Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6kysz3iUWC7BtMfbNYlb-VnA3xs.roa
File: 6kysz3iUWC7BtMfbNYlb-VnA3xs.roa (raw, json)
Hash identifier: z4CmxvninEU/BqQB2ECQjsoe6bONyGM1mznxBi5pl7M=
Subject key identifier: EA:4C:AC:CF:78:94:58:2E:C1:B4:C7:DB:35:89:5B:F9:59:C0:DF:1B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019904483EC7E916575713960C3CDAA8130D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6kysz3iUWC7BtMfbNYlb-VnA3xs.roa
Signing time: Mon 01 Sep 2025 07:57:47 +0000
ROA not before: Mon 01 Sep 2025 07:57:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214216
IP address blocks: 2a0f:a00::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a0f:e240::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a11:7a40::/29 maxlen: 29
2a11:cb40::/29 maxlen: 29
2a12:eb40::/29 maxlen: 29
2a13:600::/29 maxlen: 29
2a13:2ec0::/29 maxlen: 29
2a13:7b00::/29 maxlen: 29
2a13:a100::/29 maxlen: 29
2a13:d300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:48:3e:c7:e9:16:57:57:13:96:0c:3c:da:a8:13:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 1 07:57:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea4caccf7894582ec1b4c7db35895bf959c0df1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:69:ca:34:51:b5:3a:6d:f0:0f:58:59:66:
ba:00:b4:bd:23:cd:f3:c5:7d:c9:44:36:f4:9d:5f:
53:2e:39:5c:78:a7:0e:9e:58:10:c5:4b:f7:c7:c2:
95:9b:aa:2f:3f:1c:a7:f9:d6:bf:dc:5d:c6:90:88:
2c:46:5c:bd:dc:6e:1a:10:16:38:2f:42:48:14:95:
b6:be:ff:fb:85:64:c1:5f:46:e5:b1:37:2e:1a:9d:
fa:b6:67:60:69:e9:59:88:dd:15:62:04:17:f4:87:
e9:0a:3a:e8:28:f5:eb:7c:a1:7a:aa:24:2f:81:47:
b5:32:85:6b:ab:9f:b7:51:3b:be:49:ec:5a:37:c2:
b9:1d:09:d4:6f:34:2f:f2:72:9b:10:f9:1c:85:de:
bd:7d:94:ed:12:c0:32:fa:bc:b1:cd:8f:f7:e3:32:
d0:c7:24:58:42:ce:d3:17:76:95:99:0a:3b:d4:93:
d3:6a:9a:71:cd:ca:f1:eb:b9:58:61:d9:13:a2:bc:
ab:94:2c:52:a3:e7:b6:50:4d:6d:e1:ed:ef:80:75:
d5:84:8e:be:da:4f:e7:58:98:8a:ea:16:61:6f:d3:
34:c4:ae:38:0f:29:cd:1e:ef:12:11:88:34:a5:45:
69:ff:ca:a7:0c:8f:96:03:82:a2:4f:c7:d4:33:f3:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:AC:CF:78:94:58:2E:C1:B4:C7:DB:35:89:5B:F9:59:C0:DF:1B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6kysz3iUWC7BtMfbNYlb-VnA3xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a00::/29
2a0f:2300::/29
2a0f:3f80::/29
2a0f:e140::/29
2a0f:e240::/29
2a0f:e540::/29
2a0f:e9c0::/29
2a0f:fc00::/29
2a11:7a40::/29
2a11:cb40::/29
2a12:eb40::/29
2a13:600::/29
2a13:2ec0::/29
2a13:7b00::/29
2a13:a100::/29
2a13:d300::/29
Signature Algorithm: sha256WithRSAEncryption
45:38:33:82:34:c7:75:fe:c6:65:b0:e0:1f:9e:23:3a:df:6e:
9c:67:4e:1f:38:63:32:7c:7a:12:3e:12:c8:87:d7:dd:d9:f8:
e0:e8:e8:6c:d2:84:c5:d4:44:25:33:1d:20:c0:d9:f8:b1:23:
55:e1:e7:15:72:b1:25:62:84:ae:92:87:d2:2c:b6:1c:f2:f5:
00:6c:da:62:5c:2e:14:95:9d:76:d8:97:29:91:9c:c5:43:9f:
2f:30:fa:dc:07:67:39:1b:29:d5:a8:8e:f5:ef:6e:fb:db:8d:
c4:a5:3f:da:a5:bd:16:7b:9a:98:20:e0:85:cf:eb:45:a9:8c:
84:1e:5a:ff:35:7f:e0:15:45:54:5b:48:ce:cd:61:76:ec:35:
08:6e:92:10:67:ac:86:02:6d:00:7b:ba:0f:8d:7b:ff:32:c0:
7d:1d:6a:2b:d6:57:1a:0f:81:d8:5b:39:ed:3b:bc:ec:7d:32:
31:89:a7:4c:6e:ed:e7:e5:73:5a:35:f7:e6:0d:3b:cf:99:a7:
e7:a6:a1:78:16:4a:f6:d7:bd:ea:c8:a8:c1:76:3a:ac:fc:d3:
fb:f4:e9:6c:64:c6:d1:b4:8b:42:3c:9f:4d:73:33:41:10:71:
ed:d1:44:30:7e:48:ad:7e:22:18:45:c2:67:19:93:18:98:93:
1a:b5:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:54:01 2025 by rpki-client