Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lZNR1SFsgxuebh8BjiXH6RUZT54.roa
File: lZNR1SFsgxuebh8BjiXH6RUZT54.roa (raw, json)
Hash identifier: Vs1NajBLY+dX9iTOv6U8EGyICaqc8he94WUqjAr7Ma8=
Subject key identifier: 95:93:51:D5:21:6C:83:1B:9E:6E:1F:01:8E:25:C7:E9:15:19:4F:9E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A00FD6A4E3823E5CEB40A8F3C2C76F730
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lZNR1SFsgxuebh8BjiXH6RUZT54.roa
Signing time: Mon 20 Oct 2025 09:39:59 +0000
ROA not before: Mon 20 Oct 2025 09:39:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a05:b300::/29 maxlen: 32
2a06:1184:11::/48 maxlen: 48
2a06:35c3:100::/48 maxlen: 48
2a09:17c1:4a::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0c:7882:2::/48 maxlen: 48
2a0e:15c7:101::/48 maxlen: 48
2a0e:1a83:99::/48 maxlen: 48
2a0e:c786:122::/48 maxlen: 48
2a0e:c787:1000::/48 maxlen: 48
2a0e:f600:2a::/48 maxlen: 48
2a0f:1200:10::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:6::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:3046:85::/48 maxlen: 48
2a0f:3047:fe48::/48 maxlen: 48
2a0f:31c0::/32 maxlen: 32
2a0f:3d80:1312::/48 maxlen: 48
2a0f:7d00:100::/48 maxlen: 48
2a0f:bc04:1004::/48 maxlen: 48
2a0f:da40::/29 maxlen: 32
2a0f:de40::/29 maxlen: 32
2a0f:dec0::/29 maxlen: 29
2a0f:e1c0:1312::/48 maxlen: 48
2a0f:e1c7:77::/48 maxlen: 48
2a0f:e202:33::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e740::/29 maxlen: 32
2a0f:e7c7:b4::/48 maxlen: 48
2a0f:ea44:55::/48 maxlen: 48
2a0f:ea44:acab::/48 maxlen: 48
2a0f:ec00::/29 maxlen: 29
2a10:67c2:d6::/48 maxlen: 48
2a10:67c5:2::/48 maxlen: 48
2a10:6f00::/29 maxlen: 32
2a10:7700::/29 maxlen: 32
2a11:5200::/29 maxlen: 29
2a12:ac46:77::/48 maxlen: 48
2a12:ac46:99::/48 maxlen: 48
2a12:ecc0:11::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a13:18c5:11::/48 maxlen: 48
2a13:18c6:101::/48 maxlen: 48
2a13:18c6:8512::/48 maxlen: 48
2a13:8100::/29 maxlen: 32
2a13:8c86:88::/48 maxlen: 48
2a13:8c86:10a::/48 maxlen: 48
2a13:9285:100::/48 maxlen: 48
2a13:c900:120::/48 maxlen: 48
2a13:e100:323::/48 maxlen: 48
2a13:e102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:fd:6a:4e:38:23:e5:ce:b4:0a:8f:3c:2c:76:f7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 20 09:39:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=959351d5216c831b9e6e1f018e25c7e915194f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:21:fb:3e:07:b3:08:44:42:9c:4f:07:37:
51:97:8a:95:04:6d:4d:4d:54:74:4f:92:ec:4a:ac:
04:43:df:99:57:1c:23:d8:2a:8a:15:b4:d2:cb:45:
bc:18:2a:64:4d:2f:01:d7:c5:0e:d5:cf:d6:c0:dc:
89:e6:9b:5f:ea:1f:97:1e:df:b5:08:3c:d7:62:13:
21:29:40:b4:d5:52:bd:ae:68:ad:40:35:7a:8e:dd:
7d:65:32:98:82:b8:99:f8:f1:10:1e:7c:ac:9b:ff:
59:5f:bb:8d:56:a0:ea:62:e2:94:f9:01:af:da:be:
18:f9:38:62:71:65:6f:d5:5e:2f:58:ea:80:0a:94:
69:5d:94:54:db:c2:fd:c7:1a:90:a5:15:73:d8:37:
41:fc:a7:81:78:5c:b2:bf:93:42:5c:82:0e:f0:86:
68:82:f3:39:3c:d1:65:b0:cd:22:bf:85:94:ab:ef:
27:8a:2b:c2:58:87:11:b0:1e:70:30:f0:59:3a:fa:
09:b0:6b:3b:2e:5c:98:f9:08:85:bc:65:af:db:1f:
a2:32:b9:88:c3:8a:c5:bb:e8:f9:19:f6:77:5c:a7:
40:87:c0:bd:93:99:47:f1:00:d0:c0:af:14:c3:35:
cf:a7:1f:40:22:c0:d5:7a:65:43:d8:ee:eb:6a:e6:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:51:D5:21:6C:83:1B:9E:6E:1F:01:8E:25:C7:E9:15:19:4F:9E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lZNR1SFsgxuebh8BjiXH6RUZT54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:1184:11::/48
2a06:35c3:100::/48
2a09:17c1:4a::/48
2a0a:2d06:66::/48
2a0c:7882:2::/48
2a0e:15c7:101::/48
2a0e:1a83:99::/48
2a0e:c786:122::/48
2a0e:c787:1000::/48
2a0e:f600:2a::/48
2a0f:1200:10::/48
2a0f:1206:66::/48
2a0f:1584:6::/48
2a0f:1e80:1986::/48
2a0f:3046:85::/48
2a0f:3047:fe48::/48
2a0f:31c0::/32
2a0f:3d80:1312::/48
2a0f:7d00:100::/48
2a0f:bc04:1004::/48
2a0f:da40::/29
2a0f:de40::/29
2a0f:dec0::/29
2a0f:e1c0:1312::/48
2a0f:e1c7:77::/48
2a0f:e202:33::/48
2a0f:e207:fd38::/48
2a0f:e740::/29
2a0f:e7c7:b4::/48
2a0f:ea44:55::/48
2a0f:ea44:acab::/48
2a0f:ec00::/29
2a10:67c2:d6::/48
2a10:67c5:2::/48
2a10:6f00::/29
2a10:7700::/29
2a11:5200::/29
2a12:ac46:77::/48
2a12:ac46:99::/48
2a12:ecc0:11::/48
2a12:ecc0:3e2::/48
2a13:18c5:11::/48
2a13:18c6:101::/48
2a13:18c6:8512::/48
2a13:8100::/29
2a13:8c86:88::/48
2a13:8c86:10a::/48
2a13:9285:100::/48
2a13:c900:120::/48
2a13:e100:323::/48
2a13:e102:1::/48
Signature Algorithm: sha256WithRSAEncryption
2f:80:4b:7f:86:b4:6a:3a:2a:f5:20:7f:1d:cd:ba:59:f8:ef:
93:d0:b9:2d:3c:8a:08:ae:f5:4a:91:29:dd:be:b1:86:67:7c:
d8:81:e5:88:c3:43:6c:f6:09:89:84:2b:ae:a0:29:22:39:ce:
23:8c:77:33:48:96:e2:7f:00:2b:98:f0:fb:da:3e:25:b7:bb:
f9:d8:8a:26:93:16:f9:68:fb:da:60:ab:01:54:00:3f:24:74:
ea:0b:81:f3:01:e4:d4:4b:dd:64:39:1a:bb:51:bb:fb:6b:f8:
c9:7e:83:fb:7c:e9:4d:1a:1c:e3:f1:74:a9:47:d7:7e:f6:f5:
40:85:6f:25:eb:0c:a4:58:52:99:32:a7:52:43:ea:73:da:40:
79:32:fc:a1:fd:ff:3f:83:22:f4:23:20:c9:b1:be:da:f0:4f:
6e:2f:d5:f2:ce:6d:c2:13:f1:40:63:59:25:a9:53:db:cf:06:
a6:1e:53:84:23:0c:3f:e6:b7:9a:4b:d6:86:1e:c4:66:7e:7f:
cc:54:f7:fe:9f:b9:c3:7f:21:33:d3:12:28:02:50:31:f7:d7:
54:8e:a1:4f:59:8d:7f:e6:2a:da:fe:76:be:7d:7f:23:f9:fe:
2c:09:a6:ce:13:0d:11:32:da:06:f2:56:21:78:ea:ea:f7:d6:
96:cd:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:42:20 2025 by rpki-client