Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fgahHcFc8Zfv85QYQPFsY13CvU8.roa
File: fgahHcFc8Zfv85QYQPFsY13CvU8.roa (raw, json)
Hash identifier: 5qSjX7ePzthTK+oMojwRLA/gslNQrWfxpt6HvGxsphM=
Subject key identifier: 7E:06:A1:1D:C1:5C:F1:97:EF:F3:94:18:40:F1:6C:63:5D:C2:BD:4F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01971AC3E4474DA9E72B096805E7D18CA447
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fgahHcFc8Zfv85QYQPFsY13CvU8.roa
Signing time: Thu 29 May 2025 06:38:54 +0000
ROA not before: Thu 29 May 2025 06:38:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a12:ecc0:158::/48 maxlen: 48
2a13:18c6:66::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:c3:e4:47:4d:a9:e7:2b:09:68:05:e7:d1:8c:a4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 29 06:38:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e06a11dc15cf197eff3941840f16c635dc2bd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:0e:e8:23:76:5b:77:b6:27:b6:6d:ac:24:
4d:12:a4:29:fd:05:c4:62:8e:31:c2:7e:92:6f:f0:
93:cf:6c:e1:8f:e1:26:fd:02:d8:8d:41:56:9c:5e:
52:13:9d:24:06:5b:9d:75:6a:d7:36:f2:0f:d3:4d:
0d:81:38:20:be:cf:e7:6a:41:9a:4e:7e:81:6c:23:
46:f0:f6:9c:a5:e8:96:2f:e3:77:b7:1d:03:1f:a8:
1a:19:f6:05:63:43:07:22:06:f1:5e:69:8e:94:35:
9b:02:8c:42:9f:8c:09:f3:57:12:f8:03:03:c5:fe:
a2:0e:71:3f:e9:f2:71:e7:17:5d:c6:5f:51:53:9f:
36:11:74:1c:49:e1:bb:23:bf:5b:ec:d0:ea:41:39:
5d:33:24:b7:60:24:16:5f:3d:1f:89:cf:02:12:91:
31:11:0a:66:79:04:5f:a7:e0:76:d5:6c:bc:c3:d7:
fe:51:2b:e5:a1:fc:55:28:3a:e1:00:c9:8a:80:cb:
1f:ae:1b:a6:dd:8e:46:33:38:29:96:f9:fb:1a:84:
4b:f1:8b:35:44:c6:1c:35:51:00:d1:7b:be:94:63:
5e:13:59:f6:cd:b5:6d:99:35:e6:e9:6e:d1:94:31:
5b:76:e2:e4:0f:0a:3f:4c:e5:71:e8:33:7c:a1:0c:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:A1:1D:C1:5C:F1:97:EF:F3:94:18:40:F1:6C:63:5D:C2:BD:4F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fgahHcFc8Zfv85QYQPFsY13CvU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.116.0/24
45.9.122.0/24
45.128.76.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0f:140::/29
2a0f:2500::/29
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e4c0::/29
2a0f:fc00::/29
2a12:ecc0:158::/48
2a13:18c6:66::/48
2a13:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
b0:05:0c:b2:e4:e3:f2:8e:47:36:dc:b3:3c:55:eb:6c:b9:c5:
f9:3b:1f:73:31:82:e8:0b:fa:1b:1d:16:73:a2:76:84:ea:8f:
c5:bb:f2:af:c8:bc:f6:49:a8:6c:ab:75:95:7d:31:5c:2d:17:
99:f3:5f:21:0b:08:5c:0f:cf:bf:b5:bd:cc:64:69:51:98:b3:
4b:e0:21:b5:e4:d7:de:dc:70:31:1d:57:7f:ab:21:3c:16:5b:
7e:a8:91:a1:26:33:de:71:73:cd:02:2a:27:6d:76:ef:2a:2d:
8e:ee:64:da:2c:d9:5f:d5:b7:88:e8:bd:d3:53:e7:d4:56:00:
10:62:f3:32:06:81:c5:98:92:49:44:16:2e:16:51:90:9b:7d:
1c:b8:46:63:0a:d8:15:2d:66:62:99:c9:79:e6:56:96:c5:f5:
60:e4:f0:59:7f:0f:f7:28:25:fe:18:b8:a7:6f:1d:98:d7:e1:
b1:5f:23:fb:62:e9:8c:73:e5:2a:ed:4d:39:5a:86:6b:4e:94:
e3:97:49:81:31:24:48:9a:10:b0:98:57:5a:3a:ca:55:87:5c:
91:c6:5f:dc:11:c3:5c:dd:e8:bd:be:9c:16:32:47:a2:d8:dd:
bc:43:63:e1:5f:d1:6c:70:21:78:46:c9:0f:82:0f:fe:63:af:
5a:53:1d:22
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgISAZcaw+RHTannKwloBefRjKRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTI5MDYzODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTA2YTExZGMxNWNmMTk3ZWZmMzk0MTg0MGYxNmM2MzVkYzJiZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sUO6CN2W3e2J7ZtrCRNEqQp/QXE
Yo4xwn6Sb/CTz2zhj+Em/QLYjUFWnF5SE50kBluddWrXNvIP000NgTggvs/nakGa
Tn6BbCNG8PacpeiWL+N3tx0DH6gaGfYFY0MHIgbxXmmOlDWbAoxCn4wJ81cS+AMD
xf6iDnE/6fJx5xddxl9RU582EXQcSeG7I79b7NDqQTldMyS3YCQWXz0fic8CEpEx
EQpmeQRfp+B21Wy8w9f+USvlofxVKDrhAMmKgMsfrhum3Y5GMzgplvn7GoRL8Ys1
RMYcNVEA0Xu+lGNeE1n2zbVtmTXm6W7RlDFbduLkDwo/TOVx6DN8oQwplQIDAQAB
o4ICwzCCAr8wHQYDVR0OBBYEFH4GoR3BXPGX7/OUGEDxbGNdwr1PMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZmdhaEhjRmM4WmZ2ODVRWVFQRnNZMTNDdlU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHYBggrBgEFBQcBBwEB/wSByDCBxTAYBAIAATASAwQALQl0
AwQALQl6AwQALYBMMIGoBAIAAjCBoQMFAyoEn0ADBwAqBhGEAQEDBQMqBjvAAwUD
KgeKQAMHASoKLQYBAgMHACoMeIYAmQMHACoMeIYBAAMHACoOFccAmQMFAyoPAUAD
BQMqDyUAAwUDKg/MAAMFAyoP0gADBQMqD9pAAwUDKg/bQAMFAyoP38ADBQMqD+BA
AwUDKg/kwAMFAyoP/AADBwAqEuzAAVgDBwAqExjGAGYDBQMqE32AMA0GCSqGSIb3
DQEBCwUAA4IBAQCwBQyy5OPyjkc23LM8VetsucX5Ox9zMYLoC/obHRZzonaE6o/F
u/KvyLz2Sahsq3WVfTFcLReZ818hCwhcD8+/tb3MZGlRmLNL4CG15Nfe3HAxHVd/
qyE8Flt+qJGhJjPecXPNAionbXbvKi2O7mTaLNlf1beI6L3TU+fUVgAQYvMyBoHF
mJJJRBYuFlGQm30cuEZjCtgVLWZimcl55laWxfVg5PBZfw/3KCX+GLinbx2Y1+Gx
XyP7YumMc+Uq7U05WoZrTpTjl0mBMSRImhCwmFdaOspVh1yRxl/cEcNc3ei9vpwW
Mkei2N28Q2PhX9FscCF4RskPgg/+Y69aUx0i
-----END CERTIFICATE-----
Generated at Fri Jun 6 14:10:47 2025 by rpki-client