Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r2TzzHmDXVYcbtHyO4sry72wSxU.roa
File: r2TzzHmDXVYcbtHyO4sry72wSxU.roa (raw, json)
Hash identifier: FVi/9jdL64XW7+2KEXRpn9Ae9NCHwXh9lm101HDMyXI=
Subject key identifier: AF:64:F3:CC:79:83:5D:56:1C:6E:D1:F2:3B:8B:2B:CB:BD:B0:4B:15
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198E64826A7DFD50A406E88E7B041899018
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r2TzzHmDXVYcbtHyO4sry72wSxU.roa
Signing time: Tue 26 Aug 2025 12:09:04 +0000
ROA not before: Tue 26 Aug 2025 12:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 2a0a:2d07:fc3b::/48 maxlen: 48
2a0f:ea43:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:48:26:a7:df:d5:0a:40:6e:88:e7:b0:41:89:90:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 26 12:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af64f3cc79835d561c6ed1f23b8b2bcbbdb04b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:13:f6:47:c0:2a:93:8b:0e:c7:e4:d3:2f:
13:de:98:d9:db:3a:f5:b8:0f:3b:56:3c:ff:73:b5:
49:86:c7:63:d7:fa:be:e4:cb:b6:0c:03:5b:79:ef:
c8:dc:53:0d:2a:4f:0a:f4:69:95:6c:01:32:0f:b2:
5c:bd:3c:f3:1a:3c:b6:20:51:70:0e:7f:c5:f7:5d:
13:c0:7f:88:61:54:95:84:e1:d0:60:e0:39:bf:28:
d6:21:13:01:ea:ed:a7:ba:64:92:6b:09:5e:f4:45:
39:66:e6:64:ce:70:7f:89:04:e8:58:3a:4b:c3:ac:
ab:30:44:19:48:e2:cd:81:c1:79:11:4d:41:bb:44:
7e:61:06:33:17:0c:b7:2a:23:39:f4:50:6d:0f:5b:
26:60:ae:91:0b:6f:ff:ee:3a:5f:0c:9f:ae:3f:b3:
4f:7d:1b:82:0a:56:39:66:aa:45:b5:c1:ae:68:cc:
96:32:cf:b1:1e:ef:9a:9b:fe:fa:e9:17:b1:2e:3f:
34:37:16:8e:55:9b:ba:7b:2a:3d:75:7f:67:24:a2:
5c:05:d2:92:6a:d6:b2:cf:76:e8:1e:63:99:a7:07:
e1:08:ee:41:95:25:fe:7f:50:68:85:4c:54:aa:6c:
9b:d9:f5:b5:d1:db:03:b7:91:20:e8:d3:5a:83:37:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:F3:CC:79:83:5D:56:1C:6E:D1:F2:3B:8B:2B:CB:BD:B0:4B:15
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r2TzzHmDXVYcbtHyO4sry72wSxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d07:fc3b::/48
2a0f:ea43:100::/48
Signature Algorithm: sha256WithRSAEncryption
bc:77:da:82:90:2c:9d:20:ca:55:85:72:67:6c:9d:91:ad:b4:
6f:27:61:83:d7:41:89:d6:d4:f5:4d:39:55:a6:3b:04:03:d2:
8b:62:c5:98:31:29:6a:b0:4b:25:ba:40:ec:cd:36:76:02:92:
05:1a:87:4f:a3:79:f0:fa:53:63:e9:9e:be:06:1f:e4:69:36:
c7:73:da:2e:69:6d:e3:ab:02:27:9c:02:ef:16:78:3a:55:e5:
97:25:41:6c:95:d6:1c:9a:a3:11:ec:49:09:92:67:e9:29:37:
62:a9:9d:f3:d7:d3:7e:e3:7f:4e:ea:bc:12:25:2b:d4:92:0a:
ff:97:36:23:68:fc:73:63:d4:22:ba:31:c3:34:41:47:f8:df:
ec:a3:a9:f0:f2:1e:e5:f4:a4:3c:45:39:24:11:a7:f5:be:91:
90:00:22:db:06:ca:03:f5:22:4a:09:f9:92:f9:84:3d:92:20:
23:4c:e6:11:c8:4a:6c:2b:32:fe:91:aa:27:05:bf:be:2a:b3:
35:e0:1c:78:9e:d5:ab:5f:1b:d0:68:58:a1:95:b1:87:76:47:
65:e6:d6:d2:5a:8e:cf:ff:ad:42:d5:b7:b2:b9:0c:e9:64:85:
fb:35:08:46:08:eb:c1:c6:6b:50:ea:63:15:21:65:e4:18:67:
55:4a:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:47:51 2025 by rpki-client