Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xPY6vRMjiG_ZEj19_W8oQirQcLU.roa
File: xPY6vRMjiG_ZEj19_W8oQirQcLU.roa (raw, json)
Hash identifier: AH0OggBPOnZTLw0ErDg40PzBJOTz2C0I3OxM9OIItyA=
Subject key identifier: C4:F6:3A:BD:13:23:88:6F:D9:12:3D:7D:FD:6F:28:42:2A:D0:70:B5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198B8A42F9E2495880D1C1BCD7FA5717352
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xPY6vRMjiG_ZEj19_W8oQirQcLU.roa
Signing time: Sun 17 Aug 2025 15:27:04 +0000
ROA not before: Sun 17 Aug 2025 15:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 193.8.127.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a12:ac43:1312::/48 maxlen: 48
2a12:d5c0::/29 maxlen: 29
2a12:ecc0:158::/48 maxlen: 48
2a12:ecc6:1312::/48 maxlen: 48
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7400::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:9080::/29 maxlen: 29
2a13:9180::/29 maxlen: 29
2a13:9580::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:c900:77::/48 maxlen: 48
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b8:a4:2f:9e:24:95:88:0d:1c:1b:cd:7f:a5:71:73:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 17 15:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4f63abd1323886fd9123d7dfd6f28422ad070b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:97:ac:ef:16:8f:02:83:7d:7f:d3:4f:a4:37:
0a:2c:cc:00:8d:c2:bd:3a:72:ff:b2:d2:31:3e:7b:
03:e8:3b:79:13:81:4c:96:b8:69:b5:46:8e:22:8d:
ed:65:32:d1:91:fd:19:4e:2a:8a:56:a8:63:28:00:
fb:54:37:33:eb:80:57:35:c1:0c:c8:b3:52:b4:6e:
f2:44:0f:bf:4c:d0:ad:33:e8:fb:1a:69:06:3f:4d:
ea:02:10:cd:e0:65:f3:80:74:44:5f:c0:14:81:ee:
5d:e0:4c:ec:1c:22:b0:64:db:4b:e5:ac:27:58:ba:
71:f2:00:d9:ab:0a:3b:a0:10:f7:94:31:a6:19:3f:
c9:a1:60:61:a0:71:19:b6:fd:3b:94:66:bd:a8:03:
e4:8e:f6:cc:81:0b:11:3e:b3:50:45:b3:da:df:bf:
01:ca:a7:89:24:de:52:c0:d7:f2:ea:31:8f:5b:9b:
e1:de:4e:24:df:b1:31:37:c7:5e:3d:92:0b:c4:24:
10:13:65:7b:2a:c6:80:2e:ca:64:c3:1e:b1:cf:ab:
2d:66:59:dc:ac:1d:a9:40:cd:b8:d7:42:e2:08:29:
b6:37:c6:58:e2:8d:1e:c3:55:6a:d0:fb:ea:f3:89:
ca:5f:15:3d:29:b9:17:6b:c5:a3:64:7b:45:41:85:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:3A:BD:13:23:88:6F:D9:12:3D:7D:FD:6F:28:42:2A:D0:70:B5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xPY6vRMjiG_ZEj19_W8oQirQcLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.127.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/47
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:db40::/29
2a11:8880::/29
2a12:ac43:1312::/48
2a12:d5c0::/29
2a12:ecc0:158::/48
2a12:ecc6:1312::/48
2a13:1380::/29
2a13:18c6:66::/48
2a13:18c6:88::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7400::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:9080::/29
2a13:9180::/29
2a13:9580::/29
2a13:9680::/29
2a13:c900:77::/48
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
73:7a:a4:a1:c1:78:24:76:7f:03:e7:3a:e9:cc:01:45:8d:a2:
95:79:2d:fe:97:2a:8a:5d:45:5d:0d:19:1d:c3:72:1f:2f:e0:
b8:bf:12:4f:d8:c3:b7:85:cf:30:be:82:8c:fc:57:a0:34:27:
89:7d:57:aa:80:0b:d7:06:bd:34:d9:66:95:18:ef:8e:66:20:
5d:f5:29:67:91:d9:7f:42:cd:a1:99:05:e2:50:9f:45:23:d5:
d9:07:b2:b3:d5:52:40:1a:c7:2a:68:1b:c5:63:4a:15:c4:0a:
7a:5b:75:4d:9d:8b:37:96:58:89:56:05:f4:67:93:5c:80:86:
de:6f:83:2e:2b:f1:16:d3:5d:17:82:17:72:bf:6e:0d:65:6d:
ec:ec:24:1f:9b:b7:d3:31:0f:df:0a:10:e9:2d:4d:7a:f3:ce:
e6:c3:e0:20:7d:14:5f:09:ef:d2:53:93:f8:5a:a8:e1:de:07:
2e:c3:63:36:25:47:70:b3:c6:8d:5f:c6:18:81:4d:6a:9c:f2:
95:4d:0a:42:41:26:ab:68:36:eb:53:8f:4b:75:8d:f1:99:5d:
98:97:e7:8d:c5:a1:e6:dd:dc:3f:96:8c:22:9e:f3:3b:d8:0f:
35:1a:b4:13:6d:50:07:3b:70:ca:ac:5d:75:e5:c8:1a:3e:3d:
8d:e7:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:13 2025 by rpki-client