Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8aosAt_d0hxOk9OHe4UrwCQH820.roa
File: 8aosAt_d0hxOk9OHe4UrwCQH820.roa (raw, json)
Hash identifier: tuq2RLoM3zpDzeLJyfr4JK4xJWhFLK619WnpZZHpFwE=
Subject key identifier: F1:AA:2C:02:DF:DD:D2:1C:4E:93:D3:87:7B:85:2B:C0:24:07:F3:6D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0F1EC51F36906F2F0388458CB16EF9F6D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8aosAt_d0hxOk9OHe4UrwCQH820.roa
Signing time: Wed 30 Sep 2026 10:46:31 +0000
ROA not before: Wed 30 Sep 2026 10:46:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199353
IP address blocks: 2a05:35c1::/32 maxlen: 48
2a05:35c2::/32 maxlen: 48
2a05:35c3::/32 maxlen: 48
2a06:1182::/32 maxlen: 48
2a06:1183::/32 maxlen: 48
2a06:1186::/32 maxlen: 48
2a06:1187::/32 maxlen: 48
2a06:35c5::/32 maxlen: 48
2a06:35c6::/32 maxlen: 48
2a06:35c7::/32 maxlen: 48
2a09:17c4::/32 maxlen: 48
2a09:17c5::/32 maxlen: 48
2a09:17c6::/32 maxlen: 48
2a0a:2d03::/32 maxlen: 48
2a0c:7880::/32 maxlen: 48
2a0c:7884::/32 maxlen: 48
2a0e:15c1::/32 maxlen: 48
2a0e:15c2::/32 maxlen: 48
2a0e:15c3::/32 maxlen: 48
2a0e:1a81::/32 maxlen: 48
2a0e:1a82::/32 maxlen: 48
2a0e:1a85::/32 maxlen: 48
2a0e:1a87::/32 maxlen: 48
2a0e:c780::/32 maxlen: 48
2a0e:c781::/32 maxlen: 48
2a0e:c782::/32 maxlen: 48
2a0e:c783::/32 maxlen: 48
2a0e:f202::/32 maxlen: 48
2a0e:f203::/32 maxlen: 48
2a0e:f204::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:ec:51:f3:69:06:f2:f0:38:84:58:cb:16:ef:9f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 30 10:46:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1aa2c02dfddd21c4e93d3877b852bc02407f36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:d9:4c:2e:3f:a1:a2:99:12:27:77:9a:50:
04:37:08:77:ca:b4:c6:57:20:09:5c:14:2b:99:f1:
5f:c4:9b:87:72:51:0a:ef:a9:ad:cf:c2:fc:0d:8c:
8a:1e:0c:39:fd:32:26:9d:78:09:e5:a6:ba:43:ce:
71:24:46:8c:f6:99:63:0f:6f:a6:0c:06:9a:1e:44:
a5:b5:a5:eb:29:c5:d0:e4:14:f7:b6:07:92:28:f9:
00:61:e3:0a:91:ce:1d:72:f2:85:64:ab:72:6a:6a:
6b:d9:e2:88:d6:b4:20:26:04:5e:fd:83:11:92:79:
3b:56:40:aa:1d:21:3a:99:e1:1e:f6:67:90:bb:53:
23:fd:b5:6d:db:03:74:37:ec:e7:b8:fe:d6:14:84:
9b:c3:a0:a5:cb:86:0a:a3:4c:53:dd:0c:d9:d1:b9:
6f:2e:1d:0a:dd:04:a0:12:b9:17:cb:d9:8e:cb:03:
36:41:9e:97:ee:14:6c:50:a1:60:fc:c3:2f:45:6f:
fc:4d:ba:d9:2c:f2:25:af:43:86:5e:a6:50:ad:f0:
f2:ce:60:f4:37:91:30:c8:26:6a:16:22:98:0f:f4:
ee:1e:60:75:e1:35:1c:b6:e6:28:f4:c7:c9:0b:5c:
ec:06:58:d5:45:38:a5:c3:06:d6:9e:bb:12:b0:ed:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:2C:02:DF:DD:D2:1C:4E:93:D3:87:7B:85:2B:C0:24:07:F3:6D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8aosAt_d0hxOk9OHe4UrwCQH820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:35c1::-2a05:35c3:ffff:ffff:ffff:ffff:ffff:ffff
2a06:1182::/31
2a06:1186::/31
2a06:35c5::-2a06:35c7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:17c4::-2a09:17c6:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:2d03::/32
2a0c:7880::/32
2a0c:7884::/32
2a0e:15c1::-2a0e:15c3:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:1a81::-2a0e:1a82:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:1a85::/32
2a0e:1a87::/32
2a0e:c780::/30
2a0e:f202::-2a0e:f204:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8c:c8:83:df:47:b1:4e:a9:96:c7:e7:b2:2b:46:97:3a:ed:4d:
1f:e3:11:ff:11:3f:52:02:a2:f1:8b:32:b9:b3:b5:a8:47:14:
b7:89:49:d4:f7:ca:71:04:da:6c:8c:0a:d5:99:1e:f3:bd:5b:
97:c1:5c:c8:5e:55:dc:4e:c6:2b:bf:75:56:3e:18:46:10:fd:
d8:34:39:15:19:61:12:6d:95:65:ed:9b:80:4e:aa:82:e1:23:
75:f5:69:e2:57:a7:63:df:ae:fd:aa:7c:a0:b0:61:b4:01:de:
02:f8:62:cc:b4:91:ca:31:21:13:7b:a5:bb:a2:ad:47:e2:ae:
a0:64:29:17:60:14:3e:19:5a:74:29:b2:29:b9:04:54:f9:d7:
4c:43:13:71:a8:ba:8b:64:0e:b2:68:6d:55:5f:2d:9f:5b:84:
39:c6:0b:ec:fd:d2:93:65:cc:13:76:01:c4:db:e3:d6:b0:7f:
fb:0e:90:68:18:28:f1:04:42:dd:c3:34:84:f8:2c:ac:e2:31:
31:ae:78:c5:97:3f:26:ce:df:c4:5a:d9:20:06:30:da:9d:3a:
60:bd:4c:f2:9a:13:41:2d:9a:07:e6:cd:cb:14:84:cd:4c:c9:
e9:83:54:3f:74:e9:a4:cc:0c:44:41:64:4b:c0:16:80:2f:1b:
21:07:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:24 2026 by rpki-client