Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CL-zKZ7zwjq9QXBSDX5o_sh-Pl0.roa
File: CL-zKZ7zwjq9QXBSDX5o_sh-Pl0.roa (raw, json)
Hash identifier: QOOq4F78+guXSbXgyoBVLlRoOXgG8ITPd+3KaXDQY1c=
Subject key identifier: 08:BF:B3:29:9E:F3:C2:3A:BD:41:70:52:0D:7E:68:FE:C8:7E:3E:5D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197C24D699208EDED0A181254DD214A30BE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CL-zKZ7zwjq9QXBSDX5o_sh-Pl0.roa
Signing time: Mon 30 Jun 2025 19:25:42 +0000
ROA not before: Mon 30 Jun 2025 19:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a0e:1a83:88::/48 maxlen: 48
2a0f:1206:77::/48 maxlen: 48
2a0f:1540::/29 maxlen: 29
2a0f:1640::/29 maxlen: 29
2a0f:1940::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2940::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:30c0::/29 maxlen: 29
2a0f:3140::/29 maxlen: 29
2a0f:3540::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c7:100::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e202:97::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea44:88::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a10:3440::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a11:3240::/29 maxlen: 29
2a11:4800::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a12:2c80::/29 maxlen: 29
2a12:3f00::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5900::/29 maxlen: 29
2a12:5e00::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
2a12:dc00::/29 maxlen: 29
2a12:ecc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:4d:69:92:08:ed:ed:0a:18:12:54:dd:21:4a:30:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 30 19:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08bfb3299ef3c23abd4170520d7e68fec87e3e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:c0:c3:b3:52:4c:da:c1:55:15:a0:b1:ad:
eb:1f:c0:57:87:bc:b8:5d:b8:b2:aa:fd:96:d0:c4:
c7:ac:b3:b6:8c:c9:eb:0c:bf:ab:b9:d1:50:67:ed:
24:6b:c6:69:90:09:f8:eb:a5:e2:f1:f5:ac:ac:35:
fe:3a:6b:3c:38:bd:25:4e:93:37:35:bc:e6:59:ca:
76:1f:46:59:0d:54:64:75:6f:d8:56:f2:45:cf:c2:
13:09:60:69:9a:46:7e:19:63:2f:e2:b5:56:11:55:
56:0b:ea:9b:5b:0b:54:a1:3f:d2:ca:f0:9f:4d:51:
9f:43:59:1b:ca:65:42:44:f7:81:48:e8:2c:41:27:
1a:b6:26:f8:a7:e4:0d:02:b9:51:d1:d8:7f:ea:aa:
cb:70:57:23:cd:83:11:c5:ab:64:29:3a:18:4a:39:
64:49:bf:0b:5d:dc:7e:2e:1d:68:25:3a:fc:bb:9b:
27:be:8a:c0:63:4c:0f:55:6b:a0:91:09:77:44:35:
f5:de:6a:52:5c:29:25:01:9f:d5:42:ec:ff:01:34:
c6:b0:cf:00:62:b9:95:f1:ca:52:ac:9c:be:b3:9c:
58:0b:29:cb:b2:c5:b4:37:d9:84:5a:3d:50:72:a1:
47:79:f0:8a:73:eb:d3:e3:bd:7e:18:e8:71:49:e0:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:B3:29:9E:F3:C2:3A:BD:41:70:52:0D:7E:68:FE:C8:7E:3E:5D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CL-zKZ7zwjq9QXBSDX5o_sh-Pl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a0e:1a83:88::/48
2a0f:1206:77::/48
2a0f:1540::/29
2a0f:1640::/29
2a0f:1940::/29
2a0f:2840::/29
2a0f:2940::/29
2a0f:2a40::/29
2a0f:2dc0::/29
2a0f:2e40::/29
2a0f:30c0::/29
2a0f:3140::/29
2a0f:3540::/29
2a0f:3740::/29
2a0f:e1c0:3::/48
2a0f:e1c7:100::/48
2a0f:e200:5::/48
2a0f:e202:97::/48
2a0f:e440::/29
2a0f:ea40:8::/48
2a0f:ea44:88::/48
2a0f:ea47:ff49::/48
2a10:3440::/29
2a10:3840::/29
2a11:3240::/29
2a11:4800::/29
2a11:8700::/29
2a11:e580::/29
2a11:efc0::/29
2a12:2c80::/29
2a12:3f00::/29
2a12:4b00::/29
2a12:5900::/29
2a12:5e00::/29
2a12:cd00::/29
2a12:dc00::/29
2a12:ecc0:3::/48
Signature Algorithm: sha256WithRSAEncryption
54:ce:33:c2:37:0f:fb:a0:39:ad:67:9b:86:eb:3e:56:75:f1:
d3:1b:9c:e8:de:37:0c:0e:fa:b2:35:4e:fa:56:10:68:08:f6:
01:e3:e1:f1:1e:04:d8:e3:02:07:77:ca:b1:a3:6d:16:c6:3d:
44:e6:50:34:e9:00:5e:d3:bf:84:13:eb:e1:48:8c:16:1d:87:
72:84:3b:c9:24:bf:ae:23:2a:ab:1d:19:8d:b4:01:a0:7e:bc:
dd:a0:3b:93:f9:e4:70:0a:21:23:2f:ec:3e:01:0c:27:b5:6a:
5d:29:20:c2:fa:f3:68:09:b7:86:ae:96:b5:f3:cb:fb:8c:a7:
9a:f4:34:46:35:c7:e0:c3:74:e1:8b:48:47:11:8d:73:e6:1d:
c2:53:b5:df:3b:fa:f5:06:fe:ee:ed:16:1a:35:02:71:2d:1c:
12:12:23:1a:a3:21:f7:6d:2c:30:f7:14:5a:29:0f:06:60:ea:
ef:b8:36:78:cd:dc:c5:72:af:42:74:a4:64:aa:0a:6c:ca:15:
7a:0d:9d:98:ae:8b:0a:b9:f9:e8:70:27:ff:7f:f9:a7:90:66:
14:74:02:24:85:f5:62:45:64:27:6f:8e:1a:34:d6:40:fe:b6:
a4:58:34:3b:7c:ee:bc:50:9c:50:7c:fd:26:ea:ec:01:68:9a:
ee:86:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:54:11 2025 by rpki-client