Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2uWToDAE2FvOvIve_PNKWo9vqXs.roa
File: 2uWToDAE2FvOvIve_PNKWo9vqXs.roa (raw, json)
Hash identifier: kMFcDAkCraQAZvgKrggls5FUutFFRvSjh7i0yHe5fNk=
Subject key identifier: DA:E5:93:A0:30:04:D8:5B:CE:BC:8B:DE:FC:F3:4A:5A:8F:6F:A9:7B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01980D5FA62CBF4D8B9166B3A97217E202B1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2uWToDAE2FvOvIve_PNKWo9vqXs.roa
Signing time: Tue 15 Jul 2025 09:17:08 +0000
ROA not before: Tue 15 Jul 2025 09:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199925
IP address blocks: 2a0d:b740::/29 maxlen: 29
2a0f:1480::/29 maxlen: 29
2a13:2b40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:5f:a6:2c:bf:4d:8b:91:66:b3:a9:72:17:e2:02:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 15 09:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dae593a03004d85bcebc8bdefcf34a5a8f6fa97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:68:78:0f:f6:28:45:96:01:83:5b:d9:1a:
be:9d:a1:a5:e5:63:e1:76:d3:37:3d:06:b7:3d:f9:
17:ff:b2:00:c6:a9:9f:b3:a1:86:87:b9:1e:f1:31:
97:05:84:1c:d3:15:3d:16:e9:52:8c:f3:59:3b:55:
48:0b:c5:00:07:36:a1:4a:d1:37:f5:b0:c8:aa:c2:
10:bf:9a:dc:b7:30:94:b4:3e:d6:23:7b:2a:e2:ae:
3f:73:a0:c9:0b:a6:e7:b5:8f:e5:3d:d5:28:fc:12:
39:8c:33:64:1a:08:55:11:a2:d2:b9:14:29:3f:21:
5c:58:d1:ef:73:47:0a:0b:6c:9b:a9:22:cd:66:c5:
6b:fd:0e:68:ee:10:5e:25:de:16:79:54:9c:b9:58:
9a:39:5b:1b:e8:47:c2:bc:11:cf:dd:59:57:d7:b1:
c6:5a:ba:c3:8a:b0:05:e1:cb:fd:11:0c:b8:34:3f:
0e:ab:94:88:40:e7:6e:f6:40:19:57:fc:26:d1:45:
fc:bd:3f:93:e4:6c:f5:6a:ce:d9:d8:17:86:9b:8d:
3f:8e:64:5c:da:e2:fc:7a:77:54:da:97:cd:0f:7b:
49:f7:94:b4:65:45:86:24:18:61:6f:42:dc:95:11:
29:c4:be:15:94:1a:c8:bc:ed:91:f6:50:df:b2:96:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E5:93:A0:30:04:D8:5B:CE:BC:8B:DE:FC:F3:4A:5A:8F:6F:A9:7B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2uWToDAE2FvOvIve_PNKWo9vqXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b740::/29
2a0f:1480::/29
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
83:1f:71:7c:b6:3f:64:88:bb:69:d3:95:0a:22:c1:e4:7d:26:
d5:a6:52:39:f3:7f:47:2f:54:e5:13:1f:b8:fd:ba:2a:ab:35:
07:d0:6b:c3:03:40:db:29:5c:15:fe:c5:21:93:3f:76:5f:81:
19:fb:c1:e2:5a:80:99:ab:d9:a4:2e:50:b5:5c:17:ee:9e:79:
b5:c0:c1:55:4f:f3:fd:29:41:13:95:35:4c:94:17:9f:7d:34:
01:c7:91:fa:0f:82:97:a1:4d:52:8e:35:04:3c:99:1a:7b:69:
c8:af:46:b1:59:d0:a9:6e:c2:2a:8c:c3:61:9f:87:32:88:8e:
94:70:cc:4e:f4:d0:5f:72:2e:47:17:cb:59:a7:88:84:0d:d0:
ae:60:82:9b:97:30:d6:d6:41:0b:89:bd:9b:f1:f3:4c:3c:25:
0f:c0:a3:be:ef:42:bf:d7:2d:7b:e2:9d:2e:28:f7:b1:25:2d:
bf:dd:0e:68:39:ba:5e:41:45:e1:67:76:22:4c:4a:ea:85:ea:
ce:a9:01:94:cc:d1:d8:b9:8e:30:ca:df:3d:44:fc:ad:6a:a7:
8c:05:8d:4f:97:f9:e0:1a:b4:d5:cb:16:68:2e:46:23:cf:ab:
f5:0e:49:c4:4f:44:df:fc:58:28:40:af:d1:3c:b8:51:7b:42:
2c:74:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:49:07 2025 by rpki-client