Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0MZpZSH2VD1iT58XbezfwQgPSvM.roa
File: 0MZpZSH2VD1iT58XbezfwQgPSvM.roa (raw, json)
Hash identifier: b77RBrJEi59zP9/QMFDIzOUfrGYnz8l54apt3Z3RSpY=
Subject key identifier: D0:C6:69:65:21:F6:54:3D:62:4F:9F:17:6D:EC:DF:C1:08:0F:4A:F3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197A8009759BA43A5497A83692BD5C57899
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0MZpZSH2VD1iT58XbezfwQgPSvM.roa
Signing time: Wed 25 Jun 2025 16:51:40 +0000
ROA not before: Wed 25 Jun 2025 16:51:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396362
IP address blocks: 2a0e:1a82::/32 maxlen: 32
2a0f:1e80:1::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:00:97:59:ba:43:a5:49:7a:83:69:2b:d5:c5:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 25 16:51:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0c6696521f6543d624f9f176decdfc1080f4af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:3a:a1:e2:9c:e3:90:b2:82:5d:9d:48:49:
86:c7:d5:63:e2:bb:52:ac:3a:bf:a9:cc:46:4a:4f:
78:f1:96:26:55:db:80:be:b8:01:7c:6a:5f:5a:66:
a6:02:17:a1:5b:75:a0:e7:6e:db:11:8a:f2:39:fa:
7b:a5:90:ca:1c:ac:27:24:05:e3:6f:4b:9e:54:3f:
50:9a:7e:05:38:27:2f:f1:b7:98:3f:3d:44:38:b1:
21:d1:e7:b5:c9:5e:72:75:02:1e:5c:12:d8:c0:56:
23:cf:88:ce:9d:fe:eb:06:e5:d9:a4:c0:f1:f8:5a:
f8:d3:38:39:8b:28:40:dc:3f:d0:de:1a:69:aa:88:
b5:eb:7e:e1:b0:4f:70:0f:dd:33:37:94:3f:3c:7e:
fe:69:2b:4f:68:ca:4e:ff:3f:b9:47:c5:6e:12:0a:
8b:71:96:d6:fd:7f:d9:d6:80:dc:38:95:5d:9d:c3:
53:2b:f8:26:df:a8:5b:a7:e4:bc:7f:e4:21:8a:c6:
19:e5:9a:c8:5e:26:dd:c7:87:fb:2b:14:c5:e3:b5:
63:b4:36:fe:6d:d5:58:de:08:3e:3f:40:42:58:fb:
3c:54:6d:4f:db:43:62:7b:c9:8f:a8:11:0c:c2:81:
72:21:98:85:eb:f0:2f:f3:fa:fd:65:f5:fe:3c:e4:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:69:65:21:F6:54:3D:62:4F:9F:17:6D:EC:DF:C1:08:0F:4A:F3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0MZpZSH2VD1iT58XbezfwQgPSvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1a82::/32
2a0f:1e80:1::/48
2a0f:3d87::/32
Signature Algorithm: sha256WithRSAEncryption
33:8f:f2:35:e5:6b:9b:e3:17:02:e7:12:81:da:f6:b0:ac:7e:
fa:bd:34:71:e0:c6:fd:03:e5:88:23:24:b2:0d:2d:20:21:40:
47:c8:ab:84:a5:df:5c:6e:d8:b1:2e:ce:09:66:86:6c:6f:19:
fa:74:b3:d6:5a:ba:e0:e5:67:f7:3c:3a:1d:e1:ad:0a:ce:40:
7f:5e:e8:62:87:fb:e1:39:55:b5:10:76:cd:96:04:4c:af:4f:
f3:28:3b:bf:26:af:80:0e:5a:47:70:7d:58:55:cd:5c:57:14:
90:44:62:5c:0f:e4:ce:17:20:fb:c6:c1:bb:09:de:6c:b3:d5:
10:81:cd:f4:4b:a4:82:0c:d2:4c:43:00:01:43:9d:d2:e5:fd:
e8:db:ed:66:f4:1b:5a:84:72:6d:52:1b:3c:01:6a:51:f5:d3:
27:47:54:7f:68:e3:ef:7b:5d:2f:b4:37:f9:a0:7e:05:e6:94:
bf:da:eb:e1:d8:4a:38:1f:f8:f4:76:47:1b:dc:35:d4:96:12:
ac:05:5e:a7:89:1f:d3:99:22:61:ae:e0:a0:ad:a6:a9:4e:bb:
3d:58:8e:cf:3d:cb:15:5f:39:e9:f2:3f:79:26:ba:20:9f:cb:
34:01:92:85:89:92:a9:22:ff:db:5d:1b:6d:f9:56:ad:8a:74:
d4:39:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:31:35 2025 by rpki-client