Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nr_FuDyF34EmkwFYe5zTfma3yw4.roa
File: nr_FuDyF34EmkwFYe5zTfma3yw4.roa (raw, json)
Hash identifier: 0VurEdDcKx0FmsxRoaNkjhv7Xqfer3wqlP6HQCklLls=
Subject key identifier: 9E:BF:C5:B8:3C:85:DF:81:26:93:01:58:7B:9C:D3:7E:66:B7:CB:0E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01980A3CBA4E77C3C3A70F0B8764793CFC4D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nr_FuDyF34EmkwFYe5zTfma3yw4.roa
Signing time: Mon 14 Jul 2025 18:40:08 +0000
ROA not before: Mon 14 Jul 2025 18:40:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 2a0f:3046:320::/48 maxlen: 48
2a12:ac43:1312::/48 maxlen: 48
2a12:ecc6:1312::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:c900:77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:3c:ba:4e:77:c3:c3:a7:0f:0b:87:64:79:3c:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 14 18:40:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ebfc5b83c85df81269301587b9cd37e66b7cb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:ef:14:c2:9c:a0:80:f4:b7:4e:5c:bd:c7:
cb:db:ef:8c:49:83:11:33:29:dd:de:85:bb:bb:d5:
49:46:7f:f8:06:e5:9a:29:bf:ca:4b:c6:92:49:38:
f6:3c:5f:99:1b:3f:99:6d:64:d8:58:db:93:4b:0d:
6f:02:bb:96:d6:81:5d:d4:5a:56:9b:d6:93:fb:a1:
e9:f7:a3:3b:c4:bd:5b:e3:cf:5d:88:ec:df:01:ca:
98:bd:86:c2:0f:0f:40:0f:7d:6d:44:fb:55:ae:db:
a8:1f:65:7a:a9:42:ae:91:d4:3c:7f:be:d8:77:ff:
7c:7e:16:bb:7b:c9:b0:d2:43:8e:f5:6d:5e:9e:f0:
2b:79:45:9f:ab:40:72:64:49:88:55:42:2d:cf:2a:
f0:d7:e9:ab:8a:2a:5f:57:a5:5e:03:91:eb:b8:ce:
f7:59:9a:10:e3:23:d0:8b:46:d7:8a:1a:00:1b:cb:
5a:a3:00:40:f2:45:6c:b9:3c:2a:e2:49:cd:3c:4f:
d7:d1:37:f9:ce:90:eb:fe:d4:a1:5a:ed:78:9a:d3:
65:1b:a1:90:10:5b:7a:6a:f1:b2:e5:eb:db:24:7f:
ef:36:5a:27:eb:3e:74:d6:c2:83:de:34:fe:49:75:
b7:6d:88:80:95:6d:fe:01:b0:29:55:2c:dc:60:d3:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BF:C5:B8:3C:85:DF:81:26:93:01:58:7B:9C:D3:7E:66:B7:CB:0E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nr_FuDyF34EmkwFYe5zTfma3yw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3046:320::/48
2a12:ac43:1312::/48
2a12:ecc6:1312::/48
2a13:18c6:88::/48
2a13:c900:77::/48
Signature Algorithm: sha256WithRSAEncryption
70:be:85:97:50:f9:34:71:1f:6b:9f:13:dd:d6:b1:b2:d4:eb:
9e:fd:b1:8c:de:f7:f9:52:9d:7a:07:3b:e1:88:df:1e:29:ce:
a5:d0:9a:49:ea:cb:b3:fc:df:7f:a0:9a:3a:32:0d:8f:a8:66:
16:85:7b:64:29:16:27:6b:da:46:50:16:b7:6f:70:2f:55:63:
6e:07:60:4f:d4:d2:e1:6b:ac:d7:8b:a0:2a:3d:a8:c1:5e:28:
fb:d7:ea:b3:aa:38:07:4d:e7:3b:87:3b:e1:41:a2:3f:3c:cf:
1e:be:75:35:06:59:13:11:89:9b:e0:b0:0a:8a:18:b6:0f:fc:
a3:cf:9b:f5:fd:e6:46:e3:c6:e1:ea:31:ab:c2:d8:01:97:56:
6e:9f:47:ae:58:7a:d0:ca:57:3c:ce:ab:ab:bf:38:4d:7c:9e:
5d:2e:cb:78:64:b2:42:8e:e5:f6:ea:21:68:6c:b3:8c:e5:ee:
26:6b:7a:7e:a8:a3:20:f4:7b:aa:46:fd:59:92:de:41:39:cc:
ec:1c:7e:4e:28:76:e8:2d:d1:b9:d9:70:c0:b0:69:26:d8:86:
03:bd:ba:40:65:c2:9c:ea:cc:75:5d:78:f3:b7:5a:8a:05:d0:
a2:8d:99:65:41:ce:de:f2:b4:0c:60:95:2a:b5:de:7b:56:1e:
a8:ce:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:48:02 2025 by rpki-client