05:16:1C:20:0C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xCdpsCk_UYRsog0ch2-vBRYcIAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:1c5::/48
2a06:1181:100::/48
2a06:1183:9999::/48
2a06:1184:99::/48
2a09:17c1:ad::/48
2a0a:2d06:acab::/48
2a0c:7886:7b8a::/48
2a0d:1140::/29
2a0e:15c0:100::/48
2a0e:15c7:e8::/48
2a0e:e980::/29
2a0e:f500::/29
2a0e:f601:bf89::/48
2a0e:f603:11::/48
2a0f:1206:1312::/48
2a0f:1584:1312::/48
2a0f:1e80:100::/48
2a0f:3940::/29
2a0f:3d80:acab::/48
2a0f:3d86:101::/48
2a0f:7d04:2::/48
2a0f:7d06:11::/48
2a0f:e1c7:99::/48
2a0f:e200:5641::/48
2a0f:e202:44::/48
2a0f:e640::/29
2a0f:e6c6:101::/48
2a0f:e7c6:55::/48
2a0f:e7c7:189::/48
2a0f:e844:8642::/48
2a10:3640::/29
2a10:7d00::/29
2a11:1200::/29
2a12:2c80::/29
2a12:ac44:b5a9::/48
2a12:dc00::/29
2a12:ecc0:316::/48
2a12:ecc3:acab::/48
2a13:cc0::/29
2a13:1940::/29
2a13:c900:9876::/48
Signature Algorithm: sha256WithRSAEncryption
5f:1d:97:97:27:c0:5e:27:d5:9c:f8:09:9d:cb:6d:ae:9d:39:
01:b8:fc:70:07:85:0c:a6:c6:97:28:a8:04:53:71:fb:c8:fe:
e5:f6:b4:36:11:19:d4:7e:e0:5d:fc:1c:ac:d0:51:26:84:29:
26:9e:d2:a0:93:6a:54:b4:2b:09:a4:1d:22:45:a9:90:14:26:
a8:1b:c7:9c:e7:3a:af:02:56:16:e1:9d:4c:f7:12:4e:08:03:
5f:d2:4e:d1:72:89:71:64:97:22:0d:bf:12:cf:43:0b:1c:71:
4d:46:9f:9d:09:b2:ff:4f:b2:ea:0e:71:80:ca:b2:e9:a4:15:
6d:b9:29:46:0d:85:b6:b8:b0:07:34:50:e8:9f:31:91:3d:b6:
05:d1:b1:70:8b:c0:4c:30:68:4b:a2:04:ad:13:b9:4c:9e:22:
02:c8:8e:63:e3:29:b7:21:09:d6:6b:26:2a:b7:df:72:09:d5:
66:68:a1:fe:77:c4:05:91:ce:1e:0a:e1:e0:f5:c0:fd:4d:fc:
f5:4b:5f:3f:7e:82:ff:98:87:50:86:92:43:a3:7e:42:18:66:
0e:dc:3e:ca:f2:36:5e:ff:c3:b5:c8:a9:67:07:88:55:df:f8:
52:d8:45:ef:d1:22:66:93:9c:16:0e:ab:0d:a7:65:ec:94:58:
f5:38:9b:ef
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISAZpEuZJ3mi5GWLK4i4QRgoyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUxMTAyMTMyMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDI3NjliMDI5M2Y1MTg0NmNhMjBkMWM4NzZmYWYwNTE2MWMyMDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfZFLZtB+KJMwizKC4CH+vLX5f+G
MNqBFLwK16Z08KkIB6SP9jWmi6TUNcK0PywWCWM54YyLYI5Ke7oAHl4GXCuJxUX9
zdsxPXsbWOl3NCXRVc4nGlvcQisbWGXy9WhUbWtqgUunRxLIPvwVlrHf97MQTWyq
KOMWPYvFzMQbzdOl5OIff4zQmww08NVRbUbd66kmiakPG8GBgg4geJpbzo6Acskj
JEFFB4UsxjB5EH+Fo/MJc/lvlqkb7ArV9YVvf3s9YpS3rMkbDLDpFoZ6Kan7OSoD
Kv3fj0WgRBidr4671Thk0ce310+/vUyzkHurRFmZTvV7NqAG/zE7PJgUBwIDAQAB
o4IDZjCCA2IwHQYDVR0OBBYEFMQnabApP1GEbKINHIdvrwUWHCAMMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEveENkcHNDa19VWVJzb2cwY2gyLXZCUlljSUF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBegYIKwYBBQUHAQcBAf8EggFpMIIBZTCCAWEEAgACMIIB
WQMHACoGEYABxQMHACoGEYEBAAMHACoGEYOZmQMHACoGEYQAmQMHACoJF8EArQMH
ACoKLQasqwMHACoMeIZ7igMFAyoNEUADBwAqDhXAAQADBwAqDhXHAOgDBQMqDumA
AwUDKg71AAMHACoO9gG/iQMHACoO9gMAEQMHACoPEgYTEgMHACoPFYQTEgMHACoP
HoABAAMFAyoPOUADBwAqDz2ArKsDBwAqDz2GAQEDBwAqD30EAAIDBwAqD30GABED
BwAqD+HHAJkDBwAqD+IAVkEDBwAqD+ICAEQDBQMqD+ZAAwcAKg/mxgEBAwcAKg/n
xgBVAwcAKg/nxwGJAwcAKg/oRIZCAwUDKhA2QAMFAyoQfQADBQMqERIAAwUDKhIs
gAMHACoSrES1qQMFAyoS3AADBwAqEuzAAxYDBwAqEuzDrKsDBQMqEwzAAwUDKhMZ
QAMHACoTyQCYdjANBgkqhkiG9w0BAQsFAAOCAQEAXx2XlyfAXifVnPgJncttrp05
Abj8cAeFDKbGlyioBFNx+8j+5fa0NhEZ1H7gXfwcrNBRJoQpJp7SoJNqVLQrCaQd
IkWpkBQmqBvHnOc6rwJWFuGdTPcSTggDX9JO0XKJcWSXIg2/Es9DCxxxTUafnQmy
/0+y6g5xgMqy6aQVbbkpRg2FtriwBzRQ6J8xkT22BdGxcIvATDBoS6IErRO5TJ4i
AsiOY+MptyEJ1msmKrffcgnVZmih/nfEBZHOHgrh4PXA/U389UtfP36C/5iHUIaS
Q6N+QhhmDtw+yvI2Xv/DtcipZweIVd/4UthF79EiZpOcFg6rDadl7JRY9Tib7w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:13:28 2025 by rpki-client