Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gUjWefhxO7uU2PmYqhNz98dLJOQ.roa
File: gUjWefhxO7uU2PmYqhNz98dLJOQ.roa (raw, json)
Hash identifier: czr/22BFM93BMq7BBNyZhpD94yUswbNPzo8SK0V+X4I=
Subject key identifier: 81:48:D6:79:F8:71:3B:BB:94:D8:F9:98:AA:13:73:F7:C7:4B:24:E4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198EC4A3B6D43440AF3C06F6BD8A75BD9E8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gUjWefhxO7uU2PmYqhNz98dLJOQ.roa
Signing time: Wed 27 Aug 2025 16:09:04 +0000
ROA not before: Wed 27 Aug 2025 16:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a0e:1a83:88::/48 maxlen: 48
2a0f:1206:77::/48 maxlen: 48
2a0f:1540::/29 maxlen: 29
2a0f:1640::/29 maxlen: 29
2a0f:1940::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2940::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:30c0::/29 maxlen: 29
2a0f:3140::/29 maxlen: 29
2a0f:3540::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:bc02::/32 maxlen: 32
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c7:100::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e202:97::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea44:88::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a10:3440::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a11:3240::/29 maxlen: 29
2a11:4800::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a12:2c80::/29 maxlen: 29
2a12:3f00::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5900::/29 maxlen: 29
2a12:5e00::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
2a12:dc00::/29 maxlen: 29
2a12:ecc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ec:4a:3b:6d:43:44:0a:f3:c0:6f:6b:d8:a7:5b:d9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 27 16:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8148d679f8713bbb94d8f998aa1373f7c74b24e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:ec:9a:78:5d:3a:80:e2:14:05:d7:78:fb:
c1:64:7d:e8:a5:8c:86:5c:98:c7:db:6e:37:20:dd:
31:9c:8a:c4:5d:dc:5f:9f:c4:1a:cd:80:8b:ad:67:
98:ca:1f:ca:59:28:32:52:2d:f7:5e:3c:e1:d8:ea:
02:e9:79:e5:17:b8:27:ee:bd:6e:3e:78:78:bc:92:
73:75:f9:3c:d5:2e:2b:a9:af:18:68:64:39:4f:26:
99:6a:da:b6:ac:14:28:f6:76:1f:9a:4e:20:b2:d8:
f0:b5:b6:28:bb:b0:a6:9c:4f:45:7a:84:c4:89:c9:
2a:8e:f9:34:43:d6:e4:4e:cd:81:23:17:a8:ce:67:
ad:fd:f6:ce:14:30:b9:97:16:84:67:ef:bd:46:12:
96:0e:a1:83:39:ce:d0:7f:4e:c9:3b:10:fd:67:06:
ec:76:0e:81:2a:49:ba:91:63:3b:94:09:96:2a:b2:
93:1c:ac:8f:92:75:f6:2d:d2:2d:eb:73:b5:75:89:
ad:ac:de:30:b7:fb:c7:61:d4:c9:eb:16:32:2d:82:
12:79:17:29:50:53:9b:e1:93:c7:ff:30:53:65:3d:
1a:e1:53:f8:2b:2e:e4:c2:84:8c:05:8f:1c:c3:40:
5a:bf:29:22:70:8c:c5:c0:23:89:05:16:1a:e8:3c:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:D6:79:F8:71:3B:BB:94:D8:F9:98:AA:13:73:F7:C7:4B:24:E4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gUjWefhxO7uU2PmYqhNz98dLJOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a0e:1a83:88::/48
2a0f:1206:77::/48
2a0f:1540::/29
2a0f:1640::/29
2a0f:1940::/29
2a0f:2840::/29
2a0f:2940::/29
2a0f:2a40::/29
2a0f:2dc0::/29
2a0f:2e40::/29
2a0f:30c0::/29
2a0f:3140::/29
2a0f:3540::/29
2a0f:3740::/29
2a0f:bc02::/32
2a0f:e1c0:3::/48
2a0f:e1c7:100::/48
2a0f:e200:5::/48
2a0f:e202:97::/48
2a0f:e440::/29
2a0f:ea40:8::/48
2a0f:ea44:88::/48
2a0f:ea47:ff49::/48
2a10:3440::/29
2a10:3840::/29
2a11:3240::/29
2a11:4800::/29
2a11:8700::/29
2a11:e580::/29
2a11:efc0::/29
2a12:2c80::/29
2a12:3f00::/29
2a12:4b00::/29
2a12:5900::/29
2a12:5e00::/29
2a12:cd00::/29
2a12:dc00::/29
2a12:ecc0:3::/48
Signature Algorithm: sha256WithRSAEncryption
8c:9b:86:e2:b5:4a:74:b5:53:4d:34:42:81:24:03:38:71:ff:
33:34:c1:72:b4:b1:bd:94:f9:b9:53:1c:8b:b9:53:23:d8:4d:
e9:49:ac:d0:aa:48:b3:ae:16:75:7a:e2:4f:16:80:d7:3c:ed:
19:68:44:4e:41:18:c9:04:b4:83:f8:6f:f5:6d:b3:51:21:13:
51:fa:a4:67:bd:b1:c7:26:85:51:2d:4e:68:97:d7:d7:47:d7:
bc:e4:66:7d:b1:2e:c1:49:8c:5a:11:b2:ad:ea:0c:2b:83:9f:
f3:55:33:aa:95:ac:88:51:de:16:39:2b:48:b9:9e:d6:57:ec:
de:b6:b5:5f:cb:92:fc:8e:3f:33:c7:e1:59:33:9b:ab:7d:28:
5d:c0:fc:bf:79:d7:d2:50:28:21:23:80:64:94:d4:00:c6:30:
e6:8e:00:5d:d6:e1:6f:d5:82:a5:55:40:9b:3c:9b:57:a1:b7:
b9:82:2f:74:3c:41:57:d1:0c:44:7b:13:d3:55:b7:22:38:91:
0a:b1:23:58:28:b4:3c:7a:a3:fc:5c:57:3f:dc:98:86:fb:32:
de:3e:5b:df:a3:e3:7c:88:93:76:dc:ad:f1:f5:67:04:fd:5c:
eb:9a:aa:ac:ea:68:82:ea:b6:2b:6e:0c:c1:40:bf:af:dc:61:
9b:82:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:51:59 2025 by rpki-client