
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fMNp0WawB9aiZNJhENwtDIMKv6s.roa
File: fMNp0WawB9aiZNJhENwtDIMKv6s.roa (raw, json)
Hash identifier: kX9bqTf62TSE/EgEllfWIXr155ziuFoEFR2CWnne/68=
Subject key identifier: 7C:C3:69:D1:66:B0:07:D6:A2:64:D2:61:10:DC:2D:0C:83:0A:BF:AB
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01982DD62624561265AA5E925ABF19D30CC7
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fMNp0WawB9aiZNJhENwtDIMKv6s.roa
Signing time: Mon 21 Jul 2025 16:34:25 +0000
ROA not before: Mon 21 Jul 2025 16:34:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201194
IP address blocks: 2a05:9080:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:d6:26:24:56:12:65:aa:5e:92:5a:bf:19:d3:0c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 21 16:34:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cc369d166b007d6a264d26110dc2d0c830abfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:84:ec:2e:1d:10:dc:99:65:35:16:1e:b9:
c1:96:3b:e6:5e:ae:a3:d6:9f:bc:a6:45:f2:53:62:
b1:86:46:24:24:c0:98:32:97:c8:6c:be:8f:0b:62:
86:e3:48:6e:f9:83:c4:c5:45:ea:d8:a1:31:43:9c:
41:14:30:7a:00:ed:73:b0:6e:f5:73:af:5b:c3:f7:
fe:cc:38:36:ce:e1:49:73:3e:3e:a1:32:9d:94:97:
8e:f6:96:6a:d0:dd:e4:4d:93:8b:7f:b7:8d:1a:3b:
da:da:b3:df:ce:25:3f:01:48:b0:81:7d:9a:9a:be:
8c:48:16:c3:70:71:9d:9a:cf:78:0b:52:ff:c7:3f:
a9:b7:8d:87:44:cb:3f:1b:bc:66:b6:f4:e5:e0:c9:
68:49:b3:35:41:3d:d7:76:94:83:f1:3c:94:c2:29:
99:f3:0c:db:2d:6c:d1:0a:69:7d:50:e9:98:be:0c:
f3:ef:01:b6:da:ed:b0:49:4f:64:ab:a9:e3:7b:36:
f9:9b:b3:89:62:4c:9c:7b:7b:e2:d6:50:fb:a1:71:
72:67:08:d6:48:9c:79:b7:77:51:bc:19:78:8f:a1:
a5:0d:17:c7:39:a7:24:4a:ee:7f:6a:f6:a3:dd:e1:
54:3e:2c:63:08:9a:c1:eb:8e:bb:18:5f:0d:ed:09:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:69:D1:66:B0:07:D6:A2:64:D2:61:10:DC:2D:0C:83:0A:BF:AB
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fMNp0WawB9aiZNJhENwtDIMKv6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:9::/48
Signature Algorithm: sha256WithRSAEncryption
5f:37:5b:9d:e8:35:70:3d:fc:43:ab:b3:72:df:cb:2c:ed:f8:
fe:9f:14:7b:e9:6c:e6:25:87:55:3d:cb:cf:5c:8f:95:79:1c:
48:b3:65:c4:6b:60:e0:c4:8f:d8:e2:58:92:04:57:d9:06:bb:
a8:d9:1c:0b:f7:0f:4d:ff:7f:3b:c4:3f:31:29:12:b0:04:ef:
1e:92:01:7d:b8:00:87:29:2c:46:42:b8:f7:8b:d9:4e:b3:16:
e9:f1:0f:2f:c0:41:78:ea:1e:64:3c:d7:1c:57:e2:61:0a:95:
05:60:4b:00:bc:af:88:ab:b1:3a:1d:a2:e1:37:13:3f:b0:56:
7c:8f:70:35:0d:b6:31:38:a3:82:96:5a:63:35:55:a1:65:5f:
5c:e5:84:f4:8e:3c:59:c3:04:c2:4f:b1:c7:f6:86:43:e9:90:
13:f8:9c:90:63:da:71:20:69:f4:2e:93:18:ff:37:9d:a3:78:
65:21:6d:7f:28:ba:33:73:e2:16:95:a2:96:fa:fd:5c:de:96:
7d:06:aa:ae:2c:b6:d5:fc:7a:bb:ea:2d:28:d7:d4:69:7e:0c:
c3:3f:05:57:da:81:b1:db:6d:96:6c:0a:83:cf:a1:fd:70:41:
bd:99:87:ed:63:b1:4f:f8:3b:a4:52:ae:51:da:53:50:29:1c:
64:9e:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:57 2025 by rpki-client