Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MFsh0RCBlGbImno94q53tsBvqz0.roa
File: MFsh0RCBlGbImno94q53tsBvqz0.roa (raw, json)
Hash identifier: I7MGY29ErSURq9/hocEyIIF5iN9aMqui309Q26gRnQQ=
Subject key identifier: 30:5B:21:D1:10:81:94:66:C8:9A:7A:3D:E2:AE:77:B6:C0:6F:AB:3D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199862D594CB5105C1A29E85ED81883D9BE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MFsh0RCBlGbImno94q53tsBvqz0.roa
Signing time: Fri 26 Sep 2025 13:19:02 +0000
ROA not before: Fri 26 Sep 2025 13:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 2a0f:bc05::/32 maxlen: 32
2a0f:bc06::/32 maxlen: 32
2a0f:bc07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 20:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:2d:59:4c:b5:10:5c:1a:29:e8:5e:d8:18:83:d9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 26 13:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=305b21d110819466c89a7a3de2ae77b6c06fab3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:8d:30:c8:d8:08:a1:a7:1c:15:f9:6e:65:
b8:32:08:63:69:ca:e9:c6:09:69:f6:aa:83:06:14:
e1:78:7b:ca:16:18:64:f2:fe:ac:fa:ec:e3:c7:50:
ff:71:45:15:03:bd:f7:64:82:0e:c1:8c:f8:84:27:
d2:8d:dd:a1:b6:4f:00:1d:cf:84:da:b2:e3:bf:c0:
bf:f7:83:2f:c1:b7:88:fd:9d:46:e0:0c:6d:7c:67:
49:04:16:47:02:18:fa:62:59:f4:24:55:f2:0b:6e:
8f:dd:ea:36:d4:7d:5b:31:69:5f:a2:9b:02:3d:ff:
7b:71:c7:da:9a:d5:fa:fb:80:92:14:4b:21:db:ef:
97:89:40:f6:7d:8a:b3:53:c3:c2:89:c6:30:7a:65:
d8:8f:c2:eb:6c:38:ea:54:e1:ba:f5:0c:94:b9:06:
62:58:9d:d6:ce:fc:b9:5e:af:61:70:f0:ab:f8:4f:
70:a8:07:84:05:0a:48:1b:6d:96:da:5c:8e:1b:23:
71:51:f4:26:d2:83:97:25:7e:1b:b9:14:ac:53:03:
fe:1a:d5:32:f2:13:f1:a9:17:8f:12:c7:d1:52:58:
0a:b0:84:3f:c5:4b:6f:ea:f9:9f:d8:20:83:80:27:
36:bd:30:c6:1d:26:c4:5a:f6:79:00:c7:cd:73:ea:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5B:21:D1:10:81:94:66:C8:9A:7A:3D:E2:AE:77:B6:C0:6F:AB:3D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MFsh0RCBlGbImno94q53tsBvqz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bc05::-2a0f:bc07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:1e:d5:7a:1f:84:ab:6c:05:91:79:21:03:44:61:19:cf:8c:
35:58:5d:26:55:4f:0d:a3:db:98:bd:4e:f7:6a:c6:44:a3:f0:
21:f9:70:80:35:8f:82:1f:7b:a8:09:75:f6:95:72:58:ed:c7:
dc:c3:c3:7f:e0:cd:13:8e:8d:2b:25:02:48:3d:7f:05:30:df:
58:c2:a7:67:cb:2e:12:e5:71:bc:c7:dd:88:dd:04:90:a7:9a:
38:74:42:f7:ca:fa:81:7f:4f:c3:19:be:1a:c3:5a:c7:23:f4:
97:c4:45:9d:34:e8:55:64:b6:e5:df:4e:24:e6:d0:ab:0c:2d:
e7:a9:ee:d1:2c:a8:bd:ca:1a:9c:51:20:09:02:b7:42:c5:4f:
25:88:9c:0a:66:19:ca:d4:5d:d3:28:c1:12:92:08:83:ae:9f:
cc:1d:88:3c:d3:79:e2:86:fe:92:a3:4b:c3:c7:3b:91:c4:5d:
71:d7:93:3d:0a:b6:98:d1:1d:8f:33:0f:1a:d4:b2:93:d2:19:
8c:9e:40:c7:1c:b6:4f:46:6a:26:9c:a4:97:2c:89:44:46:f1:
64:52:71:bc:c4:d0:11:b5:90:3b:3d:c7:ef:3b:2b:ca:78:b2:
91:3a:ba:33:6b:09:d2:53:e1:31:3c:f2:07:ad:e0:5b:4c:8c:
55:1c:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:56:25 2025 by rpki-client