Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U4GNe73ym8nyik7jEc7Zofl_q8U.roa
File: U4GNe73ym8nyik7jEc7Zofl_q8U.roa (raw, json)
Hash identifier: Om1u2iCaJ6nMBES9B8qa8vuhL9WYfHNmimaAfqAOTqc=
Subject key identifier: 53:81:8D:7B:BD:F2:9B:C9:F2:8A:4E:E3:11:CE:D9:A1:F9:7F:AB:C5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199E3DB362293429A7E55A2CBCF08F85CBE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U4GNe73ym8nyik7jEc7Zofl_q8U.roa
Signing time: Tue 14 Oct 2025 17:53:38 +0000
ROA not before: Tue 14 Oct 2025 17:53:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214497
IP address blocks: 2a0c:7883:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:db:36:22:93:42:9a:7e:55:a2:cb:cf:08:f8:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 14 17:53:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53818d7bbdf29bc9f28a4ee311ced9a1f97fabc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:95:15:93:b9:a5:85:36:16:f3:9c:48:db:
9e:29:12:b0:16:74:d1:4d:a8:ff:a7:f6:e2:83:f6:
7a:15:03:62:e8:c7:d4:5d:f6:92:a7:e3:95:15:b0:
29:94:a6:7f:4b:7a:a2:f2:14:54:90:af:cd:d1:c7:
ab:0b:d1:1b:ff:62:83:8b:c8:d6:80:0a:46:5a:13:
ff:6d:1b:7e:40:07:28:65:d3:c8:0d:b3:92:f2:1c:
52:f2:02:e6:f4:72:96:d2:63:0c:c2:9e:0c:88:50:
dc:bf:18:48:6c:4d:14:25:2a:e3:8d:8f:36:48:2a:
c0:90:0a:a7:a4:a2:18:54:4a:44:50:88:8c:e7:16:
8a:1f:cc:88:b9:55:72:a8:73:1d:ce:95:18:25:67:
ea:75:a5:7f:91:02:08:e1:9a:c3:f7:8f:97:3b:55:
3e:bf:89:b4:a9:02:2a:f1:be:6d:b5:1a:0f:21:19:
9c:6c:26:1b:a8:48:1d:85:fa:f3:2a:5e:0d:9a:11:
d4:28:fa:73:58:88:15:3d:37:91:4f:98:e4:a6:2e:
58:9b:af:19:17:f9:76:ab:79:d9:2d:7d:da:57:ef:
25:85:b5:63:b7:67:92:3b:8e:df:6b:be:3a:b3:23:
04:18:66:78:4a:6a:89:f5:dc:b4:8a:b6:dc:ab:6d:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:8D:7B:BD:F2:9B:C9:F2:8A:4E:E3:11:CE:D9:A1:F9:7F:AB:C5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U4GNe73ym8nyik7jEc7Zofl_q8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7883:1::/48
Signature Algorithm: sha256WithRSAEncryption
26:8e:09:57:fc:5e:52:54:a0:71:e7:89:68:94:cf:80:10:f8:
e1:0c:d4:18:9d:95:5c:ab:47:4c:d0:2e:d3:5c:85:18:31:5f:
38:ee:fe:27:e6:81:d1:ff:43:9a:2e:17:8f:63:a9:39:5a:59:
2c:25:9e:1a:58:b3:62:68:55:e7:c1:4d:2a:5e:af:2c:a1:db:
e0:55:13:b7:70:c6:e2:68:83:67:4d:39:e9:44:e5:69:ef:8e:
e3:38:ca:3c:4e:96:80:0e:20:d5:41:b8:2d:5f:b1:d1:92:8e:
da:0e:65:dc:d3:16:05:4a:bc:c5:e4:25:cc:b1:de:14:a1:0a:
f1:2f:4e:f0:fb:ba:1d:7d:04:e2:b4:88:3d:19:1f:5c:42:3d:
7e:a0:a6:e3:44:f6:8d:61:d1:47:20:1b:d3:f6:4e:50:c9:a1:
48:34:1e:29:fe:61:f0:dd:96:f1:66:0e:a6:07:65:d9:c5:3a:
d7:98:a9:36:17:b7:e7:a6:b0:3b:4e:ba:2a:61:1a:b5:2b:04:
59:a8:a5:eb:94:d6:c1:ba:31:c5:cb:39:cb:55:d1:70:b6:b7:
43:31:a9:54:c0:1a:df:db:33:ed:18:7c:1c:8d:3b:b1:68:52:
3f:8e:ea:94:3c:47:95:16:22:9b:9e:1e:08:24:5b:83:80:0f:
66:b1:dd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:21:48 2025 by rpki-client