Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/21-oogw0BXVVXSzvyNh6C886nd0.roa
File: 21-oogw0BXVVXSzvyNh6C886nd0.roa (raw, json)
Hash identifier: NJsjhdklCC7rXezA1zbFsMfcQqUn4/886NejN9iSYdI=
Subject key identifier: DB:5F:A8:A2:0C:34:05:75:55:5D:2C:EF:C8:D8:7A:0B:CF:3A:9D:DD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A11F98ACD6C75C94514A6261E6A38CB77D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/21-oogw0BXVVXSzvyNh6C886nd0.roa
Signing time: Fri 09 Oct 2026 07:37:41 +0000
ROA not before: Fri 09 Oct 2026 07:37:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402498
IP address blocks: 2a0a:2d02::/32 maxlen: 48
2a0f:3d82::/32 maxlen: 48
2a0f:3d85::/32 maxlen: 48
2a0f:7d04::/32 maxlen: 48
2a0f:7d07::/32 maxlen: 48
2a0f:bc01::/32 maxlen: 48
2a0f:bc02::/32 maxlen: 48
2a0f:bc06::/32 maxlen: 48
2a0f:bc07::/32 maxlen: 48
2a0f:df40::/32 maxlen: 48
2a0f:df42::/32 maxlen: 48
2a0f:df43::/32 maxlen: 48
2a0f:df44::/32 maxlen: 48
2a0f:e1c4::/32 maxlen: 48
2a0f:e1c5::/32 maxlen: 48
2a0f:e201::/32 maxlen: 48
2a0f:e205::/32 maxlen: 48
2a0f:e206::/32 maxlen: 48
2a0f:e6c1::/32 maxlen: 48
2a0f:e6c3::/32 maxlen: 48
2a0f:e6c4::/32 maxlen: 48
2a0f:e7c0::/32 maxlen: 48
2a0f:e7c3::/32 maxlen: 48
2a0f:e843::/32 maxlen: 48
2a0f:e845::/32 maxlen: 48
2a0f:ea41::/32 maxlen: 48
2a0f:ea42::/32 maxlen: 48
2a0f:ea45::/32 maxlen: 48
2a0f:ea46::/32 maxlen: 48
2a10:67c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:98:ac:d6:c7:5c:94:51:4a:62:61:e6:a3:8c:b7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 9 07:37:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db5fa8a20c340575555d2cefc8d87a0bcf3a9ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:6a:ad:6d:6f:23:c6:e6:44:e9:70:48:01:
80:f9:2b:0e:4f:f2:6b:71:8e:15:ac:69:e2:da:1b:
f9:20:c9:80:6b:8e:de:7c:89:52:34:a4:46:68:03:
cf:13:94:f5:34:94:d0:93:95:6c:19:d8:79:a2:e1:
d7:0a:39:14:90:67:7f:7c:ea:13:62:dd:30:1a:59:
2b:58:06:a0:8c:66:67:cb:73:e3:7c:99:33:96:71:
9b:89:d3:af:ad:a1:71:97:e2:e5:ca:b3:3a:d8:aa:
a8:57:5e:b8:8f:f2:82:e1:59:34:5a:fa:3e:17:68:
c6:dc:16:f4:26:13:ec:78:9e:4e:57:be:52:5d:15:
e1:28:28:b4:8e:f7:93:f9:e1:45:15:06:be:31:98:
ce:7b:4f:d8:d8:d8:ae:1b:ca:aa:29:0b:93:d5:f1:
8a:fb:6e:39:34:08:49:21:29:9a:55:24:7d:20:a7:
0c:41:ed:f8:3f:dd:f5:3b:f3:9a:7e:bd:19:eb:e9:
23:ee:64:34:a2:71:03:89:ff:23:4c:32:dc:b8:98:
01:79:34:db:ea:ec:5f:7d:53:97:68:22:30:e3:d1:
17:05:b8:3f:65:f1:b4:83:6f:95:eb:23:47:3c:14:
54:bc:86:18:7f:cc:ff:8d:12:72:88:6e:a1:2e:56:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5F:A8:A2:0C:34:05:75:55:5D:2C:EF:C8:D8:7A:0B:CF:3A:9D:DD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/21-oogw0BXVVXSzvyNh6C886nd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
2a0f:3d82::/32
2a0f:3d85::/32
2a0f:7d04::/32
2a0f:7d07::/32
2a0f:bc01::-2a0f:bc02:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:bc06::/31
2a0f:df40::/32
2a0f:df42::-2a0f:df44:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e1c4::/31
2a0f:e201::/32
2a0f:e205::-2a0f:e206:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e6c1::/32
2a0f:e6c3::-2a0f:e6c4:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e7c0::/32
2a0f:e7c3::/32
2a0f:e843::/32
2a0f:e845::/32
2a0f:ea41::-2a0f:ea42:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:ea45::-2a0f:ea46:ffff:ffff:ffff:ffff:ffff:ffff
2a10:67c0::/32
Signature Algorithm: sha256WithRSAEncryption
85:a5:cf:70:41:34:e7:8c:18:b4:33:ed:8e:08:a4:75:29:6c:
db:a7:66:3c:f2:99:e0:b0:71:e0:94:3c:71:62:3e:61:b7:79:
99:66:eb:48:db:94:a3:8f:ef:66:a7:f5:4b:22:75:fc:d1:7b:
0a:13:79:9e:5a:7e:b3:2c:f9:82:26:d7:f9:e9:48:62:53:06:
ac:b8:52:e5:ad:b4:aa:f1:69:d7:78:db:86:f3:7f:1c:c2:f6:
7d:af:1f:13:fa:e2:56:6a:23:6d:6a:1c:5c:b5:00:ba:7d:71:
8e:ca:90:bf:8c:04:8c:28:2c:c0:f3:c3:22:a9:50:a2:c1:c4:
25:a8:ad:f3:63:13:0e:c2:55:9f:38:87:74:cd:ba:b9:de:bd:
b0:41:8e:e6:86:c1:58:69:9c:f2:3c:f9:a6:3b:f3:44:29:19:
af:e3:76:b3:35:b7:32:59:b5:fa:f0:8c:f1:8a:12:b8:15:0e:
76:99:13:55:64:64:80:52:58:fb:a1:8e:07:79:fc:01:44:1a:
10:f1:8f:52:c9:c4:65:48:1d:67:ae:46:23:43:04:20:35:a4:
b1:57:89:61:7a:69:87:0a:92:d5:ef:0a:58:57:84:19:d6:20:
71:c6:5a:9b:12:55:59:c2:50:ad:66:6c:21:02:fc:ee:15:7e:
9d:2e:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:30 2026 by rpki-client