Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pj-0_jXXiDL2_b-Vqf-SB8Po3j4.roa
File: pj-0_jXXiDL2_b-Vqf-SB8Po3j4.roa (raw, json)
Hash identifier: IbjRAz9y4JVDM/eRxXc7/XoV3BzndY8UumMbob2bqWc=
Subject key identifier: A6:3F:B4:FE:35:D7:88:32:F6:FD:BF:95:A9:FF:92:07:C3:E8:DE:3E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198C0D69328E49B543A4313E58D5AEF19B4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pj-0_jXXiDL2_b-Vqf-SB8Po3j4.roa
Signing time: Tue 19 Aug 2025 05:39:04 +0000
ROA not before: Tue 19 Aug 2025 05:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197992
IP address blocks: 2a06:5280::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0f:27c0::/29 maxlen: 29
2a0f:3640::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a10:3040::/29 maxlen: 29
2a10:6300::/29 maxlen: 29
2a10:6900::/29 maxlen: 29
2a11:1880::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
2a11:90c0::/29 maxlen: 29
2a11:9340::/29 maxlen: 29
2a11:9e00::/29 maxlen: 29
2a11:b740::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a13:2f40::/29 maxlen: 29
2a13:4f00::/29 maxlen: 29
2a13:9100::/29 maxlen: 29
2a13:9480::/29 maxlen: 29
2a13:9b00::/29 maxlen: 29
2a13:9d00::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c0:d6:93:28:e4:9b:54:3a:43:13:e5:8d:5a:ef:19:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 19 05:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a63fb4fe35d78832f6fdbf95a9ff9207c3e8de3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b9:c9:3b:c6:77:29:54:79:fc:31:ec:f5:cf:
ca:a8:c1:cb:63:77:76:aa:8d:f9:11:c2:e3:f9:4f:
9b:11:b3:34:d4:f2:b3:d4:63:f7:62:62:c1:50:9f:
01:a3:d1:09:ee:d9:eb:d7:30:fc:83:5c:50:92:e0:
62:6e:5c:3a:47:03:a7:e0:dc:3a:16:5f:9b:ee:6f:
ae:80:ab:47:c6:18:33:40:7f:4f:0a:c6:24:d8:59:
61:4c:f7:c5:1a:f5:f4:ed:b8:99:b2:e0:60:d4:7f:
17:84:82:65:9c:3d:ae:7a:15:bd:96:9d:95:b2:65:
fb:41:f4:1c:92:fa:f6:c8:b6:50:da:6b:5e:62:61:
05:03:aa:f0:9b:a2:e3:81:71:0a:e5:1a:8e:84:5d:
73:cd:8c:0e:24:58:e0:ed:06:aa:1f:0a:e1:91:26:
9c:52:3f:53:33:9b:4c:6a:ee:e6:6d:8d:be:c3:82:
77:24:5a:43:2d:e0:b5:2b:d2:f1:a6:c8:f1:19:12:
12:fd:b9:22:0e:01:7b:d6:5d:13:0c:dc:17:69:56:
fa:56:ec:0c:8b:55:93:31:31:ee:a4:b3:c5:fd:c1:
82:07:69:f6:38:58:8e:63:f8:aa:ee:56:9a:43:df:
5b:ef:8f:26:1a:a2:7b:36:fc:a1:5c:13:05:64:d6:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3F:B4:FE:35:D7:88:32:F6:FD:BF:95:A9:FF:92:07:C3:E8:DE:3E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pj-0_jXXiDL2_b-Vqf-SB8Po3j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5280::/29
2a07:95c0::/29
2a0d:a9c0::/29
2a0f:27c0::/29
2a0f:3640::/29
2a0f:7280::/29
2a0f:9600::/29
2a0f:ec00::/29
2a10:3040::/29
2a10:6300::/29
2a10:6900::/29
2a11:1880::/29
2a11:3f80::/29
2a11:90c0::/29
2a11:9340::/29
2a11:9e00::/29
2a11:b740::/29
2a11:f040::/29
2a13:2f40::/29
2a13:4f00::/29
2a13:9100::/29
2a13:9480::/29
2a13:9b00::/29
2a13:9d00::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
92:e9:48:7d:1c:40:1a:a6:1a:5c:33:02:63:2d:db:a4:50:57:
4c:9c:57:67:ba:e6:e0:d8:6c:b7:59:32:42:1e:8f:fc:5f:0b:
01:d7:2b:0b:18:61:12:74:5c:6b:9c:03:fa:3c:3b:f3:25:26:
bb:70:78:86:1f:d9:a7:4e:b2:dd:d9:4a:28:ea:01:bf:30:36:
96:00:b6:eb:2f:de:d9:15:66:f4:bb:91:0b:e7:bf:4d:c1:08:
2c:9b:b5:1d:67:e0:35:0f:61:bb:b0:1a:02:f7:55:5d:b2:64:
ab:16:5d:f7:b5:b5:e1:b6:6a:30:c0:bc:09:2c:3e:1b:35:2b:
34:9d:02:dd:5a:55:f8:ec:8b:26:76:ff:e2:8a:fb:83:ef:14:
b2:00:ff:3b:30:e5:b4:89:9e:44:3a:c3:63:fa:8a:f0:3f:80:
07:96:b6:62:e7:5c:14:8d:b7:a8:83:06:d7:45:6e:66:b0:11:
65:fd:c5:44:54:18:46:0d:e9:56:59:7d:de:3e:35:f0:8a:01:
f0:98:6f:d3:ed:bd:90:9e:ac:a9:da:87:db:85:c2:19:e2:6a:
7c:a6:a5:62:22:da:ba:11:52:25:89:ee:ff:f8:ec:15:fb:d8:
84:74:fd:92:20:f4:53:85:d9:da:98:65:f7:fd:62:8e:8c:49:
5d:3c:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:02 2025 by rpki-client