Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_jrvhyHWTpA_BWCOIJ78vU32pYg.roa
File: _jrvhyHWTpA_BWCOIJ78vU32pYg.roa (raw, json)
Hash identifier: 5YOye5ucRjJ5DmJAyE8wr4B5Ju2eHOLOuH1Cl/C+PdA=
Subject key identifier: FE:3A:EF:87:21:D6:4E:90:3F:05:60:8E:20:9E:FC:BD:4D:F6:A5:88
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019884BAB49B44A9461B130538874BFBD44C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_jrvhyHWTpA_BWCOIJ78vU32pYg.roa
Signing time: Thu 07 Aug 2025 13:31:24 +0000
ROA not before: Thu 07 Aug 2025 13:31:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a11:89c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:ba:b4:9b:44:a9:46:1b:13:05:38:87:4b:fb:d4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 7 13:31:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe3aef8721d64e903f05608e209efcbd4df6a588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:aa:d0:29:6d:7d:c9:4c:78:3b:5c:e4:ee:
9c:d3:b6:5a:ae:b7:dd:82:26:a1:96:37:8d:53:de:
b6:96:d1:88:9f:23:13:82:5e:a4:ae:aa:d0:36:a6:
31:49:f3:e2:87:d8:74:b0:a4:19:5f:fd:4a:ce:3c:
27:fe:99:d1:5d:fb:d4:4c:ff:8d:47:b7:1c:32:c4:
c1:19:c8:22:9f:ad:ec:d3:e6:09:0e:0f:20:01:75:
57:a0:e7:89:a4:29:87:8d:0f:03:52:43:90:24:e5:
b9:d5:93:85:cc:51:4d:be:8f:2e:61:45:ec:50:41:
fb:f6:6b:eb:2d:27:ea:7b:76:69:99:8a:58:11:4b:
98:bd:ac:27:cf:d4:c7:13:53:c1:56:96:5c:62:b3:
41:0b:54:21:a9:5f:7b:42:b9:da:5a:8a:4b:94:33:
3a:de:b3:1f:90:e2:ff:af:08:df:a0:94:a1:31:8c:
b5:15:72:b2:6f:e6:65:0c:a7:1b:45:60:a8:59:34:
98:c5:7d:de:9d:aa:cc:f2:46:77:44:0f:dd:aa:31:
d1:d4:1d:c8:3e:58:2b:60:44:04:2e:69:3e:54:8b:
24:fb:04:21:0e:e0:de:18:17:f6:4c:14:cd:e5:17:
0b:f2:41:3b:81:e9:83:ce:39:8e:ea:d5:37:d0:4e:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3A:EF:87:21:D6:4E:90:3F:05:60:8E:20:9E:FC:BD:4D:F6:A5:88
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_jrvhyHWTpA_BWCOIJ78vU32pYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:fa:28:a1:19:92:b6:0b:55:4a:ed:85:d3:bf:fb:b1:4d:ea:
1a:38:f5:0b:28:85:38:c3:4c:9e:0a:eb:c6:ab:95:b4:8b:90:
5a:e9:82:62:cf:a6:6b:eb:9a:86:ca:ea:c9:41:5b:c4:3c:f2:
9b:3d:ff:c1:f2:17:b3:8a:51:4f:c5:c9:9e:17:f3:c6:a0:ed:
45:2b:6b:18:b0:bf:64:7a:1f:93:36:52:db:e7:3a:c6:31:ff:
25:33:63:43:1e:d3:95:f3:cf:ac:cd:dc:ce:00:03:66:46:b1:
52:ba:0c:d5:8a:af:be:2b:6f:bd:2a:01:4d:37:27:62:3e:67:
af:82:ef:b3:99:83:9f:17:42:fa:24:00:0f:40:d3:0e:41:c3:
c2:a5:97:52:a8:28:81:9b:3b:00:15:b3:1b:2d:f1:1d:50:1d:
74:b9:b6:00:08:87:16:7a:34:83:0a:9c:0b:9d:77:92:12:36:
ba:1e:17:ad:a8:37:8b:ed:6a:4c:d2:af:74:e6:da:90:f8:4d:
fe:c9:79:95:97:af:e2:80:bd:d8:6b:e7:6e:18:aa:c2:d5:dc:
a7:df:80:89:f7:a9:0c:cd:da:6d:8f:00:43:cc:e6:5b:fe:5a:
6f:6f:5e:65:b7:39:e8:5c:9d:1b:96:99:ae:1a:03:3f:84:35:
d4:32:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:04 2025 by rpki-client