Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iCQyMm_REBtxEFNPYz9Bzx-TPkQ.roa
File: iCQyMm_REBtxEFNPYz9Bzx-TPkQ.roa (raw, json)
Hash identifier: RrY3lQsEq9Hxil9Ee9PQh6Cpwd/IOKvupY8yBzbYsbA=
Subject key identifier: 88:24:32:32:6F:D1:10:1B:71:10:53:4F:63:3F:41:CF:1F:93:3E:44
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01990F951EDC8EF782999C123989A1CDA240
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iCQyMm_REBtxEFNPYz9Bzx-TPkQ.roa
Signing time: Wed 03 Sep 2025 12:37:34 +0000
ROA not before: Wed 03 Sep 2025 12:37:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209375
IP address blocks: 2a0e:f500::/29 maxlen: 29
2a10:4e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:95:1e:dc:8e:f7:82:99:9c:12:39:89:a1:cd:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 3 12:37:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=882432326fd1101b7110534f633f41cf1f933e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:29:c0:27:63:c8:20:73:85:02:3d:0a:13:
9d:18:9d:7c:be:59:ab:e0:8d:b6:63:9a:49:83:fb:
3e:97:f9:9a:22:81:35:0d:85:7c:f6:0b:53:20:ca:
a1:73:0e:e1:af:5d:98:ee:e9:10:d6:26:89:18:7d:
da:a0:ca:9c:35:56:53:02:a3:03:b1:b1:ad:70:b7:
e8:16:86:fc:b7:cf:83:03:0b:57:c0:a8:f6:f1:46:
f2:a1:df:8b:c8:9c:07:df:22:97:f7:79:e4:24:0a:
25:e8:ea:34:11:10:28:27:a5:bc:71:7d:b0:34:40:
31:84:31:b6:e6:01:f1:23:9a:70:30:fb:9d:92:74:
30:02:df:bb:54:26:7c:be:76:d7:16:1a:06:98:bb:
6c:ca:db:be:2f:36:3b:a9:79:64:9d:30:bf:1b:cb:
f6:c9:1e:43:49:07:49:1f:a3:c2:8a:ef:28:de:34:
26:da:67:b8:10:f5:23:d9:d5:af:f6:00:23:32:21:
6e:af:a9:b3:51:bf:3d:cb:4f:76:74:29:45:a0:f2:
3b:90:25:35:2c:d6:d2:50:5f:fd:32:31:db:bb:6b:
7d:80:81:df:bc:18:47:78:c9:8e:9e:35:63:1c:7f:
8b:3d:eb:d5:3e:37:cd:3b:9a:a3:a1:20:ea:a4:c1:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:32:32:6F:D1:10:1B:71:10:53:4F:63:3F:41:CF:1F:93:3E:44
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iCQyMm_REBtxEFNPYz9Bzx-TPkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f500::/29
2a10:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
3e:88:c4:83:a5:f9:8c:90:92:93:a3:09:be:c7:00:dc:7c:08:
35:31:84:ee:3d:79:fb:7c:e9:0e:4c:3e:9a:42:23:ef:07:99:
55:2d:05:97:c5:4c:d4:72:94:52:68:73:1a:cd:51:93:ff:7f:
8b:35:83:c2:23:a7:43:9f:83:83:ab:8d:da:6a:d5:ff:29:67:
5c:8a:42:61:95:bd:70:fe:5a:7f:46:9f:d7:80:cb:e2:9a:23:
ac:f3:8e:e2:b2:ad:48:14:9e:2e:fd:16:9c:a7:bf:e8:98:a5:
5b:29:0b:cc:29:76:d5:33:d6:ce:0a:b9:d1:d9:2b:79:bb:85:
a2:a0:79:0f:c5:9c:48:cd:e0:f0:42:cc:3c:1a:aa:6b:b3:5a:
34:be:6d:d4:98:dc:81:0d:de:d4:d1:ec:54:b1:9d:16:54:65:
45:2f:2d:29:9f:05:d1:77:53:89:9b:ef:ee:4e:73:f6:66:34:
64:88:83:c8:9a:88:12:b5:e4:7f:61:91:e9:73:d4:11:38:1a:
c7:8d:b5:84:23:89:7b:f9:53:f5:0e:a8:1f:3e:e4:ad:a9:59:
41:ab:d7:83:2b:e2:25:c5:5a:8c:11:b0:fb:93:18:bf:79:92:
b3:f5:19:c3:d4:d1:74:d9:2e:ed:34:5d:fb:12:df:eb:03:d3:
ad:dd:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:46:12 2025 by rpki-client