Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3xWUp7g5sqEWqB5fZwuj1Fu42WA.roa
File: 3xWUp7g5sqEWqB5fZwuj1Fu42WA.roa (raw, json)
Hash identifier: rSf6GoasNfwdtRd0tjVZ47NeVuRTK8X06HOS7w85h10=
Subject key identifier: DF:15:94:A7:B8:39:B2:A1:16:A8:1E:5F:67:0B:A3:D4:5B:B8:D9:60
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197A3740A93B342CEA6EEE0E541BB9FE342
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3xWUp7g5sqEWqB5fZwuj1Fu42WA.roa
Signing time: Tue 24 Jun 2025 19:39:40 +0000
ROA not before: Tue 24 Jun 2025 19:39:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a12:ecc0:200::/48 maxlen: 48
2a13:8c86:150::/48 maxlen: 48
2a13:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a3:74:0a:93:b3:42:ce:a6:ee:e0:e5:41:bb:9f:e3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 24 19:39:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df1594a7b839b2a116a81e5f670ba3d45bb8d960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:a2:ee:af:78:2b:be:1a:75:d9:a1:71:53:
b8:94:25:1c:df:db:8b:56:2a:7f:aa:7b:1f:54:c8:
ec:5e:22:37:06:0e:9e:97:84:c9:f7:a7:78:50:ee:
a3:de:95:34:00:65:9b:01:16:14:f3:2d:f3:da:09:
ac:c9:91:95:0a:f7:59:6f:0e:06:25:a0:69:64:50:
1d:4e:ec:1a:b0:d0:eb:a6:24:16:3f:f7:19:07:27:
5e:5f:2c:07:41:bd:14:4d:cb:b6:d2:43:df:ea:7a:
55:0c:79:5d:ad:33:dc:7a:82:c7:3e:84:f9:81:17:
bd:93:39:55:b8:1c:61:30:0b:7c:be:e5:a2:4e:63:
71:66:b5:61:bf:7b:3a:64:aa:eb:b5:eb:05:2a:87:
21:42:0b:4d:78:04:6d:ee:38:35:75:5c:7f:c8:d9:
2e:fb:ed:b4:5d:43:fd:85:b7:d3:57:d6:68:b8:e0:
20:e8:48:34:bc:31:f1:da:d8:f4:be:4f:aa:2d:b3:
98:dc:2d:23:12:11:7d:16:05:46:82:72:84:0b:18:
34:cc:83:89:12:10:e9:37:96:cd:b5:a7:06:e7:bf:
36:f0:1e:d1:22:4e:bb:0d:91:44:92:1f:15:f9:45:
4f:58:a2:70:a0:a3:ad:8a:1b:9c:77:02:6c:59:83:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:15:94:A7:B8:39:B2:A1:16:A8:1E:5F:67:0B:A3:D4:5B:B8:D9:60
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3xWUp7g5sqEWqB5fZwuj1Fu42WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
93.190.246.0/23
IPv6:
2a12:ecc0:200::/48
2a13:8c86:150::/48
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
3a:2d:38:60:2d:6d:69:e4:37:13:f1:9d:92:04:80:14:71:76:
56:00:97:e2:b2:23:67:ee:35:d8:4e:dd:20:d6:69:51:d6:07:
79:82:ad:d0:de:5d:44:bc:3e:6b:3f:29:e3:ab:7d:55:b6:28:
93:07:67:cd:d4:86:df:ad:65:56:ea:78:bc:fb:4b:ad:ee:af:
5a:85:7f:be:5b:86:26:9e:56:11:ab:ee:f3:57:54:41:dd:20:
5d:7b:e1:d8:55:74:5b:14:4a:80:64:c2:d9:aa:66:56:c9:62:
4c:5e:26:ec:2c:24:fb:2d:eb:1e:60:e2:4b:94:d9:89:0c:43:
cb:9f:da:8a:ba:a0:b1:c3:e6:1f:7e:3d:ea:cb:0f:47:dc:b2:
59:d2:58:5b:19:bd:e6:c2:9c:cf:cc:82:9e:49:ce:05:f4:1b:
76:f2:d9:f2:68:a2:6d:5a:04:a2:1b:4c:85:f2:b0:df:8a:d1:
9d:8d:23:aa:31:44:33:5a:32:6e:1e:0c:13:7b:44:e1:b3:f6:
77:54:28:b9:c5:77:50:be:50:72:79:3d:48:d3:69:e9:0c:81:
67:26:94:05:8f:9e:d4:33:f0:62:1e:db:11:88:eb:0d:09:51:
f0:82:ba:23:47:45:f6:33:5b:a4:26:13:b3:dd:3e:e5:f0:bf:
f1:0b:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:23:51 2025 by rpki-client