Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NHxAe3huGmt4VLZqr0ZTsPXMbVs.roa
File: NHxAe3huGmt4VLZqr0ZTsPXMbVs.roa (raw, json)
Hash identifier: Olx+P6Mk6m54fJP4LCyjaP8czCfmZ2JEJ0aYHZP1gus=
Subject key identifier: 34:7C:40:7B:78:6E:1A:6B:78:54:B6:6A:AF:46:53:B0:F5:CC:6D:5B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01979DCA323E98F7306494D709E724D14FA2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NHxAe3huGmt4VLZqr0ZTsPXMbVs.roa
Signing time: Mon 23 Jun 2025 17:16:03 +0000
ROA not before: Mon 23 Jun 2025 17:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a06:35c1::/32 maxlen: 32
2a0e:1a86::/32 maxlen: 32
2a0f:1200:10::/48 maxlen: 48
2a0f:16c0::/29 maxlen: 29
2a0f:2100::/29 maxlen: 29
2a0f:31c0::/32 maxlen: 32
2a0f:de40::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a10:6f00::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a12:4ac0::/29 maxlen: 29
2a12:ef00::/29 maxlen: 29
2a13:2ec0::/29 maxlen: 29
2a13:8100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:ca:32:3e:98:f7:30:64:94:d7:09:e7:24:d1:4f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 23 17:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=347c407b786e1a6b7854b66aaf4653b0f5cc6d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:e4:be:5d:2d:ca:97:02:c0:02:89:9c:ae:
f1:8e:93:40:3b:63:85:52:4e:36:a3:74:51:18:ad:
0b:bc:86:82:d6:9c:e1:8e:25:f0:42:c0:11:44:39:
9b:20:92:8e:f8:c6:91:31:37:84:2d:cc:6f:15:1a:
eb:c8:39:1f:d7:fa:f8:5c:f8:29:2a:f8:cc:49:e2:
50:7d:1c:37:34:0c:9e:82:93:71:c0:9c:c2:82:a2:
83:9c:58:78:10:f0:b2:7c:e8:c6:ae:cd:8a:a8:36:
46:d9:83:cb:e9:63:ac:77:17:e1:54:dd:fe:11:e4:
26:65:8a:60:d1:21:7b:2b:0e:2b:5b:85:c8:df:4e:
b5:8c:92:d3:c0:dd:22:5e:a7:3a:0c:9a:13:95:d5:
e0:23:b6:b7:98:e5:91:d8:43:7d:ff:34:c1:59:93:
ad:34:77:40:9d:ef:06:33:a9:ff:02:9b:b9:36:3d:
49:e7:60:2e:3a:28:62:4e:73:05:54:b5:cc:fb:49:
3b:60:cf:73:d8:0a:e2:c1:e8:27:9c:c7:44:1f:b2:
c9:5f:c1:d2:fa:cf:d0:29:85:ba:f2:c8:45:bb:76:
12:e3:2c:8c:67:d5:39:8f:4e:c6:a5:78:28:15:4a:
3f:f6:18:65:12:cb:92:56:a1:a4:3d:25:e1:d4:d2:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7C:40:7B:78:6E:1A:6B:78:54:B6:6A:AF:46:53:B0:F5:CC:6D:5B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NHxAe3huGmt4VLZqr0ZTsPXMbVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:35c1::/32
2a0e:1a86::/32
2a0f:1200:10::/48
2a0f:16c0::/29
2a0f:2100::/29
2a0f:31c0::/32
2a0f:de40::/29
2a0f:dec0::/29
2a10:6f00::/29
2a10:7700::/29
2a12:4ac0::/29
2a12:ef00::/29
2a13:2ec0::/29
2a13:8100::/29
Signature Algorithm: sha256WithRSAEncryption
67:ab:ae:f5:8e:c4:9f:b2:27:41:fd:be:38:3b:42:80:8c:ca:
0d:35:ee:0f:8a:18:42:d6:c5:35:3c:d7:a4:18:c8:b9:73:e4:
53:54:96:2f:83:69:b4:81:42:94:f8:e4:88:41:3d:42:e2:34:
22:e0:6e:ab:30:ae:14:dd:3a:52:3e:65:fd:fd:12:38:33:6e:
67:32:8b:c5:a6:b3:c9:ba:e2:19:1b:8d:4b:9b:ec:d3:4f:b0:
c2:af:0b:55:66:73:bf:78:73:1b:fb:b2:6b:62:07:ae:e2:bb:
43:15:2a:dc:86:ed:a8:ca:77:41:20:12:3b:ef:8f:4c:3a:22:
a3:d9:f4:70:43:79:b3:65:21:65:b7:aa:c4:ef:5e:2a:eb:2b:
ed:87:5b:9e:52:67:76:86:06:bb:60:93:ef:a4:70:fd:17:52:
d8:a6:f9:91:b5:b7:7d:af:4e:ab:db:b4:b7:48:6b:20:27:df:
46:12:bc:dd:15:97:b6:25:08:1f:0a:7e:e9:9f:9c:75:a6:19:
4d:3e:e0:ee:af:e8:16:b5:d6:96:22:49:d3:ce:9a:58:4a:83:
f2:8e:af:37:67:6f:b8:2d:8c:a0:4f:d8:36:ff:79:89:d0:40:
48:5e:5c:38:27:17:84:87:a0:a5:3c:d0:1f:e3:d5:d5:0c:39:
84:e2:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:32:29 2025 by rpki-client