Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3IqHyoi4AI0Q7r4r_iQ8wnDI6Ys.roa
File: 3IqHyoi4AI0Q7r4r_iQ8wnDI6Ys.roa (raw, json)
Hash identifier: GNf85Wv60IQvY1HFLtNySkunfDNYLsxpeLnTeDFLY5E=
Subject key identifier: DC:8A:87:CA:88:B8:00:8D:10:EE:BE:2B:FE:24:3C:C2:70:C8:E9:8B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A139A7B14CF734F289EBB5E230BAF37FA5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3IqHyoi4AI0Q7r4r_iQ8wnDI6Ys.roa
Signing time: Wed 14 Oct 2026 09:04:13 +0000
ROA not before: Wed 14 Oct 2026 09:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 2a06:a600::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a09:17c3::/32 maxlen: 32
2a0c:d380::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0e:f207::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d86:11::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a0f:e7c1::/32 maxlen: 32
2a0f:ee00::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a7:b1:4c:f7:34:f2:89:eb:b5:e2:30:ba:f3:7f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 14 09:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc8a87ca88b8008d10eebe2bfe243cc270c8e98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:98:4c:a6:2d:bb:38:25:81:e0:b0:08:bc:
72:33:0c:c2:13:fb:c0:72:db:cd:c9:b9:fe:f3:7e:
05:34:3c:be:11:c0:a4:c7:1a:ae:35:01:af:a3:87:
72:69:e5:9b:b5:a1:f2:c2:bb:75:83:d5:30:9b:0c:
38:e1:3f:dd:96:02:0c:64:84:fc:be:a0:2a:84:84:
35:cf:9f:2f:11:e7:aa:48:30:a4:a5:04:06:b4:d2:
c7:12:0c:40:9b:ad:ef:63:88:ab:89:c3:b5:3a:66:
d3:7c:53:0c:25:15:29:f2:b7:5f:aa:3c:29:31:7a:
d9:be:2a:51:6b:c8:00:3e:5e:5e:91:15:17:e7:23:
ea:d3:06:31:9b:48:32:c8:61:28:67:af:e5:c0:78:
d7:c2:49:da:d1:19:e5:cc:f3:7a:57:f1:78:8f:f5:
be:10:48:f4:1b:c3:e3:af:92:c3:19:1a:f5:28:f1:
dd:6b:9c:a5:ba:9b:4e:70:d3:66:0f:bd:a1:e6:1b:
5f:80:fc:95:94:1d:0c:f8:99:3f:1c:2c:2f:a4:a9:
aa:da:e1:02:f5:53:59:89:69:35:cc:4f:07:c5:05:
97:ea:de:1b:a7:e7:12:52:3b:54:f5:40:a1:00:99:
41:1a:d9:fd:44:4f:0b:03:9a:22:7f:32:64:ef:c3:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8A:87:CA:88:B8:00:8D:10:EE:BE:2B:FE:24:3C:C2:70:C8:E9:8B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3IqHyoi4AI0Q7r4r_iQ8wnDI6Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a600::/29
2a06:bf40::/29
2a07:95c0::/29
2a09:17c3::/32
2a0c:d380::/29
2a0d:8f80::/29
2a0e:2440::/29
2a0e:f207::/32
2a0f:3d83::/32
2a0f:3d86:11::/48
2a0f:7d01::/32
2a0f:e7c1::/32
2a0f:ee00::/29
2a10:3140::/29
2a11:4e80::/29
2a12:d100::/29
2a13:2bc0::/29
2a13:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
39:24:18:69:1a:66:f7:3e:31:56:4f:9c:5c:40:e1:63:05:81:
ed:8c:3d:f0:1c:ec:12:0b:9f:15:f6:fc:e1:24:03:0b:ef:46:
d2:86:9c:23:91:01:a0:5b:4c:87:80:4b:0d:68:6f:77:61:cf:
55:8f:af:52:94:13:e6:1b:e8:f8:ec:5b:ea:6a:f0:51:82:5d:
5f:27:ff:da:8a:c0:0f:c1:f3:09:2b:f8:23:89:1c:40:d8:39:
ca:80:a0:2f:dd:ba:21:44:6c:9b:68:af:4a:63:27:fd:eb:b4:
fd:73:d8:d4:a8:09:7d:fa:3c:0b:54:7a:82:c0:42:44:dd:9d:
ba:2a:14:fd:6a:9c:d7:f4:03:19:23:65:24:21:2e:e6:a1:b5:
83:8d:8d:f8:75:9e:96:67:9f:53:ba:e5:8a:be:b8:7b:73:49:
5e:78:6c:55:87:b8:44:b1:9f:83:ad:ca:af:9b:83:d9:5b:28:
95:f7:aa:a2:2b:3c:f9:07:f2:a3:21:23:f3:56:79:f6:28:14:
1c:1b:43:ac:1a:0e:3f:73:13:39:2f:8c:41:32:3e:4d:8e:ee:
e2:35:76:d8:a1:d7:f3:a6:4f:8d:c2:c1:f4:e3:d7:0e:32:54:
7b:83:6d:10:e6:53:4d:3c:a0:ec:d2:9b:d3:35:2a:6b:d7:6e:
84:03:32:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:15 2026 by rpki-client