Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7PGLH_x-OMvYDOjvzKAtcMw9lHU.roa
File: 7PGLH_x-OMvYDOjvzKAtcMw9lHU.roa (raw, json)
Hash identifier: NM1JrknH3ETeoEIkcsgT0/KQ49yppJBUHbK7DrRZmVE=
Subject key identifier: EC:F1:8B:1F:FC:7E:38:CB:D8:0C:E8:EF:CC:A0:2D:70:CC:3D:94:75
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198AE2D5A3B3950A85D65486C78E7FB678E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7PGLH_x-OMvYDOjvzKAtcMw9lHU.roa
Signing time: Fri 15 Aug 2025 14:41:04 +0000
ROA not before: Fri 15 Aug 2025 14:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209375
IP address blocks: 2a0e:f500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:2d:5a:3b:39:50:a8:5d:65:48:6c:78:e7:fb:67:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 15 14:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecf18b1ffc7e38cbd80ce8efcca02d70cc3d9475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:78:8f:bf:72:69:9a:ce:78:f5:7d:07:f3:
f3:98:41:dd:c0:1b:ed:e4:4f:a0:a0:fe:83:9e:71:
58:41:9f:26:8b:d1:d3:e5:ee:ae:97:55:f2:2f:99:
75:2e:25:9f:e4:72:b8:d4:43:6d:2c:30:3c:61:8f:
d9:f3:ea:de:2d:98:f7:22:e2:52:89:76:f1:6c:81:
1c:bb:e2:cf:dc:03:9b:33:22:6b:76:c2:a6:80:66:
c7:37:f0:ec:5f:7b:c8:f7:16:9a:11:85:75:5b:cf:
e5:88:f3:f6:67:98:27:76:b3:6d:08:91:2f:97:68:
28:c9:2b:e6:32:ae:c7:04:56:35:82:90:cb:65:d5:
b5:f0:86:12:45:8a:e1:80:4f:35:f7:49:55:52:74:
ea:7f:24:de:4b:4f:92:d4:fd:af:c6:92:c3:5a:7b:
49:c0:32:23:81:f2:ce:84:97:3e:b9:29:63:4e:6e:
2a:41:b0:59:6b:35:23:24:f3:95:80:f3:9a:17:35:
3d:b4:a2:2d:8a:a4:ad:c1:60:52:ae:49:74:94:fe:
ef:a3:9c:2f:00:be:4a:dd:e8:b9:af:fb:11:11:28:
d2:29:9e:d8:66:16:65:7b:aa:df:2a:72:62:29:33:
3d:d9:ed:70:c4:ad:0f:31:dd:82:74:0e:ac:1b:b6:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F1:8B:1F:FC:7E:38:CB:D8:0C:E8:EF:CC:A0:2D:70:CC:3D:94:75
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7PGLH_x-OMvYDOjvzKAtcMw9lHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f500::/29
Signature Algorithm: sha256WithRSAEncryption
b0:57:90:4f:c7:ef:02:0d:91:00:05:b7:2f:e4:35:f4:27:8f:
a4:58:b3:e7:8b:71:f4:aa:cd:2f:88:43:f4:69:b4:f9:0f:2e:
21:4f:11:22:2c:ab:a6:34:3a:a1:f6:69:d5:a4:59:b9:a6:5c:
f5:cf:8e:e9:33:07:1d:89:5e:dc:7f:d4:8d:58:16:cd:cd:d9:
28:a2:5e:f4:63:76:be:16:cb:11:f3:72:ec:9a:44:6e:45:65:
87:59:cf:29:83:f1:c4:83:89:15:02:c1:6a:e7:dc:40:60:57:
42:a6:8a:17:20:39:8b:92:be:85:3f:c0:b5:a7:26:18:89:9a:
1d:d6:07:7c:a6:a3:f6:5e:d0:de:25:90:ce:1e:69:f7:78:73:
59:53:50:30:7c:6a:06:f4:92:c5:1f:24:c3:97:4a:c9:3f:e7:
4d:dc:34:73:98:93:37:1d:5a:00:5c:71:c2:48:d7:2a:3d:13:
64:c4:e9:27:e7:aa:ac:bb:7c:17:f0:36:ec:ba:3e:43:fc:ef:
9e:89:9b:79:6e:17:29:33:74:db:39:2c:9b:84:ef:8a:3d:45:
a3:a4:65:be:a8:3f:59:4c:3f:9d:df:00:5c:cf:43:64:8a:db:
14:95:bb:47:c2:6d:2c:6b:62:b3:55:57:8c:2a:c9:44:6e:bb:
a5:4d:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:18 2025 by rpki-client