Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NgJFi6-0ICI38WSruB6fhnSV4yk.roa
File: NgJFi6-0ICI38WSruB6fhnSV4yk.roa (raw, json)
Hash identifier: TU08un3s1sfrD7uvRjNHhoPh9BNi9VJRV1/lTBZap6E=
Subject key identifier: 36:02:45:8B:AF:B4:20:22:37:F1:64:AB:B8:1E:9F:86:74:95:E3:29
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198F6CC8A2D75A11F5E94283D4784D3719F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NgJFi6-0ICI38WSruB6fhnSV4yk.roa
Signing time: Fri 29 Aug 2025 17:07:36 +0000
ROA not before: Fri 29 Aug 2025 17:07:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62513
IP address blocks: 2a06:1180:1c5::/48 maxlen: 48
2a06:1181:100::/48 maxlen: 48
2a06:1183:9999::/48 maxlen: 48
2a06:1184:99::/48 maxlen: 48
2a06:bf40::/29 maxlen: 32
2a09:17c1:ad::/48 maxlen: 48
2a0a:2d06:acab::/48 maxlen: 48
2a0a:2d07:cc::/48 maxlen: 48
2a0c:7886:7b8a::/48 maxlen: 48
2a0c:d380::/29 maxlen: 32
2a0e:15c0:100::/48 maxlen: 48
2a0e:15c7:e8::/48 maxlen: 48
2a0e:2440::/29 maxlen: 32
2a0e:c785:2::/48 maxlen: 48
2a0e:f601:bf89::/48 maxlen: 48
2a0e:f603:11::/48 maxlen: 48
2a0f:1206:1312::/48 maxlen: 48
2a0f:1584:1312::/48 maxlen: 48
2a0f:1e80:100::/48 maxlen: 48
2a0f:3d80:acab::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:7d04:2::/48 maxlen: 48
2a0f:7d06:11::/48 maxlen: 48
2a0f:e1c7:99::/48 maxlen: 48
2a0f:e200:5641::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:55::/48 maxlen: 48
2a0f:e7c7:189::/48 maxlen: 48
2a0f:e844:8642::/48 maxlen: 48
2a0f:ee00::/29 maxlen: 32
2a10:3140::/29 maxlen: 32
2a11:4e80::/29 maxlen: 32
2a12:ac44:b5a9::/48 maxlen: 48
2a12:d100::/29 maxlen: 32
2a12:ecc0:316::/48 maxlen: 48
2a12:ecc3:acab::/48 maxlen: 48
2a13:2bc0::/29 maxlen: 32
2a13:8f00::/29 maxlen: 32
2a13:c900:9876::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:cc:8a:2d:75:a1:1f:5e:94:28:3d:47:84:d3:71:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 29 17:07:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3602458bafb4202237f164abb81e9f867495e329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:26:ef:79:e2:d0:69:62:6a:12:8c:08:93:
aa:8d:de:40:97:26:ed:4e:72:c8:78:31:1d:70:ae:
8f:31:23:a9:64:0f:c4:63:7f:f8:f0:3a:78:16:80:
ba:09:a1:e7:da:8d:64:97:c7:76:e8:77:2c:9a:e0:
89:42:27:87:d8:ae:09:cc:5b:4e:0e:83:31:1e:87:
15:c0:8c:ad:f7:1b:e4:90:16:2e:2f:21:8c:1e:56:
45:17:16:85:86:17:a8:9c:c5:26:3d:9e:4b:91:d4:
56:2f:69:79:4d:f0:da:15:eb:24:d0:dc:1e:d1:5c:
08:4b:b3:d2:73:3a:08:fd:18:ba:52:85:21:05:f1:
b5:03:b4:08:fe:06:80:0b:29:e7:d0:03:70:c9:6b:
0a:db:d3:40:1f:09:8e:d7:b1:8c:5f:46:5f:ac:47:
87:50:5f:b3:e5:b1:dc:08:9e:5a:fc:56:23:98:e5:
7f:78:7f:3b:5c:81:50:19:04:b1:e8:f8:97:4f:7d:
74:32:f3:0e:7a:eb:0c:76:06:d4:f5:ed:83:6d:ff:
f5:b3:00:1a:0b:63:c3:eb:fe:2b:86:a0:16:da:6d:
a5:25:8f:38:a3:8c:81:a6:e3:49:c1:2f:db:e4:f2:
17:90:10:a7:65:36:2e:dd:e3:15:dd:90:c1:7d:6f:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:02:45:8B:AF:B4:20:22:37:F1:64:AB:B8:1E:9F:86:74:95:E3:29
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NgJFi6-0ICI38WSruB6fhnSV4yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:1c5::/48
2a06:1181:100::/48
2a06:1183:9999::/48
2a06:1184:99::/48
2a06:bf40::/29
2a09:17c1:ad::/48
2a0a:2d06:acab::/48
2a0a:2d07:cc::/48
2a0c:7886:7b8a::/48
2a0c:d380::/29
2a0e:15c0:100::/48
2a0e:15c7:e8::/48
2a0e:2440::/29
2a0e:c785:2::/48
2a0e:f601:bf89::/48
2a0e:f603:11::/48
2a0f:1206:1312::/48
2a0f:1584:1312::/48
2a0f:1e80:100::/48
2a0f:3d80:acab::/48
2a0f:3d86:101::/48
2a0f:7d04:2::/48
2a0f:7d06:11::/48
2a0f:e1c7:99::/48
2a0f:e200:5641::/48
2a0f:e202:44::/48
2a0f:e6c6:101::/48
2a0f:e7c6:55::/48
2a0f:e7c7:189::/48
2a0f:e844:8642::/48
2a0f:ee00::/29
2a10:3140::/29
2a11:4e80::/29
2a12:ac44:b5a9::/48
2a12:d100::/29
2a12:ecc0:316::/48
2a12:ecc3:acab::/48
2a13:2bc0::/29
2a13:8f00::/29
2a13:c900:9876::/48
Signature Algorithm: sha256WithRSAEncryption
2b:2c:f9:53:b9:14:a7:7b:ff:03:88:c7:84:8e:2d:93:73:eb:
21:11:7b:32:be:6d:ef:b5:70:06:8a:61:2f:4e:be:eb:92:e6:
2c:f0:d3:fa:2b:9e:d6:a3:3b:ca:34:42:61:7b:f2:57:16:5c:
4a:1c:9a:f2:4f:ed:23:2f:eb:d1:c8:73:ea:42:22:20:b7:4a:
df:cc:e0:0d:e2:5d:d0:5b:89:21:15:4a:94:d8:d8:25:7c:82:
e1:82:94:8e:ce:12:a9:37:64:33:aa:be:18:76:8c:01:ac:b6:
30:50:0d:8b:a9:60:23:c4:71:b2:56:57:3f:4c:92:f1:e1:ab:
5f:44:59:7b:50:cd:bf:ea:99:94:a1:f6:be:08:10:b5:75:4b:
a9:fc:71:7f:a5:2a:17:13:52:46:8a:0b:e1:02:af:5f:42:21:
6e:37:b3:3b:ba:9f:c5:a9:21:21:9b:8a:4c:ef:ac:52:95:d8:
dc:5c:41:5a:b9:92:c2:bb:1f:b6:50:16:ba:7a:18:41:16:1a:
90:52:e4:11:9c:24:a5:12:79:9a:3a:47:28:4a:9e:ef:f0:db:
88:82:c8:b9:f1:0e:55:2d:f8:00:21:e9:a8:45:01:65:4a:05:
1d:68:d9:33:e5:cf:c3:3a:55:5f:27:02:01:11:c0:e8:f2:ca:
9a:18:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:50:01 2025 by rpki-client