Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yPgVMxphi3E67UOKTvuYMTCMHWk.roa
File: yPgVMxphi3E67UOKTvuYMTCMHWk.roa (raw, json)
Hash identifier: FdPoKEjsNondYekWRAa8zeAtYi1OwlWOHY276IhRhnw=
Subject key identifier: C8:F8:15:33:1A:61:8B:71:3A:ED:43:8A:4E:FB:98:31:30:8C:1D:69
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198E02D5885C5254CB3F8AC8BB781062C24
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yPgVMxphi3E67UOKTvuYMTCMHWk.roa
Signing time: Mon 25 Aug 2025 07:42:04 +0000
ROA not before: Mon 25 Aug 2025 07:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35758
IP address blocks: 2a0a:2d04:1::/48 maxlen: 48
2a0e:1a83:55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:2d:58:85:c5:25:4c:b3:f8:ac:8b:b7:81:06:2c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 25 07:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8f815331a618b713aed438a4efb9831308c1d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:55:a6:a8:cd:9c:80:8b:14:97:bf:52:f1:
d2:37:08:c1:36:14:c2:3e:97:37:67:88:b5:e7:35:
e7:d6:bd:84:52:bc:81:28:9c:7e:c3:09:1b:19:b2:
4e:77:a0:ef:09:6e:50:ea:41:13:73:04:29:da:c2:
08:2e:b3:f2:f7:81:19:99:f6:a7:d0:d8:46:86:7a:
5d:79:5a:4e:62:f2:c9:24:21:42:40:70:26:a8:3d:
37:7f:27:f5:ad:93:52:40:c0:04:23:ce:15:43:6a:
b1:48:32:b8:7a:3b:e6:3f:71:ec:b8:46:a1:3a:43:
09:30:44:4a:2c:2c:03:32:8b:3b:89:e7:48:37:cc:
ae:fd:cd:e8:1d:2f:f8:8f:89:f5:8e:c7:d9:80:d4:
7f:c9:3f:d1:10:93:59:ab:ed:31:b1:99:45:dc:e1:
a9:fe:f6:fd:2b:88:ae:f9:e1:6d:9e:d3:16:9f:a3:
fc:1f:d0:c3:d4:53:70:c9:1c:d8:03:f5:93:90:17:
78:20:f4:19:88:ca:22:a4:58:50:22:18:19:49:35:
6c:b3:74:8d:a0:75:36:76:27:ed:7c:93:36:5c:9f:
fa:59:77:be:7e:5f:22:76:c8:79:0c:48:be:0b:30:
e8:a6:02:47:d3:8d:bd:95:2f:7a:ff:86:9c:74:1c:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F8:15:33:1A:61:8B:71:3A:ED:43:8A:4E:FB:98:31:30:8C:1D:69
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yPgVMxphi3E67UOKTvuYMTCMHWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d04:1::/48
2a0e:1a83:55::/48
Signature Algorithm: sha256WithRSAEncryption
9b:2c:5b:6b:a7:51:b3:8a:b9:a3:e1:f3:cb:7f:b9:a9:ff:c8:
a8:7a:0f:6c:d2:4f:66:5d:9f:3e:30:9c:07:c8:af:b8:d7:38:
05:f3:6c:63:b5:a1:74:a5:06:1c:2d:f9:ab:9b:ed:07:40:70:
cd:27:c2:36:59:22:4a:41:dd:5a:09:01:8c:4e:18:46:52:07:
13:84:c4:75:3b:9a:6e:02:7e:82:c3:df:e9:95:0f:bc:e4:9c:
e5:44:27:9a:53:ff:2b:41:87:45:6e:49:a7:d6:cd:b2:81:89:
5b:4c:63:7d:ac:13:68:9c:4c:9d:4f:aa:85:8a:86:8f:53:c4:
68:49:35:75:87:91:b3:04:fb:64:3b:8f:d3:0c:f0:95:af:6f:
74:16:f1:ef:64:e7:95:4c:a1:7b:cc:f4:35:aa:25:bc:46:d2:
cc:3a:42:d9:b8:4a:a6:7d:96:37:ae:6c:9f:4a:4e:8a:2d:9f:
89:d4:45:c7:fd:85:f5:55:50:23:9c:21:31:07:bc:10:3e:01:
2e:b8:5e:17:01:77:2f:93:f3:fd:5d:c1:f8:e5:71:8a:54:d6:
40:5b:29:e1:b0:fe:7f:41:ae:5b:d6:cd:c7:a2:14:ae:1d:39:
46:b1:91:d8:b1:08:dd:1c:a6:9b:5c:b9:5e:7d:32:79:ff:d9:
76:64:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 00:15:41 2025 by rpki-client