Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6kxs7i0PPe9qcSQmiR0ypaJEVNY.roa
File: 6kxs7i0PPe9qcSQmiR0ypaJEVNY.roa (raw, json)
Hash identifier: zW4/3AxYdmQe151PLRTXy1R6dazclIOXaXX1PfQOyz8=
Subject key identifier: EA:4C:6C:EE:2D:0F:3D:EF:6A:71:24:26:89:1D:32:A5:A2:44:54:D6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01999A804ABBA5BCE529A77327942421C7FA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6kxs7i0PPe9qcSQmiR0ypaJEVNY.roa
Signing time: Tue 30 Sep 2025 12:02:02 +0000
ROA not before: Tue 30 Sep 2025 12:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209982
IP address blocks: 2a12:2c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:80:4a:bb:a5:bc:e5:29:a7:73:27:94:24:21:c7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 30 12:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea4c6cee2d0f3def6a712426891d32a5a24454d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:ca:76:6f:f3:d7:6b:f6:b1:ca:1a:4c:8b:
69:d0:30:99:90:10:f1:55:4e:b6:66:fc:4c:5b:d6:
f8:90:c9:a4:64:5b:bc:d3:e5:fc:ac:99:5b:68:4e:
c0:9c:a1:8c:55:12:e1:f8:45:d5:41:ff:11:cb:a7:
13:ca:38:80:03:4e:32:29:7b:97:af:b1:55:2b:97:
c7:10:ae:9f:9c:e7:a5:7a:db:98:a9:ee:aa:63:43:
d5:2e:7a:22:b9:c1:f7:f7:34:2d:ad:fb:ff:27:4d:
8b:dc:1e:88:44:42:db:41:c9:41:fc:0b:74:c6:ef:
fe:83:f0:51:9e:29:c1:49:6a:86:ad:32:67:f8:a3:
bf:f1:31:14:4a:25:38:84:f9:9d:86:19:03:56:bc:
a1:92:21:ed:3b:b1:6e:5d:3b:5a:9b:7c:6e:50:52:
d4:4b:ae:7a:f9:b2:40:52:c5:6a:7c:88:75:cd:e4:
2b:35:58:ac:d3:71:ff:61:45:08:9f:1a:f9:b1:a8:
7f:10:d9:cb:f5:1d:51:b0:d7:5b:97:7e:c6:51:30:
d5:5e:54:bf:96:8b:a1:d8:08:ce:89:a7:d1:48:a2:
70:0e:77:db:fc:fb:b8:70:16:60:fc:14:61:48:3d:
dc:4b:69:31:ce:55:fc:08:83:d1:42:bf:f0:9a:f0:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:6C:EE:2D:0F:3D:EF:6A:71:24:26:89:1D:32:A5:A2:44:54:D6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6kxs7i0PPe9qcSQmiR0ypaJEVNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
be:b0:5c:d3:97:90:b8:f8:b0:1f:c7:2d:db:6c:49:3a:62:1b:
96:de:c9:cf:8d:11:5c:88:8d:b2:e9:2d:b8:2b:87:d0:74:21:
87:d6:e3:b2:c3:e3:30:46:a9:85:aa:f5:ed:45:da:7a:a2:9d:
81:cd:56:c6:41:ec:db:30:0a:74:95:62:73:cf:ae:80:1a:c4:
07:03:5f:5d:49:93:75:eb:dd:dd:3d:36:ae:7f:7e:a9:67:da:
06:b2:18:cd:70:79:74:35:5c:41:e8:68:bd:9e:87:90:6a:8d:
5f:8a:02:1c:21:27:28:6a:52:e6:df:6a:57:d2:f0:2a:4f:78:
6b:9f:ea:95:93:41:3c:37:96:0d:fc:04:14:b3:75:f7:c1:c1:
95:ad:cb:5d:76:d5:4c:4c:cb:8f:c3:d8:ea:ee:ab:9b:79:3b:
49:05:95:9b:4c:11:c4:f2:8a:8d:8f:db:ab:3e:20:e5:92:3e:
2c:ae:5e:ed:9f:72:20:15:40:c5:d0:7c:e6:dd:d9:e1:54:d9:
ae:f6:29:a1:72:27:bf:df:af:9c:d1:47:f0:f9:c9:37:8d:bf:
1e:cd:fc:62:2a:a6:d2:04:8d:d9:7e:b7:c9:69:f8:5c:50:5b:
cc:b6:79:95:d9:69:95:2f:0a:d1:bf:8c:f9:69:73:0b:e4:ca:
e8:af:5a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:26 2025 by rpki-client