Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/u3o7l48zE1fdzIvf4q_2sWFtm0Y.roa
File: u3o7l48zE1fdzIvf4q_2sWFtm0Y.roa (raw, json)
Hash identifier: 4Z0FhuBCUxqdveFQehwtPRUsoLYIYhFKd5iZsCEUx6Q=
Subject key identifier: BB:7A:3B:97:8F:33:13:57:DD:CC:8B:DF:E2:AF:F6:B1:61:6D:9B:46
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197C76C73A3CD36B5DDC132332B944B514E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/u3o7l48zE1fdzIvf4q_2sWFtm0Y.roa
Signing time: Tue 01 Jul 2025 19:17:42 +0000
ROA not before: Tue 01 Jul 2025 19:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a0d:8f80::/29 maxlen: 29
2a0f:2d40::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:36c0::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a10:6d00::/29 maxlen: 29
2a10:7300::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
2a11:7440::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:6c:73:a3:cd:36:b5:dd:c1:32:33:2b:94:4b:51:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 1 19:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb7a3b978f331357ddcc8bdfe2aff6b1616d9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:26:3e:71:09:a1:d6:62:60:a5:3d:12:cb:
6d:01:a4:17:e2:46:40:84:5a:8c:d2:2e:1b:f1:97:
c1:c6:1f:66:d8:3f:42:b7:d2:95:5b:3c:63:13:40:
08:04:b5:9d:32:b2:40:8c:56:b1:d7:2f:bd:32:25:
21:ee:74:bc:1c:df:73:78:e4:cf:ae:d2:a7:5c:44:
09:db:56:f2:42:da:9e:70:dc:20:4a:be:e3:6c:44:
4d:c9:68:fb:f5:6b:88:81:b1:9b:fe:ea:84:90:e2:
26:96:6e:d0:f4:72:a2:02:44:45:84:e4:3f:0c:f3:
7e:ab:98:f2:10:fb:9e:af:4d:f6:4f:7e:3c:0c:a1:
e1:77:88:96:3f:45:3b:d6:bb:fa:cf:99:c0:27:ad:
c6:74:1f:94:37:5b:c5:4a:37:c0:5a:aa:d4:3d:a7:
1f:59:95:df:e5:d6:1d:bc:31:66:6d:ce:1f:ec:09:
12:c0:20:3e:0d:62:5f:46:38:ff:c1:17:8d:83:3b:
2a:a7:df:19:a0:c3:b7:c2:19:2e:ac:b4:24:b4:b0:
0e:ae:5a:45:b5:c6:10:62:7c:a7:a8:42:67:88:04:
3c:22:b2:a9:89:fc:78:b9:5c:10:62:3d:20:7d:b4:
57:6d:a5:b4:0d:d7:9b:f9:4c:e7:e0:98:78:18:4f:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:3B:97:8F:33:13:57:DD:CC:8B:DF:E2:AF:F6:B1:61:6D:9B:46
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/u3o7l48zE1fdzIvf4q_2sWFtm0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8f80::/29
2a0f:2d40::/29
2a0f:35c0::/29
2a0f:36c0::/29
2a10:6500::/29
2a10:6b00::/29
2a10:6d00::/29
2a10:7300::/29
2a10:7500::/29
2a10:7d00::/29
2a11:7440::/29
2a11:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
ca:36:df:1d:71:b2:6e:24:21:d2:de:d6:95:7a:2f:e4:c2:6c:
8f:b0:dd:98:39:51:79:07:af:4f:22:a4:05:89:39:73:c9:f7:
5f:02:4f:e0:63:37:a8:48:dc:2a:7d:5b:17:06:f3:d5:e6:61:
19:5c:25:9d:5e:5b:f3:cd:0f:e6:95:98:05:49:49:4a:60:3c:
20:1f:dd:e2:73:9c:f8:23:59:4d:73:d7:04:2d:9f:d1:99:d9:
0b:83:01:e5:aa:90:74:b3:3d:3a:77:d3:1b:86:e3:0d:c0:9f:
ec:47:46:14:30:b9:2f:2a:57:f6:70:de:32:97:74:a3:3d:af:
34:e1:d5:69:e5:4e:ad:e8:9f:06:03:44:c6:fd:4b:b0:31:f7:
ce:14:00:2f:7f:a6:63:a5:eb:59:1c:81:02:52:58:2a:28:2c:
b9:46:ff:a6:8a:10:d0:d7:72:b7:7f:dc:5c:85:d1:33:a7:33:
0e:01:4c:47:13:82:4e:fb:b5:a5:44:10:78:53:73:21:5d:7b:
2b:09:2b:4d:02:ef:d1:80:15:d1:0b:41:fc:4d:76:2c:a6:ec:
58:1b:fe:74:b5:26:b1:f3:92:60:a3:e4:d0:4e:bb:a0:19:14:
ed:94:43:8a:ca:ac:1f:46:0d:b7:f0:4d:26:98:c4:6c:7d:a2:
3a:34:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:12:05 2025 by rpki-client