Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v6CcQI7RKAZ6IMp8nTm929p-yH8.roa
File: v6CcQI7RKAZ6IMp8nTm929p-yH8.roa (raw, json)
Hash identifier: Qe1elwHxAsZvd10wH8KgVGHFN+eOKB/tp7sW4NCaRp0=
Subject key identifier: BF:A0:9C:40:8E:D1:28:06:7A:20:CA:7C:9D:39:BD:DB:DA:7E:C8:7F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A076644DDFD4FB7721DE058F1501D75A8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v6CcQI7RKAZ6IMp8nTm929p-yH8.roa
Signing time: Tue 21 Oct 2025 15:32:14 +0000
ROA not before: Tue 21 Oct 2025 15:32:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206560
IP address blocks: 2a13:3040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:66:44:dd:fd:4f:b7:72:1d:e0:58:f1:50:1d:75:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 21 15:32:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfa09c408ed128067a20ca7c9d39bddbda7ec87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:a9:a6:54:02:c1:e1:76:48:9b:46:f6:ce:
bc:ad:f8:58:32:f9:df:ef:ca:08:ab:cb:84:7a:c1:
90:81:51:b3:cc:af:91:a1:81:c4:81:a2:d8:ef:4e:
27:e7:fa:6a:64:db:94:a7:0d:3c:ba:6e:57:9d:2b:
ee:47:ef:4c:cb:89:b7:83:00:65:2c:0b:61:75:4f:
d9:da:f7:a1:d9:a1:3b:54:35:7e:57:05:2f:b8:54:
73:c8:86:a5:0b:f5:de:89:16:c7:38:84:d9:2f:de:
61:df:9b:7c:0e:18:05:43:ec:45:40:c3:f1:46:e3:
fe:1a:23:07:a2:81:a3:ea:69:04:36:90:0b:c6:74:
1d:a1:bf:d1:80:3a:51:4e:ee:72:af:1d:9e:e4:8b:
56:69:92:a6:1b:d9:1d:9a:b3:50:44:24:67:fd:cd:
81:b3:27:b9:64:4a:84:a3:c6:f4:e2:b5:3d:82:20:
c3:5e:81:97:3f:98:08:53:9f:62:87:d0:0b:b1:0b:
a0:c3:cc:96:a2:bd:8e:a3:f6:a3:59:a7:fd:1e:66:
a4:48:22:f3:b1:98:e7:de:5d:70:ac:53:83:e5:23:
7a:c8:d9:fc:ce:48:2e:93:97:c8:2f:b9:85:29:c2:
d6:3b:17:ab:98:b1:92:7c:8e:2b:17:d9:63:fb:ff:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A0:9C:40:8E:D1:28:06:7A:20:CA:7C:9D:39:BD:DB:DA:7E:C8:7F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v6CcQI7RKAZ6IMp8nTm929p-yH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3040::/29
Signature Algorithm: sha256WithRSAEncryption
9e:6b:01:ab:1d:13:fb:45:de:27:c9:72:9d:95:ef:cb:62:11:
0b:79:d8:bc:dc:9d:57:67:3f:7e:b6:14:4e:fe:a5:1b:87:9c:
53:9d:68:57:60:8e:f1:49:28:e0:12:78:e3:67:93:27:29:4c:
98:92:a2:93:60:9a:69:e1:2a:02:f7:b7:12:d9:ae:1f:1e:10:
be:6c:59:a0:47:68:72:e5:0c:82:3e:75:ee:30:fd:4e:7c:6f:
d5:62:0c:dd:60:96:2a:6b:ca:6e:f4:2c:fe:60:c7:20:25:9e:
b7:83:ea:00:8b:3f:5f:72:ef:58:d6:9f:d4:98:45:52:e9:fc:
05:87:2a:81:e4:45:90:34:5c:9a:ed:be:aa:31:ad:dc:c3:2b:
57:15:9d:74:5a:a7:aa:ca:9e:93:42:6d:83:15:6d:d3:0d:7e:
60:9e:26:1b:fc:c9:fc:00:d5:2d:07:a9:53:31:24:1e:82:3c:
b8:5a:1d:e3:32:ec:0e:77:88:31:f4:5f:b0:0a:a6:90:4f:5c:
54:39:2a:d5:30:66:d4:8c:4e:ea:bf:b7:dd:6b:a5:df:76:ad:
0d:3a:1a:fa:61:35:5f:14:d3:32:14:e6:58:89:98:a8:6b:e2:
2a:21:14:41:06:1d:e1:2a:c2:e8:3c:8d:76:84:6b:03:ab:06:
f6:a2:f9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:21:46 2025 by rpki-client