Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6Z5n1QnpzjinKemT65A6-55c4Hs.roa
File: 6Z5n1QnpzjinKemT65A6-55c4Hs.roa (raw, json)
Hash identifier: mqmiixlIzWFeB5qF8DDRe6TXNgiEmoA+Za6i/Ey+No0=
Subject key identifier: E9:9E:67:D5:09:E9:CE:38:A7:29:E9:93:EB:90:3A:FB:9E:5C:E0:7B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A0775ABC7A74C3A03CBB585721F231598
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6Z5n1QnpzjinKemT65A6-55c4Hs.roa
Signing time: Tue 21 Oct 2025 15:49:03 +0000
ROA not before: Tue 21 Oct 2025 15:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205486
IP address blocks: 2a0f:a200::/29 maxlen: 29
2a10:3240::/29 maxlen: 29
2a10:36c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:75:ab:c7:a7:4c:3a:03:cb:b5:85:72:1f:23:15:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 21 15:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e99e67d509e9ce38a729e993eb903afb9e5ce07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:ae:2c:ce:7b:a1:2b:fa:e4:14:25:59:b6:
89:ce:e9:3d:be:dd:ee:08:26:6f:39:10:19:ee:0a:
ce:22:7c:3d:68:a8:b5:81:6c:6f:5f:1a:06:7a:0e:
b0:4f:ce:1c:7b:37:fa:b1:9d:43:af:e8:f4:0c:0b:
8e:c0:66:85:2e:c2:8a:45:f4:db:6a:ab:c7:c8:59:
c9:47:42:4a:84:a3:59:68:41:03:54:64:88:6c:6e:
c7:3b:bc:07:f0:75:25:d9:f1:90:3e:f2:5b:62:8d:
b9:13:09:ab:f4:b8:97:e4:54:1b:7e:36:53:e7:27:
8d:59:39:fc:52:e6:d9:c0:a2:b3:89:bc:85:3b:97:
43:f8:be:57:9c:dc:cb:10:a1:89:16:eb:6a:43:ff:
d9:7b:cf:05:e8:58:d0:cf:23:5f:27:b5:a3:fd:02:
49:46:53:72:c5:22:5c:88:65:f3:51:14:f3:7e:45:
1f:81:44:1b:a6:f8:0c:2d:98:8a:a9:d6:32:c6:79:
3f:39:45:fb:68:c5:67:6c:29:6d:ac:d5:a7:ac:37:
e7:99:14:4a:d9:ba:8b:7f:c1:5b:f7:91:8e:5b:dd:
a2:17:6c:b9:c1:bf:52:d6:50:f5:8f:cd:f1:a0:36:
5f:f2:d7:3e:2b:3e:f7:08:3f:26:a6:d0:1e:4d:61:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9E:67:D5:09:E9:CE:38:A7:29:E9:93:EB:90:3A:FB:9E:5C:E0:7B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6Z5n1QnpzjinKemT65A6-55c4Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a200::/29
2a10:3240::/29
2a10:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
c8:3d:ff:fb:54:e1:73:5a:7d:3a:e3:a4:d1:ea:5f:17:ce:24:
cd:51:5a:ec:f2:cd:c4:58:13:69:23:c1:7d:c9:00:38:c0:a0:
8e:98:f4:ce:3e:06:97:87:cf:7c:c5:0e:2f:81:60:bc:7d:2e:
1b:75:d3:2e:7a:d0:dd:24:b2:e8:23:d8:56:2e:08:5a:07:62:
37:50:ae:28:91:e4:98:18:95:e2:69:20:0f:74:1d:45:f9:6b:
54:9b:86:5f:1b:71:e6:a7:58:a1:69:70:9f:ed:94:1a:29:5f:
54:7b:b8:d1:c8:4b:ec:d6:a5:6f:7b:b3:4a:a8:9e:72:cd:c5:
11:72:50:e8:52:7d:76:b1:43:3c:05:4b:95:4f:92:b8:ea:e6:
a8:d7:c9:38:6d:73:99:0d:79:fe:4f:87:87:d5:05:93:39:74:
e9:19:bd:4b:05:d5:13:fb:3b:b2:38:50:f5:8a:c7:48:a6:1c:
27:02:88:32:dc:ba:88:d0:d2:28:92:69:a2:4c:05:f8:d1:4b:
a3:90:6a:af:9c:0d:f0:6f:fe:54:d9:dd:57:f7:8f:e9:e3:f2:
40:8c:b8:0a:f2:39:7d:8f:eb:58:a3:41:e8:80:11:33:e8:27:
43:99:f3:e7:6e:7d:dd:ff:97:05:dd:5f:5d:81:69:8d:ae:92:
be:d2:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:21:46 2025 by rpki-client