Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/id2m_Ypw3PLD3mJjbTSGmrGabd8.roa
File: id2m_Ypw3PLD3mJjbTSGmrGabd8.roa (raw, json)
Hash identifier: Y+NcNITbvIx1qQUjlGpR3RE/D72nemmQn4mcRBp7cx0=
Subject key identifier: 89:DD:A6:FD:8A:70:DC:F2:C3:DE:62:63:6D:34:86:9A:B1:9A:6D:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199EDFA78DEAEBD3C060072463B74A1114A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/id2m_Ypw3PLD3mJjbTSGmrGabd8.roa
Signing time: Thu 16 Oct 2025 17:03:59 +0000
ROA not before: Thu 16 Oct 2025 17:03:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 2a0f:1a40::/29 maxlen: 29
2a0f:7f00::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:fa:78:de:ae:bd:3c:06:00:72:46:3b:74:a1:11:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 16 17:03:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89dda6fd8a70dcf2c3de62636d34869ab19a6ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:fb:3a:ad:51:52:a9:5a:3c:b3:40:07:91:
92:29:c4:da:18:97:d5:b8:9e:c2:fa:99:49:a1:cc:
18:92:5d:e9:fa:2c:e6:31:27:ca:b4:37:0d:b2:03:
ef:18:a1:33:6c:a3:0d:38:38:5d:fb:39:b6:c5:61:
03:8b:d5:5b:29:a0:53:95:f0:15:ca:35:c9:70:3e:
ba:68:49:e3:0a:bd:49:87:34:8f:ec:2e:2a:0d:16:
49:df:72:ce:a0:ab:f8:01:c2:fe:24:9a:e5:d2:f3:
84:69:19:d7:ec:83:86:e8:9e:0b:9c:07:57:27:b2:
28:d8:92:19:b7:af:cc:72:3e:ad:22:89:60:5c:9a:
3f:5d:60:3d:4b:15:38:9f:79:fb:5a:80:06:b2:49:
cf:b0:cb:f5:9c:68:84:8c:a4:cb:25:60:00:d2:11:
01:d9:45:0e:df:c5:86:79:73:ee:be:47:42:08:b7:
49:7d:65:64:62:2a:c0:58:f2:60:78:2a:1c:26:ae:
bc:81:93:0c:62:ec:e2:b2:e8:1c:d8:b0:74:47:3c:
e9:1c:da:8f:89:ab:22:49:d0:54:9f:de:ec:47:43:
73:4f:d7:9a:bf:50:78:a3:44:af:32:30:7a:a9:43:
fa:34:88:e8:5b:08:b9:08:b2:2f:f8:44:67:f0:bd:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DD:A6:FD:8A:70:DC:F2:C3:DE:62:63:6D:34:86:9A:B1:9A:6D:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/id2m_Ypw3PLD3mJjbTSGmrGabd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1a40::/29
2a0f:7f00::/29
2a12:d5c0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:d2:22:eb:78:26:ff:7a:5e:46:28:08:46:fc:48:53:d4:c9:
b4:55:70:c8:93:7c:79:16:02:30:c2:49:36:7d:00:37:c5:1c:
fc:c9:f7:53:1a:e9:9e:81:28:5c:f8:8c:82:67:e8:a1:b5:b5:
37:4f:1a:ce:89:95:89:a6:90:e9:07:c4:0e:15:8b:4f:c6:9b:
39:4e:45:de:06:77:cc:fc:cc:b5:db:28:50:25:f8:b4:68:87:
63:d1:29:db:7d:65:1b:d3:24:49:ed:00:d6:91:82:9c:ed:97:
e6:df:b1:1f:bd:30:3a:fc:6e:9a:52:ff:c5:ef:1f:c5:ab:cc:
4a:81:6a:f9:99:45:7a:4e:07:11:b6:49:de:c3:3d:5d:28:cd:
36:af:73:9f:43:a0:d7:36:7a:4c:5b:5d:c1:17:e4:cd:58:ef:
7b:ac:b8:07:5e:8f:6b:e0:15:cc:26:a9:20:6a:15:ab:32:ab:
b4:ca:ac:b0:45:96:ee:49:e8:b8:0f:68:c6:f6:1d:b1:af:96:
79:c9:0f:59:88:9c:03:22:4a:5f:8d:83:96:de:95:0c:d5:db:
d9:15:dc:35:12:6e:d2:4c:17:f8:54:58:f3:a6:f9:32:24:ff:
46:91:02:92:15:76:20:a3:dd:fa:63:a1:1e:a7:30:ee:ac:9f:
ab:6c:42:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:30:16 2025 by rpki-client