Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gg2jECOXcih-N60spDI6QF5SSHU.roa
File: gg2jECOXcih-N60spDI6QF5SSHU.roa (raw, json)
Hash identifier: ry5RFuauNp08pfKr+sncMnk3ri9ID7akU4zuwHUwOz4=
Subject key identifier: 82:0D:A3:10:23:97:72:28:7E:37:AD:2C:A4:32:3A:40:5E:52:48:75
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01990E713FEA9BBBD9C97BF10B6164CF45F9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gg2jECOXcih-N60spDI6QF5SSHU.roa
Signing time: Wed 03 Sep 2025 07:18:46 +0000
ROA not before: Wed 03 Sep 2025 07:18:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:1a84::/32 maxlen: 32
2a0f:1e84:20::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a12:ecc0:22::/48 maxlen: 48
2a13:540::/29 maxlen: 29
2a13:2b40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:71:3f:ea:9b:bb:d9:c9:7b:f1:0b:61:64:cf:45:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 3 07:18:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=820da310239772287e37ad2ca4323a405e524875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:c6:d5:e3:c2:15:f8:a7:f0:04:05:31:36:
0e:68:b1:c2:79:ea:0f:94:5d:a5:7e:10:a8:36:6d:
e9:99:9e:6f:9b:3e:78:7e:13:91:e2:b5:ec:cb:6e:
dd:98:46:ac:7b:81:fd:5b:f0:1d:76:66:08:53:c5:
42:3e:30:ac:e1:c9:ba:a9:77:d0:1d:42:3d:37:dd:
43:5e:ff:16:3a:28:21:d9:f7:74:dd:58:d5:1e:4f:
52:88:da:a7:50:79:65:08:16:67:a7:9f:f5:00:e2:
5b:d6:4c:ad:39:97:e0:c2:b0:42:fe:72:18:e6:b9:
12:e4:48:59:a0:f5:c9:67:ac:73:f1:64:f5:2c:42:
e9:ca:00:e0:6f:6b:0d:fe:0c:b0:89:46:72:cb:77:
df:cc:5c:e4:d1:a2:15:92:fa:7e:27:ae:b3:b6:2d:
0e:d6:d7:0d:90:cb:ae:5c:45:e3:6a:06:8e:98:23:
7c:c8:e6:0a:75:e3:38:7b:50:0d:7d:11:1f:12:99:
ad:a0:81:99:e9:93:07:1e:f8:6a:12:07:97:9c:3f:
33:18:23:00:bd:35:a9:d4:31:1d:f5:1f:58:60:81:
07:e1:fe:34:4c:2b:1c:54:6f:3d:17:9b:11:57:1f:
f9:1a:55:18:0b:6d:71:13:75:b9:5e:f5:af:9d:90:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:A3:10:23:97:72:28:7E:37:AD:2C:A4:32:3A:40:5E:52:48:75
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gg2jECOXcih-N60spDI6QF5SSHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1a84::/32
2a0f:1e84:20::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a12:ecc0:22::/48
2a13:540::/29
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
20:02:6f:13:5b:4e:d3:7e:cf:6c:48:9e:d8:9c:98:20:a2:d3:
5c:6c:4d:fb:bb:8f:c1:90:23:33:0a:57:ca:b3:9c:8b:5b:a8:
36:46:cc:cd:31:72:a0:38:87:0d:43:9d:ac:5b:42:f9:31:7c:
c8:13:12:bf:9d:60:40:1d:1d:6b:5e:50:f3:5d:9d:23:c2:aa:
01:50:45:34:d0:b1:3b:01:d1:6f:22:84:f4:04:1b:fb:19:ec:
3e:d1:6c:a3:7f:81:6e:48:2c:8b:2e:dd:07:cf:1e:70:eb:21:
d6:e5:71:e4:20:73:ac:14:66:0e:c9:0f:84:7f:f4:41:fc:e6:
65:b5:54:a5:7f:47:cf:60:76:01:a6:14:33:a5:6c:e7:91:54:
b7:b9:57:d5:02:10:73:a7:34:48:43:8b:1b:02:b8:a8:5a:a2:
86:11:d9:17:25:c0:12:b7:dc:7b:9f:d3:03:0d:1a:0b:28:e5:
e3:74:30:c4:7d:34:06:21:53:1f:a6:b6:14:57:b3:08:ac:a6:
e9:1b:d9:63:ea:c3:ff:4d:13:ee:f2:c2:45:25:e9:f6:0f:76:
16:75:6a:7d:ab:c4:ef:23:fc:17:65:a7:13:b0:09:ec:d1:b7:
54:59:b3:5b:1e:d5:b8:66:59:ce:88:e0:97:7e:60:49:7b:e7:
4f:a0:44:b4
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZkOcT/qm7vZyXvxC2Fkz0X5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwOTAzMDcxODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjBkYTMxMDIzOTc3MjI4N2UzN2FkMmNhNDMyM2E0MDVlNTI0ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhXG1ePCFfin8AQFMTYOaLHCeeoP
lF2lfhCoNm3pmZ5vmz54fhOR4rXsy27dmEase4H9W/AddmYIU8VCPjCs4cm6qXfQ
HUI9N91DXv8WOigh2fd03VjVHk9SiNqnUHllCBZnp5/1AOJb1kytOZfgwrBC/nIY
5rkS5EhZoPXJZ6xz8WT1LELpygDgb2sN/gywiUZyy3ffzFzk0aIVkvp+J66zti0O
1tcNkMuuXEXjagaOmCN8yOYKdeM4e1ANfREfEpmtoIGZ6ZMHHvhqEgeXnD8zGCMA
vTWp1DEd9R9YYIEH4f40TCscVG89F5sRVx/5GlUYC21xE3W5XvWvnZDstwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFIINoxAjl3IofjetLKQyOkBeUkh1MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZ2cyakVDT1hjaWgtTjYwc3BESTZRRjVTU0hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AwUAKg4ahAMH
ACoPHoQAIAMHACoPfQAAAQMHACoPvAChxAMHACoS7MAAIgMFAyoTBUADBQMqEytA
MA0GCSqGSIb3DQEBCwUAA4IBAQAgAm8TW07Tfs9sSJ7YnJggotNcbE37u4/BkCMz
ClfKs5yLW6g2RszNMXKgOIcNQ52sW0L5MXzIExK/nWBAHR1rXlDzXZ0jwqoBUEU0
0LE7AdFvIoT0BBv7Gew+0Wyjf4FuSCyLLt0Hzx5w6yHW5XHkIHOsFGYOyQ+Ef/RB
/OZltVSlf0fPYHYBphQzpWznkVS3uVfVAhBzpzRIQ4sbArioWqKGEdkXJcASt9x7
n9MDDRoLKOXjdDDEfTQGIVMfprYUV7MIrKbpG9lj6sP/TRPu8sJFJen2D3YWdWp9
q8TvI/wXZacTsAns0bdUWbNbHtW4ZlnOiOCXfmBJe+dPoES0
-----END CERTIFICATE-----
Generated at Sat Sep 6 20:46:23 2025 by rpki-client