Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/25UrpIQa-C0zOmWS_HEDCqR6nLE.roa
File: 25UrpIQa-C0zOmWS_HEDCqR6nLE.roa (raw, json)
Hash identifier: UvL4FpEPKdZVyAH2PMBaw5L2T0aSclZQ7lXf0f6XbLg=
Subject key identifier: DB:95:2B:A4:84:1A:F8:2D:33:3A:65:92:FC:71:03:0A:A4:7A:9C:B1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F5C4096992F713837C216520D7FA17358
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/25UrpIQa-C0zOmWS_HEDCqR6nLE.roa
Signing time: Mon 13 Jul 2026 16:12:44 +0000
ROA not before: Mon 13 Jul 2026 16:12:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400328
IP address blocks: 2a0a:2d02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:40:96:99:2f:71:38:37:c2:16:52:0d:7f:a1:73:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 13 16:12:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db952ba4841af82d333a6592fc71030aa47a9cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:bf:2f:26:88:fe:2d:57:d6:97:86:34:99:
28:20:bb:37:e8:fd:dd:cc:41:84:06:40:e5:67:ee:
54:39:0e:c6:0e:da:9b:a7:8b:b1:5d:55:90:91:2c:
eb:78:ae:c5:dc:c8:90:21:af:1d:89:8a:6a:30:25:
3a:b4:97:a2:14:8c:d2:bb:11:28:63:d1:4f:0b:95:
ae:b9:65:6b:c6:87:78:44:fa:13:c4:fe:b4:d8:af:
e1:ad:80:e5:3d:e4:bd:aa:24:87:c3:9b:1d:b2:36:
bd:69:f2:f1:6e:fe:56:3e:34:22:b7:4a:59:b0:79:
16:31:e4:f6:5c:9e:67:b9:80:ac:e4:0e:9d:d4:19:
29:ba:aa:96:6f:b9:30:34:5f:5d:b0:6e:48:14:1e:
06:8d:a1:46:82:8c:00:fd:8e:a8:99:d0:89:ad:7d:
be:b8:07:b0:b4:ee:ee:3f:4f:7c:25:39:98:ef:8f:
aa:d5:1f:38:93:75:cf:ed:b5:49:1e:fb:b1:d7:87:
53:d9:ab:68:dc:22:d2:b9:a6:a1:8c:7d:a6:f3:8b:
d6:ca:ef:92:4c:bd:6b:0d:22:6f:7b:bf:91:8e:bc:
20:e4:05:1e:ef:c2:a2:fd:77:89:63:ad:e6:54:70:
9a:ae:7e:4c:98:31:1f:53:86:27:b4:62:8b:92:04:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:95:2B:A4:84:1A:F8:2D:33:3A:65:92:FC:71:03:0A:A4:7A:9C:B1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/25UrpIQa-C0zOmWS_HEDCqR6nLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
Signature Algorithm: sha256WithRSAEncryption
21:a4:79:f6:fb:10:d5:60:90:82:b3:3a:d7:f8:be:b9:25:81:
37:c9:7b:34:0c:7a:cf:77:d9:ec:e3:02:23:f0:1f:d1:a8:9f:
63:b1:26:ef:a3:4f:a8:40:76:29:cd:5e:d3:06:13:3b:83:80:
d5:9d:31:e5:93:fc:e0:6a:ef:d0:46:5a:5b:59:82:75:18:4b:
7e:49:38:bf:05:7a:0a:2a:4d:4a:43:bd:45:d9:ab:04:c1:4f:
a2:e8:e3:26:ea:17:ab:3b:24:50:c0:cd:68:51:48:e1:de:d8:
51:b2:51:79:0c:0e:f4:93:77:c6:a9:d1:17:7b:b2:08:4c:9a:
67:38:64:a8:bb:5c:0a:4c:5b:b6:49:f4:08:05:00:27:f3:ea:
d5:2a:64:c1:d9:9b:05:80:6c:ac:67:82:43:f8:c9:1d:a5:c1:
e4:6c:c4:60:a4:e3:4d:fa:36:6d:8e:a7:c7:75:8e:27:ea:43:
f4:5b:a3:3b:d5:b0:3a:be:e6:a6:82:ea:a3:a8:be:4a:a9:b7:
6d:ea:f5:bc:3f:5d:21:86:99:96:d4:9e:ee:d9:bf:b2:5b:69:
41:8c:9e:6f:aa:18:2f:6e:e8:fa:d2:95:00:ff:cb:3a:0c:01:
4d:bd:52:6c:6a:1e:3e:b5:0d:d7:b3:cc:b7:ce:a4:c0:83:a8:
ca:17:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:21 2026 by rpki-client