Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RUGiit-Y0uF9QjjyTkU_rziLpe4.roa
File: RUGiit-Y0uF9QjjyTkU_rziLpe4.roa (raw, json)
Hash identifier: zOyhJpkUVa5GfPdIQNN0VEmJAz1BM7CHJjgu/zVtp/A=
Subject key identifier: 45:41:A2:8A:DF:98:D2:E1:7D:42:38:F2:4E:45:3F:AF:38:8B:A5:EE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019789B92F866FCB7BF9DDB23CED6F68AE84
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RUGiit-Y0uF9QjjyTkU_rziLpe4.roa
Signing time: Thu 19 Jun 2025 19:45:04 +0000
ROA not before: Thu 19 Jun 2025 19:45:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51852
IP address blocks: 2a0f:dd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:b9:2f:86:6f:cb:7b:f9:dd:b2:3c:ed:6f:68:ae:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 19 19:45:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4541a28adf98d2e17d4238f24e453faf388ba5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:05:ca:79:f8:50:88:a2:5b:b3:a5:df:ac:
b8:e7:0b:e3:5b:7a:f5:8d:1f:af:d2:73:80:f9:70:
97:88:57:86:57:97:fd:6e:40:71:58:45:40:a0:e8:
fc:f7:14:1f:9b:83:73:a8:55:97:c4:27:54:32:ec:
5d:88:45:27:2b:f3:5a:fd:22:60:13:34:03:97:7e:
03:ac:c1:ad:24:53:14:60:46:b2:9f:11:cf:c8:72:
91:a5:5f:15:ae:76:bd:70:f8:bb:ca:53:82:fd:41:
6a:c6:1c:81:02:7e:85:35:61:86:50:74:89:da:6e:
4c:6a:9e:16:86:fb:c8:25:5e:a7:1e:2c:5e:66:89:
f2:df:12:e8:b8:58:81:f6:5b:53:e0:bf:b5:2c:b9:
2e:ba:98:b1:b5:a3:7e:7a:6d:f0:ec:fb:f6:7f:8d:
cf:b5:99:5f:5f:ef:ae:f1:37:18:f4:e7:c6:0d:cb:
72:d1:42:a7:8d:ae:81:c6:54:d3:68:da:11:66:a8:
e2:cd:3a:ba:7e:74:34:1b:1d:6d:32:34:7d:13:6b:
9e:46:71:e9:d8:99:c6:a9:f5:c6:54:49:e9:29:cf:
b0:90:83:2e:60:a0:fd:65:bc:a7:16:8a:b5:7e:d2:
64:85:11:88:6b:a0:a9:1d:5e:ca:a3:9a:02:7e:c4:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:A2:8A:DF:98:D2:E1:7D:42:38:F2:4E:45:3F:AF:38:8B:A5:EE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RUGiit-Y0uF9QjjyTkU_rziLpe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
6b:10:f2:dd:6b:10:e9:3d:6f:85:1a:11:32:7f:d1:47:f6:d7:
21:91:2c:5e:51:df:ab:ea:99:f6:5a:e3:cc:7e:62:66:df:64:
07:fa:83:a2:d1:fb:7d:93:77:5f:91:45:3c:d7:4c:76:1e:47:
a1:32:e1:3e:24:c1:08:89:25:9e:29:1e:ca:12:86:0c:12:9c:
88:14:47:c7:5d:c0:de:83:2d:53:6e:a4:e8:02:cd:30:6d:e9:
f9:f1:d0:43:2f:03:2a:54:c9:e6:2f:fa:b6:56:2a:1c:47:d6:
11:6a:d7:d5:ec:d5:b8:4b:65:58:b0:d5:77:e0:13:84:4d:77:
4c:12:64:ea:17:89:0f:09:f1:09:12:1a:3f:a0:46:48:34:85:
01:7b:61:e3:37:bd:7b:7c:4c:dd:5f:01:91:ab:95:41:02:25:
ff:a6:fd:6f:bf:b4:11:4a:6c:ab:ef:10:9d:28:cf:83:e0:60:
6b:de:75:00:5b:7f:6b:8a:d8:03:57:dd:a6:8e:46:85:0b:fd:
11:1b:8b:74:79:60:c7:ca:2f:ec:a1:79:f6:67:9a:1e:e0:d8:
76:f9:3a:5d:3f:95:4c:48:7d:e6:74:10:10:b8:8c:92:5a:6c:
d5:b0:07:9b:d2:b1:ad:77:f6:87:cb:49:1b:ba:bd:f4:04:bf:
ef:a6:ec:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:28:17 2025 by rpki-client