Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XFsxfln0RaSFtnanjW2JxWhYi68.roa
File: XFsxfln0RaSFtnanjW2JxWhYi68.roa (raw, json)
Hash identifier: GRpF+Q5RmJQjzfnBdv+kWGMoeUSuBDbamCP9SKqHYFk=
Subject key identifier: 5C:5B:31:7E:59:F4:45:A4:85:B6:76:A7:8D:6D:89:C5:68:58:8B:AF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199067C0AEC4C31EB194F3B6646599CB30B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XFsxfln0RaSFtnanjW2JxWhYi68.roa
Signing time: Mon 01 Sep 2025 18:13:36 +0000
ROA not before: Mon 01 Sep 2025 18:13:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a06:1184:11::/48 maxlen: 48
2a06:35c3:100::/48 maxlen: 48
2a09:17c1:4a::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0c:7882:2::/48 maxlen: 48
2a0e:15c7:101::/48 maxlen: 48
2a0e:1a83:99::/48 maxlen: 48
2a0e:c786:122::/48 maxlen: 48
2a0e:c787:1000::/48 maxlen: 48
2a0e:f600:2a::/48 maxlen: 48
2a0f:1200:10::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:6::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:3046:85::/48 maxlen: 48
2a0f:31c0::/32 maxlen: 32
2a0f:3d80:1312::/48 maxlen: 48
2a0f:7d00:100::/48 maxlen: 48
2a0f:bc04:1004::/48 maxlen: 48
2a0f:de40::/29 maxlen: 32
2a0f:dec0::/29 maxlen: 29
2a0f:e1c0:1312::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e7c7:b4::/48 maxlen: 48
2a0f:ea44:55::/48 maxlen: 48
2a10:67c2:d6::/48 maxlen: 48
2a10:67c5:2::/48 maxlen: 48
2a10:6f00::/29 maxlen: 32
2a10:7700::/29 maxlen: 32
2a12:ac46:99::/48 maxlen: 48
2a12:ecc0:11::/48 maxlen: 48
2a13:18c5:11::/48 maxlen: 48
2a13:18c6:8512::/48 maxlen: 48
2a13:8100::/29 maxlen: 32
2a13:8c86:10a::/48 maxlen: 48
2a13:9285:100::/48 maxlen: 48
2a13:e100:323::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:7c:0a:ec:4c:31:eb:19:4f:3b:66:46:59:9c:b3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 1 18:13:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c5b317e59f445a485b676a78d6d89c568588baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:31:62:a4:cf:70:9b:30:04:90:d9:31:0a:
19:6f:90:73:ec:54:6a:0c:e2:12:2e:79:5b:1f:da:
51:54:eb:19:1c:06:cc:7c:00:09:ee:4c:af:be:3e:
44:39:da:77:12:b3:05:a9:48:e0:6f:8a:a4:6c:61:
02:ef:80:13:60:f8:5c:0c:d6:a6:03:82:75:fb:6d:
bd:a9:24:ff:2d:72:14:e2:28:74:58:d8:1b:c9:66:
13:fb:7e:40:c1:df:c5:97:45:b8:bf:2d:2e:92:3c:
95:4c:93:05:4c:c8:aa:5b:77:3f:14:e7:83:9a:a2:
d4:24:97:91:04:3b:75:1b:98:fc:1e:c5:46:d9:31:
14:80:fe:4d:ef:9c:4c:f3:e2:79:f9:75:b4:69:5c:
9e:b4:2c:e6:77:ee:bb:ed:89:f6:e5:bd:ee:8a:1b:
8d:c3:2b:40:2e:7a:45:cd:de:84:6c:37:a2:91:ad:
55:01:d2:d3:22:02:11:3c:c1:67:89:63:20:d7:62:
e1:81:36:7c:b8:f4:c5:2c:cc:f0:a3:90:ea:da:68:
90:34:17:f8:a2:0b:8c:d1:90:44:82:f6:2e:dd:60:
46:27:08:32:2b:25:f9:9a:42:d5:6e:e3:b0:fb:f1:
3f:21:89:f7:41:2c:76:ce:2e:a4:59:e1:a6:bc:a4:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:31:7E:59:F4:45:A4:85:B6:76:A7:8D:6D:89:C5:68:58:8B:AF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XFsxfln0RaSFtnanjW2JxWhYi68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1184:11::/48
2a06:35c3:100::/48
2a09:17c1:4a::/48
2a0a:2d06:66::/48
2a0c:7882:2::/48
2a0e:15c7:101::/48
2a0e:1a83:99::/48
2a0e:c786:122::/48
2a0e:c787:1000::/48
2a0e:f600:2a::/48
2a0f:1200:10::/48
2a0f:1206:66::/48
2a0f:1584:6::/48
2a0f:1e80:1986::/48
2a0f:3046:85::/48
2a0f:31c0::/32
2a0f:3d80:1312::/48
2a0f:7d00:100::/48
2a0f:bc04:1004::/48
2a0f:de40::/29
2a0f:dec0::/29
2a0f:e1c0:1312::/48
2a0f:e207:fd38::/48
2a0f:e7c7:b4::/48
2a0f:ea44:55::/48
2a10:67c2:d6::/48
2a10:67c5:2::/48
2a10:6f00::/29
2a10:7700::/29
2a12:ac46:99::/48
2a12:ecc0:11::/48
2a13:18c5:11::/48
2a13:18c6:8512::/48
2a13:8100::/29
2a13:8c86:10a::/48
2a13:9285:100::/48
2a13:e100:323::/48
Signature Algorithm: sha256WithRSAEncryption
80:ed:22:fe:fa:91:c4:0e:81:f3:ca:52:e4:68:0e:b7:22:b1:
b6:2e:48:f8:2e:3d:ac:1d:7d:7a:af:32:fa:0f:d9:d4:90:7b:
a5:4f:74:a7:fd:a6:b6:9a:9b:78:5d:ab:89:9b:ac:f8:0f:7d:
41:61:17:4a:9c:d9:cf:6b:22:90:a7:03:11:44:7f:84:4c:cf:
6f:53:ff:ac:64:20:ea:8d:0d:06:45:a1:a5:45:bd:b0:8e:9e:
49:d7:62:06:e2:db:a7:20:28:62:aa:ab:ee:e8:a9:5c:3c:83:
96:1f:d1:d5:7d:ba:3b:54:b3:9f:a0:38:ca:b0:dd:20:c0:19:
a2:91:46:de:4a:f3:1a:e7:85:2f:2f:d6:0b:89:07:7f:f8:9d:
2a:2f:e1:f1:a0:a3:ed:fa:35:01:4c:c1:75:45:c0:8a:cb:a8:
09:50:c3:80:5d:fa:f9:9a:09:12:72:c3:44:a0:7c:00:bc:1c:
b8:6c:ce:4c:b9:70:ce:eb:d8:e2:a0:2f:cc:2b:79:ee:1f:2a:
63:a6:61:ef:0c:6e:17:a7:5f:10:eb:6b:20:d4:71:3c:3c:77:
ce:13:cf:b2:46:92:35:44:20:87:7f:54:20:c3:0a:84:57:31:
44:7f:95:d7:cb:68:d0:76:37:ad:36:11:9b:9c:58:12:1b:30:
f1:5b:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:48:28 2025 by rpki-client