Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MhI6zHdlAxTS4X_wAeNXHTlwRgg.roa
File: MhI6zHdlAxTS4X_wAeNXHTlwRgg.roa (raw, json)
Hash identifier: 6h9px1u62KWphdQlqQ32KbDZwR8pYgosxRpCsD0dcS8=
Subject key identifier: 32:12:3A:CC:77:65:03:14:D2:E1:7F:F0:01:E3:57:1D:39:70:46:08
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198F50CDA27EEE5FCA07DB6038115966779
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MhI6zHdlAxTS4X_wAeNXHTlwRgg.roa
Signing time: Fri 29 Aug 2025 08:58:36 +0000
ROA not before: Fri 29 Aug 2025 08:58:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215265
IP address blocks: 2a0f:ea47:fc1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:0c:da:27:ee:e5:fc:a0:7d:b6:03:81:15:96:67:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 29 08:58:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32123acc77650314d2e17ff001e3571d39704608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:68:ac:ec:08:f0:5b:66:a9:5b:ab:2a:14:
d9:9f:8e:8b:0a:b8:5f:00:fe:08:a9:42:4e:e1:8b:
d9:31:79:cf:38:72:3e:d8:37:1b:e5:81:d1:21:cd:
f6:9a:9d:2f:0a:1b:97:1a:0b:99:e4:e8:23:ea:a0:
30:9b:85:fb:fe:98:c2:16:14:c5:4e:89:09:56:23:
c6:24:7b:58:45:30:d8:4f:ce:fb:d3:61:24:ce:2b:
25:89:37:35:c6:8d:1d:cd:fc:49:dd:ef:9f:5b:92:
a7:e1:75:fb:b4:cc:6c:80:05:9d:88:1b:b7:a9:b0:
fc:b4:07:d9:be:15:13:a4:59:52:52:4f:6d:65:de:
99:21:18:47:08:e4:6d:91:7d:99:16:fe:5e:68:4c:
90:01:cc:5c:b4:a3:d0:84:5d:fc:c3:16:e4:8f:5f:
1b:02:25:77:1a:7e:62:a5:05:f0:0b:ae:9f:64:bd:
36:18:d4:fc:b0:b7:b8:85:77:7e:c2:25:d4:95:6f:
eb:f2:30:e3:ad:47:aa:14:26:85:2f:a2:5a:9f:c4:
e4:b5:f9:72:90:55:b5:3a:be:e7:39:15:9f:0e:c8:
be:39:1c:e9:b6:d2:fd:3a:be:3a:88:51:e8:9d:95:
ed:9e:a6:7d:22:85:7d:69:08:63:f0:9a:b7:19:f5:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:12:3A:CC:77:65:03:14:D2:E1:7F:F0:01:E3:57:1D:39:70:46:08
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MhI6zHdlAxTS4X_wAeNXHTlwRgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ea47:fc1d::/48
Signature Algorithm: sha256WithRSAEncryption
5c:f8:e7:25:84:2f:9f:bd:38:36:de:e8:16:7e:6a:29:1a:49:
bf:62:82:ce:c0:a6:64:79:00:75:39:09:8a:7c:14:c8:8f:a3:
5d:81:e4:51:9f:64:e7:54:aa:be:a1:fc:36:77:13:53:69:94:
fd:fb:4e:5b:de:1d:d1:37:c9:91:a7:4a:82:0f:c0:27:6b:a6:
48:3a:20:99:af:2c:34:c5:7f:36:60:fd:6c:c7:d8:ec:16:9c:
0e:e6:4f:72:7a:bc:b1:92:e4:eb:d1:d0:e1:87:86:6b:48:30:
f5:90:eb:f7:a2:94:24:a5:4c:31:b0:e9:4a:ac:2a:0d:1a:2f:
b5:90:a8:12:13:5f:be:47:4d:d3:a7:20:56:1d:8b:cf:c3:0c:
c8:d0:53:fb:c6:c5:2c:90:ae:d3:3f:8d:b1:e9:fa:27:8d:7e:
2d:34:b1:10:b7:a0:ed:9d:93:91:5c:4b:8d:23:e5:8e:ac:b3:
53:f0:fb:16:b0:b1:05:7d:58:2a:8f:49:1d:4d:47:32:a6:1c:
9a:bc:f3:0c:df:d2:26:5b:cd:f3:f3:00:0e:be:b7:a6:03:c1:
c5:3b:9d:61:8f:73:f2:f0:f1:79:18:32:e5:20:0e:ef:ed:41:
fa:31:c3:a7:35:e2:f5:9f:e9:7c:9f:d9:56:4a:48:bc:cd:34:
77:d9:07:40
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZj1DNon7uX8oH22A4EVlmd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwODI5MDg1ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjEyM2FjYzc3NjUwMzE0ZDJlMTdmZjAwMWUzNTcxZDM5NzA0NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjNorOwI8FtmqVurKhTZn46LCrhf
AP4IqUJO4YvZMXnPOHI+2Dcb5YHRIc32mp0vChuXGguZ5Ogj6qAwm4X7/pjCFhTF
TokJViPGJHtYRTDYT87702EkzisliTc1xo0dzfxJ3e+fW5Kn4XX7tMxsgAWdiBu3
qbD8tAfZvhUTpFlSUk9tZd6ZIRhHCORtkX2ZFv5eaEyQAcxctKPQhF38wxbkj18b
AiV3Gn5ipQXwC66fZL02GNT8sLe4hXd+wiXUlW/r8jDjrUeqFCaFL6Jan8Tktfly
kFW1Or7nORWfDsi+ORzpttL9Or46iFHonZXtnqZ9IoV9aQhj8Jq3GfWGVQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDISOsx3ZQMU0uF/8AHjVx05cEYIMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTWhJNnpIZGxBeFRTNFhfd0FlTlhIVGx3UmdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/qR/wd
MA0GCSqGSIb3DQEBCwUAA4IBAQBc+OclhC+fvTg23ugWfmopGkm/YoLOwKZkeQB1
OQmKfBTIj6NdgeRRn2TnVKq+ofw2dxNTaZT9+05b3h3RN8mRp0qCD8Ana6ZIOiCZ
ryw0xX82YP1sx9jsFpwO5k9yeryxkuTr0dDhh4ZrSDD1kOv3opQkpUwxsOlKrCoN
Gi+1kKgSE1++R03TpyBWHYvPwwzI0FP7xsUskK7TP42x6fonjX4tNLEQt6DtnZOR
XEuNI+WOrLNT8PsWsLEFfVgqj0kdTUcyphyavPMM39ImW83z8wAOvremA8HFO51h
j3Py8PF5GDLlIA7v7UH6McOnNeL1n+l8n9lWSki8zTR32QdA
-----END CERTIFICATE-----
Generated at Sat Sep 6 20:55:22 2025 by rpki-client