Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TVcU2Jm3MxOrh42ZJk2TfBnrq-I.roa
File: TVcU2Jm3MxOrh42ZJk2TfBnrq-I.roa (raw, json)
Hash identifier: EdF3IzP6QdyCnNLSeH3UTexxxZ26ElaoK9GChT0M4WE=
Subject key identifier: 4D:57:14:D8:99:B7:33:13:AB:87:8D:99:26:4D:93:7C:19:EB:AB:E2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199C586A0457411190EB517F46A5E169E02
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TVcU2Jm3MxOrh42ZJk2TfBnrq-I.roa
Signing time: Wed 08 Oct 2025 20:32:38 +0000
ROA not before: Wed 08 Oct 2025 20:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 2a06:1180:12bb::/48 maxlen: 48
2a06:a600::/29 maxlen: 32
2a06:bf40::/29 maxlen: 32
2a07:95c0::/29 maxlen: 32
2a0a:2d04:9825::/48 maxlen: 48
2a0c:7881:98dd::/48 maxlen: 48
2a0c:d380::/29 maxlen: 32
2a0d:8f80::/29 maxlen: 32
2a0e:15c0:1213::/48 maxlen: 48
2a0e:2440::/29 maxlen: 32
2a0f:7d00:32ba::/48 maxlen: 48
2a0f:ee00::/29 maxlen: 32
2a10:3140::/29 maxlen: 32
2a11:4e80::/29 maxlen: 32
2a12:d100::/29 maxlen: 32
2a13:2bc0::/29 maxlen: 32
2a13:8f00::/29 maxlen: 32
2a13:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:86:a0:45:74:11:19:0e:b5:17:f4:6a:5e:16:9e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 8 20:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d5714d899b73313ab878d99264d937c19ebabe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:ae:35:7e:4d:b4:e3:34:5f:f9:53:57:e8:
e4:b6:18:19:b5:d7:70:d6:0d:cb:d8:17:45:71:b7:
3c:27:2c:71:3a:fd:9b:56:79:07:a1:57:35:f1:17:
73:57:e9:ee:f8:f0:b9:7c:05:49:77:d5:33:a1:c7:
5b:48:2a:1e:5c:94:90:b3:88:dc:07:f5:2c:4e:fd:
b8:c1:ec:62:38:f4:7f:35:67:7b:07:9c:ca:6e:2d:
c2:5e:27:28:c8:e0:64:a4:f3:24:6c:ac:c6:81:5e:
15:f8:ce:92:bc:74:23:df:da:c1:5b:a0:f8:fe:db:
1a:a8:4d:ec:10:7e:3f:aa:63:1d:dc:f8:a6:20:92:
21:4b:aa:e0:83:2e:fa:03:a1:ad:cc:17:6c:7b:53:
12:d4:af:e0:06:cb:83:71:39:15:b3:8b:88:dc:29:
41:81:4b:2f:ec:aa:53:41:40:21:9f:64:1f:e0:58:
bd:a6:7f:8f:3a:d3:7c:3e:45:a7:f0:6f:c5:de:c4:
42:f2:46:03:d2:48:a1:79:05:ba:1d:c2:6e:76:5f:
54:c1:be:21:ae:ea:f7:d9:93:2f:42:21:14:0f:e0:
b5:8b:83:e8:31:0a:91:3e:84:8b:51:97:2f:98:1d:
98:2b:ba:89:53:17:3a:be:2a:fa:73:1d:b1:a3:c8:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:57:14:D8:99:B7:33:13:AB:87:8D:99:26:4D:93:7C:19:EB:AB:E2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TVcU2Jm3MxOrh42ZJk2TfBnrq-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:12bb::/48
2a06:a600::/29
2a06:bf40::/29
2a07:95c0::/29
2a0a:2d04:9825::/48
2a0c:7881:98dd::/48
2a0c:d380::/29
2a0d:8f80::/29
2a0e:15c0:1213::/48
2a0e:2440::/29
2a0f:7d00:32ba::/48
2a0f:ee00::/29
2a10:3140::/29
2a11:4e80::/29
2a12:d100::/29
2a13:2bc0::/29
2a13:8f00::/29
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:76:de:c5:c4:42:93:7f:8c:7a:98:4d:8f:e3:67:2c:b7:e7:
63:70:0f:48:d5:63:38:c6:09:d6:eb:84:9d:44:4e:15:f9:e5:
e3:22:d0:c3:e4:13:b8:13:34:c7:e0:ae:cd:e2:d2:79:1c:f0:
1f:db:08:df:c1:f4:dd:5b:5f:ec:54:c8:83:85:89:3e:f8:0e:
5b:76:a9:3a:bd:40:51:2f:ef:82:96:5d:10:96:ae:e8:52:40:
5a:5e:b2:c1:65:25:70:5d:8b:36:77:42:d9:2b:65:76:67:62:
c3:c8:62:0b:3e:dc:88:00:b4:c2:8d:24:ba:76:6a:85:4a:37:
0a:32:4d:99:9c:f4:60:30:a5:05:e5:ed:46:7c:47:94:7d:80:
0d:93:ec:64:a0:d9:1b:eb:bd:8a:dd:16:aa:f4:b2:56:e6:de:
a5:ef:d3:f1:30:fc:ef:4d:58:d1:d3:1b:70:a7:f9:63:a0:25:
97:0e:a9:d1:e9:f1:1e:2a:14:b9:43:59:e8:c6:a0:b1:c0:39:
0b:cc:fe:34:69:7b:ba:9f:eb:78:1c:2b:fd:72:14:cb:38:85:
d8:03:35:6b:c8:bb:8b:c7:5f:03:0c:ea:3f:f7:95:05:7c:7a:
85:aa:5e:04:e9:e2:77:82:83:89:57:e1:2b:20:4a:6c:e1:62:
be:03:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:28 2025 by rpki-client