Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jxJLVZT3YuE2TmK3o6aimeDU8R8.roa
File: jxJLVZT3YuE2TmK3o6aimeDU8R8.roa (raw, json)
Hash identifier: xT7BGd+QO23YJcce+WKGPB4PFimjTdxDEcy0hH56VUY=
Subject key identifier: 8F:12:4B:55:94:F7:62:E1:36:4E:62:B7:A3:A6:A2:99:E0:D4:F1:1F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199AAB74A4BF7CFB1FCC1F9F9C7FEEE3B12
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jxJLVZT3YuE2TmK3o6aimeDU8R8.roa
Signing time: Fri 03 Oct 2025 15:36:02 +0000
ROA not before: Fri 03 Oct 2025 15:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a0e:1a83:88::/48 maxlen: 48
2a0f:1206:77::/48 maxlen: 48
2a0f:1540::/29 maxlen: 29
2a0f:1640::/29 maxlen: 29
2a0f:1940::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2940::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:30c0::/29 maxlen: 29
2a0f:3140::/29 maxlen: 29
2a0f:3540::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:bc02::/32 maxlen: 32
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c7:100::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e202:97::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea44:88::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a11:3240::/29 maxlen: 29
2a11:4800::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a12:3f00::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5900::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
2a12:ecc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:aa:b7:4a:4b:f7:cf:b1:fc:c1:f9:f9:c7:fe:ee:3b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 3 15:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f124b5594f762e1364e62b7a3a6a299e0d4f11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:f7:5a:52:f5:86:ce:ac:63:0c:c4:61:3f:
3f:6b:10:d8:3f:da:99:f9:4e:40:bf:95:55:26:02:
1f:d4:e2:71:93:52:4f:f2:a1:17:07:0f:17:1b:fe:
98:6c:9d:5f:f8:4e:1b:65:42:8c:c2:0e:0f:d2:fe:
c2:f7:7a:c4:19:df:30:f9:56:d5:17:28:8b:61:36:
87:33:8d:c9:2e:e3:e5:58:38:2a:65:ad:f8:d6:a6:
0c:6c:de:ba:2d:c1:5d:4f:b9:4d:8c:1d:30:a5:71:
30:bd:56:55:40:29:eb:40:f5:96:23:bf:85:c8:63:
9e:3d:15:c7:22:82:3b:a4:1f:57:e1:88:70:18:bd:
7f:01:42:a4:08:9d:84:33:ec:15:34:6b:60:35:0b:
d3:6d:02:b4:2d:c3:bb:8d:f2:0f:ac:cb:7f:7b:88:
0b:1d:a6:74:1b:be:ec:72:40:ae:ea:83:82:4d:6d:
9a:05:7b:0d:9d:aa:a6:db:46:0b:ca:fd:4e:71:c3:
f0:53:09:b9:b3:b5:2b:79:73:e2:36:5e:78:96:bb:
02:82:5e:72:bd:ae:8b:cf:da:69:60:e5:52:76:e8:
fa:47:f8:db:2f:cb:75:fb:00:1d:38:4a:ef:7a:09:
5f:7f:cd:ea:4c:68:37:94:ad:15:51:33:ed:74:b0:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:12:4B:55:94:F7:62:E1:36:4E:62:B7:A3:A6:A2:99:E0:D4:F1:1F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jxJLVZT3YuE2TmK3o6aimeDU8R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a0e:1a83:88::/48
2a0f:1206:77::/48
2a0f:1540::/29
2a0f:1640::/29
2a0f:1940::/29
2a0f:2840::/29
2a0f:2940::/29
2a0f:2a40::/29
2a0f:2dc0::/29
2a0f:2e40::/29
2a0f:30c0::/29
2a0f:3140::/29
2a0f:3540::/29
2a0f:3740::/29
2a0f:bc02::/32
2a0f:e1c0:3::/48
2a0f:e1c7:100::/48
2a0f:e200:5::/48
2a0f:e202:97::/48
2a0f:e440::/29
2a0f:ea40:8::/48
2a0f:ea44:88::/48
2a0f:ea47:ff49::/48
2a11:3240::/29
2a11:4800::/29
2a11:8700::/29
2a11:e580::/29
2a12:3f00::/29
2a12:4b00::/29
2a12:5900::/29
2a12:cd00::/29
2a12:ecc0:3::/48
Signature Algorithm: sha256WithRSAEncryption
d0:33:bf:9a:51:85:d2:8c:6c:19:25:51:84:e8:ad:76:17:b2:
5a:90:c2:9a:ae:ea:40:8b:f7:4c:f6:a5:80:b7:3a:8b:0a:ef:
e5:4b:fb:28:9c:57:c5:74:92:ca:3e:46:16:d3:ba:54:97:4f:
40:9d:34:39:78:9f:c4:30:bb:2f:22:b2:bc:1b:48:51:00:71:
48:30:f5:d8:02:c8:f1:e9:cb:92:52:22:3d:4e:43:e6:e8:6d:
6b:0f:e6:96:e7:3c:ea:20:5f:c2:59:75:f6:fe:e5:3f:2e:b8:
69:28:58:21:b4:c4:fc:e8:76:3e:cd:df:a9:33:47:ca:2c:3b:
a0:86:37:c1:d8:ae:41:11:b7:4b:26:39:8a:c6:34:b7:20:41:
15:45:94:60:72:f4:bd:0a:4d:bb:a6:a2:ca:8e:95:69:ff:8f:
f9:81:3c:f7:8d:45:55:4e:d2:fe:c6:b5:12:df:74:c9:af:52:
aa:55:df:90:43:27:e7:a2:2d:f7:7f:4e:5d:51:d4:01:dd:12:
75:0f:1d:f6:dc:a9:40:39:50:b1:3c:fa:6c:ec:db:5e:2e:cd:
48:fa:86:a8:3a:1b:5a:eb:b4:3e:26:fb:4c:2d:26:aa:a1:a0:
32:5e:44:d9:3a:fe:0c:4f:23:78:47:1b:de:e6:85:42:05:4b:
5e:d1:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:58 2025 by rpki-client