Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mZCo3QODepWg43KdWDzYkxtel_Q.roa
File: mZCo3QODepWg43KdWDzYkxtel_Q.roa (raw, json)
Hash identifier: V2m0nodRazKN4mK2zJvrC6sYc6vZjL5DVn4iNLN1kbA=
Subject key identifier: 99:90:A8:DD:03:83:7A:95:A0:E3:72:9D:58:3C:D8:93:1B:5E:97:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01999A8FDCCE3E55059AE5BDBF2F451A3DE8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mZCo3QODepWg43KdWDzYkxtel_Q.roa
Signing time: Tue 30 Sep 2025 12:19:03 +0000
ROA not before: Tue 30 Sep 2025 12:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42881
IP address blocks: 2a0f:2f80::/29 maxlen: 29
2a0f:4f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:8f:dc:ce:3e:55:05:9a:e5:bd:bf:2f:45:1a:3d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 30 12:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9990a8dd03837a95a0e3729d583cd8931b5e97f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:b2:09:f6:8d:22:b9:96:d8:a4:e2:16:91:
94:11:5c:0b:a0:59:30:ce:42:3b:bc:4f:3f:c4:5c:
c1:45:ec:a6:d9:c4:47:1f:6a:af:50:c5:52:4e:f7:
a6:f0:92:85:8b:90:6f:99:c2:d3:d9:b6:e7:8a:c7:
13:c5:97:29:12:54:ee:8e:66:71:0c:65:7f:89:32:
88:66:e0:10:b7:60:00:19:83:f0:17:13:4b:d1:aa:
5c:51:92:fd:01:3b:0e:a7:69:5c:c5:2b:f4:52:4a:
95:47:35:32:40:b9:a1:d7:e1:89:2d:6b:d4:83:ad:
b4:be:ff:af:9d:80:a7:85:39:ec:94:02:89:63:a6:
fc:1f:f2:c0:10:94:37:c1:49:ec:78:cf:e1:73:93:
bd:b6:3a:08:54:ed:56:78:37:36:cc:c9:61:15:36:
f8:df:da:b9:30:28:1c:35:18:d4:e7:b8:a2:6e:d3:
81:9d:7d:3a:ef:ac:1f:9a:c9:ae:b7:dc:a4:ed:f4:
cb:5b:bf:82:b0:5f:95:b4:ab:47:13:02:32:fc:b6:
8a:a5:65:2d:f6:ae:3c:e8:91:91:c0:09:d8:94:e0:
d6:fe:08:c1:72:7f:68:38:f2:6d:19:86:4d:aa:5f:
1e:58:f9:b4:c3:e4:c7:cb:b7:8b:c8:43:e8:82:98:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:90:A8:DD:03:83:7A:95:A0:E3:72:9D:58:3C:D8:93:1B:5E:97:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mZCo3QODepWg43KdWDzYkxtel_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2f80::/29
2a0f:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
05:d4:dc:91:09:65:c3:d5:76:cb:71:2c:cb:de:1a:be:f2:f0:
87:bb:00:e3:11:d3:e5:76:a0:38:44:87:b9:0e:56:c5:b4:cf:
d4:e7:8c:47:ee:4f:e3:bf:77:86:11:94:1d:55:4a:f5:23:0c:
e0:f7:68:d4:fa:96:7e:f1:5a:5d:6f:b3:8c:40:76:ac:07:79:
4e:9e:de:13:15:61:e4:7e:c0:1e:0a:b5:05:aa:56:60:e3:62:
c8:37:be:6d:5f:49:c0:3a:f8:3d:dc:5c:fc:22:aa:cb:6e:29:
41:d1:eb:ed:2a:39:9d:1b:f4:57:2b:7c:70:32:5b:71:4f:8c:
51:34:64:b7:87:98:50:09:1e:e2:7b:e2:15:39:be:23:d8:3f:
ea:58:51:32:23:82:c7:99:09:9d:d4:71:fa:4f:b6:28:bb:b9:
e9:5a:b7:e4:23:d0:0c:6f:5b:e6:7a:b9:d9:84:57:75:17:6a:
3a:17:44:66:e8:06:08:4c:94:c0:5d:f2:ef:42:36:41:09:c8:
c1:93:2e:2a:e1:cb:c5:0f:17:16:86:30:8c:2a:db:c7:1f:2a:
98:dd:c9:e8:8b:0b:b3:2e:4a:f0:cc:bc:77:2a:b7:fe:ba:fa:
7c:92:da:32:eb:66:1d:01:63:ce:15:b5:f5:ec:2d:68:3d:ee:
50:d0:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:59 2025 by rpki-client