Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g6VPHfGYbSD3Ca9hn24dgbekgbE.roa
File: g6VPHfGYbSD3Ca9hn24dgbekgbE.roa (raw, json)
Hash identifier: UopuGq/UovW6QEMiaPIxs/8FK/4kKmIzRqU0CzbTCY4=
Subject key identifier: 83:A5:4F:1D:F1:98:6D:20:F7:09:AF:61:9F:6E:1D:81:B7:A4:81:B1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197EA8142643F480D4A8DC0E12B6BE4234B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g6VPHfGYbSD3Ca9hn24dgbekgbE.roa
Signing time: Tue 08 Jul 2025 14:47:09 +0000
ROA not before: Tue 08 Jul 2025 14:47:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 2a09:17c0:22::/48 maxlen: 48
2a09:17c2::/32 maxlen: 32
2a0a:2940::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a0c:7886:22::/48 maxlen: 48
2a0e:1a80:1::/48 maxlen: 48
2a0e:1a80:1312::/48 maxlen: 48
2a0e:2240::/29 maxlen: 29
2a0e:c785:1::/48 maxlen: 48
2a0e:c785:273::/48 maxlen: 48
2a0e:f200::/48 maxlen: 48
2a0f:1203::/32 maxlen: 32
2a0f:1580::/32 maxlen: 32
2a0f:1587:100::/48 maxlen: 48
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:1e84:3f::/48 maxlen: 48
2a0f:3043::/32 maxlen: 32
2a0f:3047:fc1d::/48 maxlen: 48
2a0f:31c2::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:3d86:77::/48 maxlen: 48
2a0f:7d06:102::/48 maxlen: 48
2a0f:7d06:9c8a::/48 maxlen: 48
2a0f:bc00:100::/48 maxlen: 48
2a0f:df45:fc78::/48 maxlen: 48
2a0f:e6c6:5532::/48 maxlen: 48
2a0f:e7c5:f8f9::/48 maxlen: 48
2a0f:e847:77::/48 maxlen: 48
2a0f:e847:acab::/48 maxlen: 48
2a10:33c0::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:67c2:3::/48 maxlen: 48
2a11:b200::/29 maxlen: 29
2a12:ac43:1::/48 maxlen: 48
2a12:ac44:1312::/48 maxlen: 48
2a12:ecc3:2::/48 maxlen: 48
2a13:18c0:2::/48 maxlen: 48
2a13:18c0:22::/48 maxlen: 48
2a13:8c82:1::/48 maxlen: 48
2a13:9281:100::/48 maxlen: 48
2a13:c900:fd1a::/48 maxlen: 48
2a13:e103::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:81:42:64:3f:48:0d:4a:8d:c0:e1:2b:6b:e4:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 8 14:47:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83a54f1df1986d20f709af619f6e1d81b7a481b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:9f:2a:66:28:fe:c1:e3:a8:96:64:2e:43:
0e:94:fd:60:ce:d7:09:b9:a8:74:c5:21:7d:b3:7f:
63:60:7a:0f:ba:90:10:1f:bb:5d:47:6c:e4:9e:cf:
1d:28:38:1b:bc:c4:7d:6a:2c:b5:d6:c3:0b:8a:a0:
2f:39:7d:6e:64:e5:64:d4:ea:05:97:c0:81:b0:46:
59:99:7c:7f:72:8d:8e:85:65:e8:70:a2:de:ee:96:
16:d0:23:fc:fa:16:2d:3f:6d:7e:2e:e9:77:a1:25:
ba:2e:b3:57:90:22:16:8d:d6:b8:0b:ba:3f:18:a6:
58:33:c5:f1:2a:15:2a:53:a7:a1:79:08:02:c0:66:
f9:fe:61:b2:74:b0:7a:91:bc:4d:20:31:42:7e:bf:
18:2b:05:0d:88:73:86:a0:ed:7c:bf:6f:78:aa:25:
af:6b:bb:4f:8c:cc:10:4e:34:b5:0d:1f:4b:2a:6f:
ca:6f:f5:73:64:96:22:54:da:d9:c3:0d:cc:62:aa:
b5:de:f1:8e:53:84:59:1b:8f:46:17:a0:81:0b:d0:
27:53:37:2b:05:df:87:0e:53:3a:a4:08:fe:3f:84:
0b:21:77:11:7b:4b:8c:fc:f5:f4:1d:fe:a7:fd:bc:
81:a4:87:e1:df:5a:a1:31:fb:ac:c2:c6:7d:10:92:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A5:4F:1D:F1:98:6D:20:F7:09:AF:61:9F:6E:1D:81:B7:A4:81:B1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g6VPHfGYbSD3Ca9hn24dgbekgbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:22::/48
2a09:17c2::/32
2a0a:2940::/29
2a0c:7884::/32
2a0c:7886:22::/48
2a0e:1a80:1::/48
2a0e:1a80:1312::/48
2a0e:2240::/29
2a0e:c785:1::/48
2a0e:c785:273::/48
2a0e:f200::/48
2a0f:1203::/32
2a0f:1580::/32
2a0f:1587:100::/48
2a0f:1e80:d9a8::/48
2a0f:1e84:3f::/48
2a0f:3043::/32
2a0f:3047:fc1d::/48
2a0f:31c2::/32
2a0f:3d80:bac::/48
2a0f:3d86:77::/48
2a0f:7d06:102::/48
2a0f:7d06:9c8a::/48
2a0f:bc00:100::/48
2a0f:df45:fc78::/48
2a0f:e6c6:5532::/48
2a0f:e7c5:f8f9::/48
2a0f:e847:77::/48
2a0f:e847:acab::/48
2a10:33c0::/29
2a10:5c00::/29
2a10:67c2:3::/48
2a11:b200::/29
2a12:ac43:1::/48
2a12:ac44:1312::/48
2a12:ecc3:2::/48
2a13:18c0:2::/48
2a13:18c0:22::/48
2a13:8c82:1::/48
2a13:9281:100::/48
2a13:c900:fd1a::/48
2a13:e103::/32
Signature Algorithm: sha256WithRSAEncryption
c5:7e:b0:53:41:24:73:f2:c0:e0:53:c4:36:54:a4:c5:1d:84:
63:de:bd:55:6c:06:40:3e:3c:69:7e:fe:2f:60:fc:3b:e5:49:
60:27:55:67:df:ab:c5:62:16:54:60:f9:93:4b:0d:87:af:48:
6a:ad:05:eb:a4:d4:5d:e5:fc:31:88:fe:af:6f:37:0d:00:92:
36:0a:c2:83:d0:0d:27:12:01:a8:be:87:02:4a:7d:29:84:61:
62:06:8b:d8:78:02:50:76:0e:83:37:4b:66:f8:33:ab:0c:8d:
5f:1e:ba:d8:cd:3b:2a:8c:7d:02:4b:12:80:25:26:f8:03:b6:
66:4b:ef:cb:58:38:1e:1c:97:d5:62:00:3e:ce:9c:b2:c1:74:
56:e4:7a:70:3b:fd:30:1e:12:59:20:bd:57:27:54:72:b6:64:
cf:6e:b7:6c:fb:18:21:d8:ee:3f:56:89:81:bb:e3:d2:b2:0b:
fc:ce:ba:fe:57:7f:82:1c:ad:02:5e:e2:cd:c8:83:4c:1c:68:
02:97:f3:c9:e6:cf:59:4b:7b:50:30:67:73:65:c0:c2:d5:6b:
e5:b5:2d:cc:4e:79:57:8e:e3:e8:50:7e:41:34:c9:54:86:8e:
01:cf:e9:a1:5a:ef:de:00:92:d1:35:25:7d:62:83:82:08:b0:
07:5f:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:20:53 2025 by rpki-client