Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fByE6S4B9TZd7OB7x19eaolYEOc.roa
File: fByE6S4B9TZd7OB7x19eaolYEOc.roa (raw, json)
Hash identifier: 0mvhAr/AGtKvHOZsRgYtTdVi1YRVG53ApCHuiqIbGmQ=
Subject key identifier: 7C:1C:84:E9:2E:01:F5:36:5D:EC:E0:7B:C7:5F:5E:6A:89:58:10:E7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01987F39F1BBF9583B7798C3A0081D78398B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fByE6S4B9TZd7OB7x19eaolYEOc.roa
Signing time: Wed 06 Aug 2025 11:52:40 +0000
ROA not before: Wed 06 Aug 2025 11:52:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206781
IP address blocks: 2a12:ac46:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:39:f1:bb:f9:58:3b:77:98:c3:a0:08:1d:78:39:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 6 11:52:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1c84e92e01f5365dece07bc75f5e6a895810e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:c0:93:e5:79:a4:b0:07:2f:c9:b3:0f:8e:
36:13:19:47:c0:0b:c2:25:e0:d2:7d:42:8a:fe:4d:
08:fc:a7:96:7d:2e:f9:f2:01:cb:a4:9e:74:7a:9c:
e5:54:b3:c4:21:57:7b:f6:af:91:a6:d3:67:9b:cd:
f0:ea:32:6d:4f:e8:fa:9b:72:9c:5c:9f:4d:e1:1b:
88:41:7d:1e:ba:2d:ce:fa:fd:01:b3:fe:84:98:27:
29:a0:c5:d8:d2:2b:19:db:c8:db:f6:13:c1:4a:16:
63:9c:01:a2:fb:ae:cd:f9:9e:56:2d:9b:94:a7:8f:
3b:21:90:87:78:d6:e6:58:ec:17:84:2a:d5:0d:82:
36:20:77:f6:56:31:30:1d:74:0f:77:6c:f5:04:9b:
48:03:3b:7e:d2:43:26:b7:64:d0:ff:af:97:81:8d:
1c:b4:f4:16:f8:96:33:fb:a1:86:49:08:98:97:33:
f1:85:ff:15:75:0a:f3:64:ef:3b:b9:de:d6:28:08:
3a:c3:56:95:43:22:01:ed:5a:7b:49:48:21:c0:6e:
b0:e6:72:0e:74:4d:4b:34:ef:d7:e8:17:08:19:fb:
d0:c2:7b:e0:cf:a5:1f:d4:eb:2e:f1:49:f4:53:ee:
0f:5e:39:c3:e8:3b:96:63:d9:1b:42:43:82:9a:60:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:84:E9:2E:01:F5:36:5D:EC:E0:7B:C7:5F:5E:6A:89:58:10:E7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fByE6S4B9TZd7OB7x19eaolYEOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ac46:44::/48
Signature Algorithm: sha256WithRSAEncryption
b7:90:28:6e:a6:89:07:7d:55:3c:53:5f:79:13:ed:8f:9b:9f:
8a:2b:be:f7:0f:b6:df:1c:a0:5a:88:52:74:70:6a:65:5d:12:
13:0a:ad:bf:b3:53:f6:77:05:9a:45:46:9b:e2:33:d4:9f:93:
8d:51:e3:7e:b9:f3:6b:fe:d6:c2:6f:34:ae:3d:78:46:da:28:
c4:17:a5:f4:30:7e:a8:44:f4:6f:dd:ce:7e:6e:5b:fc:7e:2c:
65:ba:37:2a:da:2c:99:2c:c1:4f:16:68:fd:0b:8e:15:a6:92:
d8:2b:2e:e7:a5:c6:28:35:09:66:e3:be:65:f6:bf:72:49:6a:
8a:57:65:28:bd:a4:e5:52:85:53:c4:c4:1a:de:f0:81:77:89:
11:06:0a:e7:cc:14:cd:e9:61:73:c2:f6:b6:da:4f:70:ec:8c:
d8:dd:eb:c4:0d:2b:42:0f:66:c2:a7:47:e0:2f:0d:96:9a:bc:
fd:d8:e7:ac:61:a2:2d:7e:61:77:70:b2:e3:4a:fb:8f:db:f4:
ef:d8:ed:91:ce:ea:4a:71:d7:91:97:5e:90:41:43:c8:de:7e:
d5:70:26:29:56:5f:88:72:6f:d9:ae:32:90:08:ea:a9:49:e3:
a1:55:de:09:21:a9:52:ed:6e:e3:58:4b:5b:79:08:09:7e:69:
c6:d9:80:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:45 2025 by rpki-client