Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0S_QJrGcMsU2daOF2vrbY7f4WvA.roa
File: 0S_QJrGcMsU2daOF2vrbY7f4WvA.roa (raw, json)
Hash identifier: 3rumrmNdB7W6zO+KOP46s2Sk3WQle2e7Vjm/ecNmHJ0=
Subject key identifier: D1:2F:D0:26:B1:9C:32:C5:36:75:A3:85:DA:FA:DB:63:B7:F8:5A:F0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0F1EC516081A0BC626658B14E3EB2F589
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0S_QJrGcMsU2daOF2vrbY7f4WvA.roa
Signing time: Wed 30 Sep 2026 10:46:31 +0000
ROA not before: Wed 30 Sep 2026 10:46:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154049
IP address blocks: 2a10:67c1::/32 maxlen: 48
2a10:67c3::/32 maxlen: 48
2a10:67c4::/32 maxlen: 48
2a10:68c1::/32 maxlen: 48
2a10:68c2::/32 maxlen: 48
2a10:68c3::/32 maxlen: 48
2a10:68c4::/32 maxlen: 48
2a12:ac42::/32 maxlen: 48
2a12:ac45::/32 maxlen: 48
2a12:ecc1::/32 maxlen: 48
2a12:ecc2::/32 maxlen: 48
2a12:ecc7::/32 maxlen: 48
2a13:d41::/32 maxlen: 48
2a13:d42::/32 maxlen: 48
2a13:d43::/32 maxlen: 48
2a13:18c1::/32 maxlen: 48
2a13:18c3::/32 maxlen: 48
2a13:18c4::/32 maxlen: 48
2a13:18c7::/32 maxlen: 48
2a13:8c81::/32 maxlen: 48
2a13:8c83::/32 maxlen: 48
2a13:8c84::/32 maxlen: 48
2a13:9283::/32 maxlen: 48
2a13:9284::/32 maxlen: 48
2a13:9286::/32 maxlen: 48
2a13:c901::/32 maxlen: 48
2a13:c903::/32 maxlen: 48
2a13:c904::/32 maxlen: 48
2a13:e105::/32 maxlen: 48
2a13:e106::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:ec:51:60:81:a0:bc:62:66:58:b1:4e:3e:b2:f5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 30 10:46:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d12fd026b19c32c53675a385dafadb63b7f85af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:09:45:54:af:ce:e2:78:c3:3b:69:e3:cb:
d6:a5:4d:37:ae:17:14:a3:5b:40:21:82:9d:f3:93:
8f:35:8b:06:e6:06:2a:54:0a:91:ae:0a:77:63:de:
f2:eb:48:07:3d:ed:3d:c8:aa:02:b1:04:5d:a0:a8:
f7:eb:e5:80:60:47:c2:5d:77:87:98:ef:4f:07:b8:
e0:25:e8:d3:45:08:f5:53:d8:21:99:66:a7:c4:3c:
f4:88:1b:10:5f:48:79:6b:47:32:02:4f:f9:b6:e9:
2d:46:47:54:d8:6e:7e:e0:8f:d8:fc:6c:ff:9e:dd:
fd:2d:9d:29:0c:ce:58:f6:79:73:80:28:b9:01:34:
b2:f0:8c:df:04:11:89:ae:c4:f8:02:ea:65:a8:f5:
3a:60:d2:4a:f2:11:c6:e3:e0:6c:67:5b:a5:12:36:
50:2a:46:f9:87:6d:27:48:be:63:d3:45:65:39:d3:
c1:10:06:17:d4:55:ef:a2:99:6a:89:92:4c:27:eb:
7c:71:3a:e9:db:78:c5:bd:7a:97:a7:d7:d5:4a:f6:
ec:fc:9d:91:68:79:75:5a:ff:09:f8:c6:10:d1:3d:
9e:08:51:d2:48:5f:30:92:ff:09:4d:a1:62:7b:85:
aa:87:c6:e4:af:b9:e4:d9:3d:19:38:19:cf:b2:bd:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:D0:26:B1:9C:32:C5:36:75:A3:85:DA:FA:DB:63:B7:F8:5A:F0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0S_QJrGcMsU2daOF2vrbY7f4WvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:67c1::/32
2a10:67c3::-2a10:67c4:ffff:ffff:ffff:ffff:ffff:ffff
2a10:68c1::-2a10:68c4:ffff:ffff:ffff:ffff:ffff:ffff
2a12:ac42::/32
2a12:ac45::/32
2a12:ecc1::-2a12:ecc2:ffff:ffff:ffff:ffff:ffff:ffff
2a12:ecc7::/32
2a13:d41::-2a13:d43:ffff:ffff:ffff:ffff:ffff:ffff
2a13:18c1::/32
2a13:18c3::-2a13:18c4:ffff:ffff:ffff:ffff:ffff:ffff
2a13:18c7::/32
2a13:8c81::/32
2a13:8c83::-2a13:8c84:ffff:ffff:ffff:ffff:ffff:ffff
2a13:9283::-2a13:9284:ffff:ffff:ffff:ffff:ffff:ffff
2a13:9286::/32
2a13:c901::/32
2a13:c903::-2a13:c904:ffff:ffff:ffff:ffff:ffff:ffff
2a13:e105::-2a13:e106:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
19:05:60:10:b8:07:92:57:59:6a:10:91:a6:6f:0b:00:16:9c:
46:e8:03:05:c6:0b:22:f1:fa:58:ab:85:53:a9:5c:02:76:39:
6a:f1:3d:9a:60:6c:2a:f5:59:ad:bc:71:00:ca:2f:0e:30:e7:
bf:fc:9d:f0:3a:cc:9f:12:bb:b8:2a:a7:23:40:c2:77:5e:ef:
cf:07:a4:5f:67:de:c2:c5:bd:0d:c2:db:cf:d7:4b:7f:47:5d:
09:00:eb:92:ed:0c:80:42:9c:3e:e2:70:53:90:c6:3a:5d:cd:
d4:e4:a9:f2:0e:46:e7:fa:24:f7:6c:5e:b4:7e:ce:cd:1e:7e:
f0:7c:57:cf:72:1a:30:42:77:70:b8:b4:8f:2e:a0:57:3a:b3:
32:f1:b8:fb:15:8a:87:10:c5:ef:4e:d8:b6:a0:4f:51:54:8d:
39:f3:3d:82:00:bf:b0:b3:54:2d:4d:93:60:0f:80:ea:d3:35:
32:03:f3:6e:e1:51:eb:dd:cb:94:2a:1e:12:e5:f5:d7:bb:2d:
20:ed:bf:49:8e:81:fc:fd:ea:55:e5:f2:f3:e1:9f:0b:cc:dc:
75:67:bf:47:da:ef:cb:bc:7f:a1:04:5f:f3:83:88:f6:2a:5f:
b5:45:c0:ed:ce:70:2c:9b:77:92:96:55:f9:84:22:d4:d9:ad:
7d:62:b5:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:09:24 2026 by rpki-client