Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zaFBP1KpNOcRfbuoWpJ9xhgIj_U.roa
File: zaFBP1KpNOcRfbuoWpJ9xhgIj_U.roa (raw, json)
Hash identifier: g7e6VLvOuHmIVxwUnouQ7ZM4cqObZex5FzsNbtJhgTM=
Subject key identifier: CD:A1:41:3F:52:A9:34:E7:11:7D:BB:A8:5A:92:7D:C6:18:08:8F:F5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199EDDA6F5FF677A58142924FD641C98394
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zaFBP1KpNOcRfbuoWpJ9xhgIj_U.roa
Signing time: Thu 16 Oct 2025 16:28:59 +0000
ROA not before: Thu 16 Oct 2025 16:28:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 2a06:1180:b9::/48 maxlen: 48
2a06:1184:100::/48 maxlen: 48
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:87::/48 maxlen: 48
2a0a:2d04:28::/48 maxlen: 48
2a0a:2d07:a8::/48 maxlen: 48
2a0c:7882:100::/48 maxlen: 48
2a0c:7886:95::/48 maxlen: 48
2a0c:7886:101::/48 maxlen: 48
2a0c:7886:114::/48 maxlen: 48
2a0c:7886:1827::/48 maxlen: 48
2a0e:15c7:95::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:f600:100::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0e:f603:191::/48 maxlen: 48
2a0f:1206:1896::/48 maxlen: 48
2a0f:3047:133::/48 maxlen: 48
2a0f:7d06:66::/48 maxlen: 48
2a0f:7d06:fc9d::/48 maxlen: 48
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:2fd::/48 maxlen: 48
2a0f:e7c6:44::/48 maxlen: 48
2a0f:e7c7:189::/48 maxlen: 48
2a0f:e847:55::/48 maxlen: 48
2a0f:e847:ffff::/48 maxlen: 48
2a0f:ea44:8691::/48 maxlen: 48
2a12:ac46:22::/48 maxlen: 48
2a12:ecc0:44::/48 maxlen: 48
2a13:18c6:1312::/48 maxlen: 48
2a13:8c86:359::/48 maxlen: 48
2a13:c900:77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:da:6f:5f:f6:77:a5:81:42:92:4f:d6:41:c9:83:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 16 16:28:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cda1413f52a934e7117dbba85a927dc618088ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b7:be:19:33:9b:ba:b0:61:49:2e:26:30:6d:
cb:e8:71:4a:69:d3:55:72:7d:45:fa:1d:27:ac:c0:
49:37:c0:6c:0c:d3:1d:2e:0d:f8:de:d8:a1:fd:17:
f4:42:60:91:ce:ff:55:aa:b3:eb:c5:95:e8:fc:7e:
8a:65:6d:1c:3e:36:40:b8:fb:b9:ed:21:c3:7f:8c:
13:5b:7c:5e:8c:1d:78:4d:28:15:16:df:24:13:7f:
be:e2:15:7a:d3:22:9c:3b:73:7d:a3:c0:99:09:8c:
a3:25:63:b1:4d:f8:ca:be:5d:fe:8d:42:c2:73:70:
67:be:38:50:ad:91:f2:aa:77:47:a5:e8:d6:ab:f5:
6f:fb:54:38:fa:21:41:44:8d:18:0f:46:35:75:f6:
f1:ac:83:5f:41:ff:db:76:6f:dc:b0:9c:01:74:60:
2a:5c:8c:53:fe:bb:35:80:6b:24:9e:f4:18:00:bd:
95:c7:c0:84:1b:cb:f5:f8:b9:8f:2d:8a:64:27:c0:
ef:d0:91:ae:d3:3a:63:87:af:23:bf:b9:d0:75:bf:
a6:8c:e4:aa:aa:31:72:f7:fd:0c:ed:8b:5d:50:0d:
59:53:a5:a2:72:1f:af:33:ad:d9:9b:fc:5b:cf:52:
f8:56:90:62:72:c8:69:92:a7:12:a0:0d:e7:cb:32:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:41:3F:52:A9:34:E7:11:7D:BB:A8:5A:92:7D:C6:18:08:8F:F5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zaFBP1KpNOcRfbuoWpJ9xhgIj_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:b9::/48
2a06:1184:100::/48
2a09:17c1:66::/48
2a09:17c1:87::/48
2a0a:2d04:28::/48
2a0a:2d07:a8::/48
2a0c:7882:100::/48
2a0c:7886:95::/48
2a0c:7886:101::/48
2a0c:7886:114::/48
2a0c:7886:1827::/48
2a0e:15c7:95::/48
2a0e:15c7:99::/48
2a0e:f600:100::/48
2a0e:f603:66::/48
2a0e:f603:191::/48
2a0f:1206:1896::/48
2a0f:3047:133::/48
2a0f:7d06:66::/48
2a0f:7d06:fc9d::/48
2a0f:e1c1:22::/48
2a0f:e202:2fd::/48
2a0f:e7c6:44::/48
2a0f:e7c7:189::/48
2a0f:e847:55::/48
2a0f:e847:ffff::/48
2a0f:ea44:8691::/48
2a12:ac46:22::/48
2a12:ecc0:44::/48
2a13:18c6:1312::/48
2a13:8c86:359::/48
2a13:c900:77::/48
Signature Algorithm: sha256WithRSAEncryption
44:4a:67:da:b3:1c:6d:6f:f0:f5:6f:68:a3:6f:2d:05:ef:92:
b9:d0:87:ef:53:bf:9e:c2:d0:45:6e:63:33:60:de:14:c0:bb:
c7:92:35:42:88:96:fe:e4:9b:a0:da:8d:cc:a3:5a:a0:a9:ff:
7c:a3:1a:83:05:75:96:ae:28:9d:07:8e:b7:0e:bc:94:0a:f4:
b4:44:7c:0e:ca:03:d1:69:0a:1f:c6:73:92:79:4d:a5:0a:67:
a2:5c:83:ff:34:d7:09:09:b1:f7:98:1d:3c:04:99:63:0d:84:
50:3f:b1:52:02:2c:50:3a:76:09:9c:98:d6:32:35:ef:af:d2:
0b:ac:d8:6d:df:a9:bd:cb:0a:13:38:c5:d2:95:95:d2:3d:4a:
64:d8:67:43:a3:a0:1b:82:7a:75:c8:9d:6b:d0:3a:17:f6:c1:
39:6f:98:1a:40:a7:b9:29:b7:14:82:83:71:14:d4:fd:c5:77:
00:0b:23:5d:dc:40:85:bf:f1:38:03:be:83:fd:57:2c:d6:12:
19:54:ea:0e:d8:e0:6d:df:52:fa:fd:9e:96:49:72:94:46:28:
d7:a4:5c:de:5c:fc:db:c6:f6:2f:31:e9:86:ba:83:8a:be:4b:
92:15:35:ed:82:e9:fb:02:ed:84:1a:c6:d8:5a:d6:1f:11:9c:
d1:c6:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:37 2025 by rpki-client