Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3nyV4np4zwwXLOhJJPo7a7WMwec.roa
File: 3nyV4np4zwwXLOhJJPo7a7WMwec.roa (raw, json)
Hash identifier: 9NV12Jh8wI4C6pc90Ej7FzSKwvt9ucfb6ZDsotSi7ls=
Subject key identifier: DE:7C:95:E2:7A:78:CF:0C:17:2C:E8:49:24:FA:3B:6B:B5:8C:C1:E7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197C25028C6E282041A4FA7C623C7845DEA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3nyV4np4zwwXLOhJJPo7a7WMwec.roa
Signing time: Mon 30 Jun 2025 19:28:42 +0000
ROA not before: Mon 30 Jun 2025 19:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 2a09:17c2::/32 maxlen: 32
2a0a:2940::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a0e:1a80:1::/48 maxlen: 48
2a0e:2240::/29 maxlen: 29
2a0e:c785:1::/48 maxlen: 48
2a0e:f200::/48 maxlen: 48
2a0f:1203::/32 maxlen: 32
2a0f:1580::/32 maxlen: 32
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:3043::/32 maxlen: 32
2a0f:31c2::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d06:102::/48 maxlen: 48
2a0f:e847:acab::/48 maxlen: 48
2a10:33c0::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:67c2:3::/48 maxlen: 48
2a11:b200::/29 maxlen: 29
2a12:ac43:1::/48 maxlen: 48
2a13:18c0:2::/48 maxlen: 48
2a13:e103::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:50:28:c6:e2:82:04:1a:4f:a7:c6:23:c7:84:5d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 30 19:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de7c95e27a78cf0c172ce84924fa3b6bb58cc1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:e5:c7:d0:e4:fd:26:4c:8f:f1:09:bb:3d:
21:24:0d:0c:fe:65:9c:77:b0:3f:16:6b:cf:15:74:
57:cb:c3:10:16:22:e3:2d:af:40:cc:3a:ed:a8:26:
8f:2e:54:72:52:7f:a9:00:21:3d:84:f4:cf:e5:ab:
58:1c:95:33:49:55:30:6f:d1:2d:b1:0d:5f:12:44:
e4:7d:c2:f7:87:2d:a3:7c:ce:0c:e6:3d:5c:f3:1d:
f4:18:07:f7:77:c0:b2:f5:cf:eb:e7:26:fc:ae:c9:
61:17:6c:a9:42:c1:8d:cf:9c:71:3f:a2:31:0f:f6:
45:6e:b7:cc:5d:29:46:4f:08:a6:a3:b5:0d:92:63:
4a:76:6a:12:15:ef:a6:7b:ad:89:38:c1:90:a3:28:
61:c8:02:a2:a2:40:15:1f:12:a6:02:ef:41:fd:cc:
5a:7d:19:60:5b:1a:d2:d9:ac:04:9e:70:7b:2c:7b:
82:ae:34:51:62:f6:4b:b4:a9:98:05:25:bb:be:a8:
8c:f6:89:1b:02:93:fb:39:64:45:2f:e2:49:16:41:
2f:20:d6:a0:ba:78:bd:83:51:6c:db:6f:a7:3b:ac:
7a:95:40:fc:47:2c:5d:ec:2f:6a:f4:ed:c9:9e:09:
aa:04:9a:06:ce:27:21:fc:84:9f:32:60:39:84:c6:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7C:95:E2:7A:78:CF:0C:17:2C:E8:49:24:FA:3B:6B:B5:8C:C1:E7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3nyV4np4zwwXLOhJJPo7a7WMwec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c2::/32
2a0a:2940::/29
2a0c:7884::/32
2a0e:1a80:1::/48
2a0e:2240::/29
2a0e:c785:1::/48
2a0e:f200::/48
2a0f:1203::/32
2a0f:1580::/32
2a0f:1e80:d9a8::/48
2a0f:3043::/32
2a0f:31c2::/32
2a0f:3d80:bac::/48
2a0f:7d06:102::/48
2a0f:e847:acab::/48
2a10:33c0::/29
2a10:5c00::/29
2a10:67c2:3::/48
2a11:b200::/29
2a12:ac43:1::/48
2a13:18c0:2::/48
2a13:e103::/32
Signature Algorithm: sha256WithRSAEncryption
23:05:48:9f:83:b4:d2:73:dc:17:95:21:20:be:00:12:ca:b5:
65:90:95:99:5f:87:aa:2e:10:5f:95:01:7c:f7:07:e1:ff:86:
f3:60:90:b5:ec:c4:bf:29:4c:f7:5a:95:6d:96:7b:96:83:05:
da:12:e1:26:15:96:6f:64:c3:8a:ef:0e:a1:ae:5d:d2:40:25:
a6:1e:23:6d:74:4f:da:9a:69:cf:9e:bf:41:95:8e:5b:26:5d:
92:24:0d:de:6c:cc:0b:c3:f4:dc:32:4f:27:1a:d4:b5:4b:0d:
a8:52:5b:25:9a:6b:cf:df:3f:64:41:9e:67:d9:d7:31:4f:5e:
c7:e4:d0:ad:69:77:52:dd:92:2e:6b:7b:20:f7:34:91:1a:84:
af:34:0e:9b:5e:52:0c:ec:00:ba:ed:db:f3:6e:0b:97:8b:c8:
1f:6e:4e:9f:6d:34:99:09:aa:b7:5f:d9:30:fd:9b:79:dd:82:
d4:fa:70:df:fd:e8:9b:ec:b0:fb:cd:dc:d9:d5:24:54:15:34:
8b:1a:94:b9:03:f7:c8:9b:72:88:3f:dd:77:d2:7e:7c:d6:d4:
88:a5:95:81:5c:ce:f6:75:6e:2f:86:61:04:73:f8:f8:b0:e1:
54:5b:08:ab:b1:61:7b:83:17:96:8e:c0:66:2c:fb:91:ef:7d:
de:2f:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:48:59 2025 by rpki-client