Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/1-rRPCopFYmDMNDGALSnqCobspg8.roa
File: 1-rRPCopFYmDMNDGALSnqCobspg8.roa (raw, json)
Hash identifier: 6hVXHifql97bRcIsJvQpXwPkBPemWPvtCyhSEbh0CDo=
Subject key identifier: FA:B4:4F:0A:8A:45:62:60:CC:34:31:80:2D:29:EA:0A:86:EC:A6:0F
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 01980D93D40624AD2E6FB00E035AED4B0A83
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/1-rRPCopFYmDMNDGALSnqCobspg8.roa
Signing time: Tue 15 Jul 2025 10:14:08 +0000
ROA not before: Tue 15 Jul 2025 10:14:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 46.29.36.0/24 maxlen: 24
2a13:d040:1::/48 maxlen: 48
2a13:d040:2::/48 maxlen: 48
2a13:d040:3::/48 maxlen: 48
2a13:d040:10::/48 maxlen: 48
2a13:d040:11::/48 maxlen: 48
2a13:d040:12::/48 maxlen: 48
2a13:d040:13::/48 maxlen: 48
2a13:d040:14::/48 maxlen: 48
2a13:d040:15::/48 maxlen: 48
2a13:d040:16::/48 maxlen: 48
2a13:d040:17::/48 maxlen: 48
2a13:d040:18::/48 maxlen: 48
2a13:d040:19::/48 maxlen: 48
2a13:d040:1a::/48 maxlen: 48
2a13:d040:1b::/48 maxlen: 48
2a13:d040:1c::/48 maxlen: 48
2a13:d040:1d::/48 maxlen: 48
2a13:d040:1e::/48 maxlen: 48
2a13:d040:1f::/48 maxlen: 48
2a13:d040:20::/48 maxlen: 48
2a13:d040:21::/48 maxlen: 48
2a13:d040:22::/48 maxlen: 48
2a13:d040:23::/48 maxlen: 48
2a13:d040:24::/48 maxlen: 48
2a13:d040:25::/48 maxlen: 48
2a13:d040:26::/48 maxlen: 48
2a13:d040:27::/48 maxlen: 48
2a13:d040:28::/48 maxlen: 48
2a13:d040:29::/48 maxlen: 48
2a13:d040:2a::/48 maxlen: 48
2a13:d040:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:93:d4:06:24:ad:2e:6f:b0:0e:03:5a:ed:4b:0a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Jul 15 10:14:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab44f0a8a456260cc3431802d29ea0a86eca60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:c4:59:d2:ae:d5:b2:6a:49:a8:54:b9:85:
f4:d8:ae:ae:2c:54:a2:0a:75:37:12:18:8f:a2:fc:
06:de:7d:8a:8f:9c:16:c9:5a:0c:d5:98:fb:07:29:
df:bf:91:93:96:65:1d:6a:6d:e4:51:6a:82:a8:07:
28:ea:81:b4:d3:65:70:80:34:6f:5d:a9:fc:18:6b:
9b:a1:60:99:5f:3e:92:fc:6b:2f:72:38:a1:65:ef:
f5:9a:02:00:0e:1b:a3:9e:03:94:bf:57:39:5b:fd:
10:94:e3:25:32:89:31:ec:8c:7f:31:a6:01:62:d1:
48:94:1d:58:a6:08:c8:cd:75:27:49:66:3a:0d:5f:
d9:db:48:77:14:50:0a:95:98:58:67:70:45:b4:67:
af:e5:62:27:5a:a1:2b:bf:85:3f:5c:ba:06:7d:ea:
f1:35:16:29:7f:76:c0:1e:2b:19:73:5e:56:42:c7:
f9:dd:3f:95:8d:e8:bd:55:86:e5:fb:75:a9:bf:33:
72:25:7d:f4:23:2b:d1:da:58:30:a7:f5:56:91:ca:
4e:e1:c2:2b:f2:9e:83:5f:fd:78:13:2a:a1:3e:32:
7c:0e:c1:29:02:3b:b5:e3:3f:f6:3e:5b:82:e2:58:
19:80:03:1b:13:d2:08:95:5c:01:16:bb:0a:29:b7:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:4F:0A:8A:45:62:60:CC:34:31:80:2D:29:EA:0A:86:EC:A6:0F
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/1-rRPCopFYmDMNDGALSnqCobspg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.36.0/24
IPv6:
2a13:d040:1::-2a13:d040:3:ffff:ffff:ffff:ffff:ffff
2a13:d040:10::-2a13:d040:2b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7d:8e:04:e2:8b:af:f4:ae:a8:68:2e:db:e9:6e:14:57:75:f4:
df:f1:5c:09:3a:d0:d7:04:49:8f:4c:df:08:d0:d8:a5:79:cb:
c7:ec:15:9e:8b:45:f2:2a:bb:70:32:55:6e:e0:a0:46:c3:bd:
c3:1e:1d:59:a5:3b:47:ea:ce:ba:ad:0e:b6:25:08:25:d2:f2:
51:5d:d7:f0:4e:d3:83:ac:47:1d:5b:4f:82:4b:cd:a8:f4:a7:
ed:c6:a8:ed:6c:63:bc:56:85:15:e7:55:c3:4c:da:98:9d:1f:
30:09:61:de:15:0a:57:be:4e:61:4f:77:83:0b:55:13:12:79:
e4:50:21:95:24:0c:a9:89:ad:f4:91:f1:2d:7a:48:9b:46:f1:
79:e2:98:5a:e2:9c:d2:28:bd:e0:0b:e4:75:88:6e:ed:a1:e0:
a2:91:00:9b:02:1d:38:e8:a8:d2:e0:5c:cc:4f:0f:d4:2f:9d:
39:ac:84:e7:f6:10:3a:63:e6:3f:9f:2b:c0:15:f3:8e:51:ac:
e4:1e:56:e5:8b:06:1d:e3:62:d0:5b:91:e6:a8:73:0b:60:9f:
dc:9f:da:da:0a:eb:a2:87:c8:9d:a5:88:04:79:93:02:af:6b:
21:28:0b:e2:67:7d:26:1c:dc:58:f5:79:c9:ab:c2:3b:30:a7:
85:ec:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:30:41 2025 by rpki-client