Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IG03yhbxlkbJxMrWq2UNfvcu7d0.roa
File: IG03yhbxlkbJxMrWq2UNfvcu7d0.roa (raw, json)
Hash identifier: oZK8DlaW/oH1p18OgN+oyuh7j+vgMMEIbr4OPkyKlBw=
Subject key identifier: 20:6D:37:CA:16:F1:96:46:C9:C4:CA:D6:AB:65:0D:7E:F7:2E:ED:DD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199EDFC4DB50D6C41CAEA2C46937BA59C88
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IG03yhbxlkbJxMrWq2UNfvcu7d0.roa
Signing time: Thu 16 Oct 2025 17:05:59 +0000
ROA not before: Thu 16 Oct 2025 17:05:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205486
IP address blocks: 2a0f:a200::/29 maxlen: 29
2a10:3240::/29 maxlen: 29
2a10:3640::/29 maxlen: 29
2a10:36c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:fc:4d:b5:0d:6c:41:ca:ea:2c:46:93:7b:a5:9c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 16 17:05:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=206d37ca16f19646c9c4cad6ab650d7ef72eeddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:e7:ff:7b:b9:82:ed:6e:e4:ba:51:79:53:
1e:83:59:93:1a:21:a3:4e:11:26:ca:e6:ad:a9:b7:
20:07:65:95:b2:57:b6:05:1d:e1:4f:5d:1b:42:02:
30:11:10:aa:90:b8:28:3b:29:f4:6c:f9:9c:ac:3d:
7e:e6:27:b0:ea:61:78:40:98:19:06:f9:51:c0:6e:
79:81:2f:b0:70:3b:5e:87:a5:cf:ed:30:fd:c6:aa:
5a:b2:50:63:be:d3:50:e6:02:97:ec:ce:ac:88:c6:
9a:ff:9a:7e:f9:2b:40:85:26:3d:d5:19:24:f8:b3:
4d:43:76:b0:1e:7a:1e:29:07:d0:83:71:be:4d:b2:
8b:b4:54:9f:13:a0:93:18:ac:69:cf:8b:6b:fe:9d:
d4:15:38:82:9b:d6:c4:e7:0a:df:df:64:7d:4f:ce:
86:97:88:a7:7d:bd:42:5b:ed:8c:8a:2d:43:23:27:
30:51:97:0d:ff:e6:13:c4:52:78:8a:82:61:b7:80:
4e:73:47:a8:0b:fd:7d:1c:2a:7e:90:01:43:d5:f7:
3c:92:3a:07:c8:1d:f0:6c:8d:0d:29:03:7e:0c:dd:
b6:73:c4:ba:d1:d4:8e:0c:60:f2:f9:e1:56:81:01:
c9:40:99:81:88:47:21:5b:fe:b9:2e:8d:0c:54:00:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6D:37:CA:16:F1:96:46:C9:C4:CA:D6:AB:65:0D:7E:F7:2E:ED:DD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IG03yhbxlkbJxMrWq2UNfvcu7d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a200::/29
2a10:3240::/29
2a10:3640::/29
2a10:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
cc:cc:56:f3:f2:0f:49:b9:2d:b8:01:9f:55:0b:e3:1d:62:bc:
bf:67:ef:42:64:e4:39:90:bb:cf:96:96:c0:50:87:ab:4e:3a:
1d:72:72:69:c3:3d:df:fe:9c:b2:7b:87:d3:77:42:6a:52:66:
41:5c:5a:03:08:73:eb:06:01:29:fa:d7:4b:2d:af:1a:32:78:
be:15:34:b9:44:a0:e5:60:dd:da:14:ca:4c:14:15:d2:67:0d:
a9:fb:11:16:8a:b9:3d:43:cf:53:a6:18:b5:12:9a:d6:70:77:
47:2c:be:a0:eb:3f:ff:49:c6:b2:45:23:bb:86:36:e3:74:09:
3c:b0:2f:5a:3d:3c:fd:c7:4d:d3:9d:c9:ea:82:fa:21:f9:57:
f5:db:51:0a:61:ea:1f:bc:6e:e5:c3:9a:f1:73:d6:90:f0:3b:
de:3d:7e:60:37:8b:01:f9:36:84:b8:1c:af:06:02:e0:c3:8f:
30:75:18:ee:24:89:08:a4:be:29:d5:3d:da:fa:1c:38:7b:a7:
e0:8e:92:ad:5f:cb:1c:43:c9:9e:b8:f0:2a:bc:5d:d5:7c:21:
39:25:a8:68:ee:39:4f:5c:18:f9:b9:83:0c:89:38:4a:9f:84:
49:2b:01:1f:04:3f:11:a8:aa:0f:4c:2e:72:30:49:19:a5:9f:
3c:3a:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:02:01 2025 by rpki-client