
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cKr7_RQ52RpCCZR512gCMECgQOY.roa
File: cKr7_RQ52RpCCZR512gCMECgQOY.roa (raw, json)
Hash identifier: fEiQZktzVPLrN/NUnlr2LFmuCkqvJ489bU0lUfiU8Uo=
Subject key identifier: 70:AA:FB:FD:14:39:D9:1A:42:09:94:79:D7:68:02:30:40:A0:40:E6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199AABDB35FD70FCA87630655266AA598E5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cKr7_RQ52RpCCZR512gCMECgQOY.roa
Signing time: Fri 03 Oct 2025 15:43:02 +0000
ROA not before: Fri 03 Oct 2025 15:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205770
IP address blocks: 2a11:89c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:aa:bd:b3:5f:d7:0f:ca:87:63:06:55:26:6a:a5:98:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 3 15:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70aafbfd1439d91a42099479d768023040a040e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:e1:ed:40:39:ad:31:7c:95:11:02:1c:20:
4b:33:0c:f8:d3:06:0c:79:60:b0:e5:89:50:2f:55:
ce:7c:74:dd:bf:3c:81:75:50:b2:2a:d2:43:1a:a6:
82:35:c8:7e:04:ad:16:a7:ee:22:87:85:dd:c1:e8:
c5:e3:a8:60:3b:ee:20:d9:59:5e:2a:97:9c:c1:88:
e8:37:f2:96:44:d6:64:21:68:47:d3:47:eb:56:1c:
2e:a1:d5:2e:98:ba:35:59:4d:1a:54:ba:59:38:5e:
be:2b:4c:28:4d:16:75:ef:17:f1:16:42:1f:cf:41:
f7:ac:a3:c9:38:29:cd:0c:05:e9:8a:0f:e0:70:ef:
2f:e3:3b:ad:67:d5:54:db:5b:23:57:9f:b0:22:ca:
0c:54:e9:2d:2a:a4:19:3a:70:b7:12:49:0c:19:2d:
59:cb:a1:45:a2:02:ec:24:7b:b7:68:4b:cb:45:fd:
b1:6a:65:35:99:62:69:65:84:23:d9:7b:74:5e:99:
11:67:d1:e3:32:d7:e2:b4:6e:d5:1a:e8:65:b6:17:
bc:a0:c6:fd:7b:ae:68:c6:67:84:d6:36:b8:fb:0d:
d9:16:0f:7b:e2:45:9a:87:68:f8:81:05:60:ac:4c:
b4:71:e2:af:08:ff:fb:76:2c:84:5f:b7:f6:17:34:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AA:FB:FD:14:39:D9:1A:42:09:94:79:D7:68:02:30:40:A0:40:E6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cKr7_RQ52RpCCZR512gCMECgQOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
ba:ce:65:f1:6d:67:d0:62:86:77:4b:b3:e2:57:77:3c:41:23:
8e:2c:80:7e:4c:b1:11:cf:da:d4:4a:88:e9:56:79:de:a4:4f:
0b:9a:63:ff:32:20:16:f3:a4:54:d1:be:e1:b2:0a:19:2f:9d:
e3:65:26:72:2a:28:ec:66:b1:63:dd:13:71:fe:be:80:46:27:
f2:04:77:c2:cf:d4:0d:13:f3:5d:e4:4b:2d:4a:d2:17:dc:0c:
3e:02:b0:21:e4:86:43:e1:49:00:5d:6a:0a:2a:f1:a5:6f:45:
be:82:5e:b9:f4:a7:60:46:a4:80:9a:dc:d2:71:e6:51:f1:93:
39:cd:42:a3:98:f5:1b:0c:6f:ef:04:b8:d3:90:aa:c5:b3:b7:
cb:ee:01:ac:cb:d1:aa:04:cd:02:a1:89:10:88:dc:8c:30:33:
e3:bb:5c:2a:f2:6a:d7:04:32:35:9b:a5:f8:8d:db:15:ee:73:
74:4b:b7:35:3a:ed:00:1a:29:c3:08:ee:0d:f5:a2:a9:3f:ca:
9b:43:0a:a6:08:a8:46:39:e1:78:ab:0b:1b:f6:d2:fd:ba:a7:
bd:c9:04:a2:da:32:c1:67:a3:4e:fd:f7:3d:9b:10:43:90:17:
82:93:fc:59:88:bb:64:cb:00:55:66:fe:17:a9:8f:f8:0b:ad:
af:d4:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:01 2025 by rpki-client