Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i6xxl_4_Op4A7InhvoTwChzYNlo.roa
File: i6xxl_4_Op4A7InhvoTwChzYNlo.roa (raw, json)
Hash identifier: vo4/l/8e7yh/4M/8hxlxpAKiWq3h9l0si952q01DS2E=
Subject key identifier: 8B:AC:71:97:FE:3F:3A:9E:00:EC:89:E1:BE:84:F0:0A:1C:D8:36:5A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0F1EC50ADF732F8EBDA769673F1E3C756
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i6xxl_4_Op4A7InhvoTwChzYNlo.roa
Signing time: Wed 30 Sep 2026 10:46:31 +0000
ROA not before: Wed 30 Sep 2026 10:46:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138997
IP address blocks: 2a10:67c1::/32 maxlen: 48
2a10:67c3::/32 maxlen: 48
2a10:67c4::/32 maxlen: 48
2a10:68c1::/32 maxlen: 48
2a10:68c2::/32 maxlen: 48
2a10:68c3::/32 maxlen: 48
2a10:68c4::/32 maxlen: 48
2a12:ac42::/32 maxlen: 48
2a12:ac45::/32 maxlen: 48
2a12:ecc1::/32 maxlen: 48
2a12:ecc2::/32 maxlen: 48
2a12:ecc7::/32 maxlen: 48
2a13:d41::/32 maxlen: 48
2a13:d42::/32 maxlen: 48
2a13:d43::/32 maxlen: 48
2a13:18c1::/32 maxlen: 48
2a13:18c3::/32 maxlen: 48
2a13:18c4::/32 maxlen: 48
2a13:18c7::/32 maxlen: 48
2a13:8c81::/32 maxlen: 48
2a13:8c83::/32 maxlen: 48
2a13:8c84::/32 maxlen: 48
2a13:9283::/32 maxlen: 48
2a13:9284::/32 maxlen: 48
2a13:9286::/32 maxlen: 48
2a13:c901::/32 maxlen: 48
2a13:c903::/32 maxlen: 48
2a13:c904::/32 maxlen: 48
2a13:e105::/32 maxlen: 48
2a13:e106::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:ec:50:ad:f7:32:f8:eb:da:76:96:73:f1:e3:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 30 10:46:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bac7197fe3f3a9e00ec89e1be84f00a1cd8365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:f9:03:4a:11:79:f2:a7:33:a8:00:12:1a:
c7:0a:c3:50:a4:f1:2a:51:ab:92:21:09:61:c7:c4:
ce:ff:db:c1:e1:cd:e8:15:ad:ac:60:78:c4:99:72:
0b:6a:53:80:4c:b6:c8:75:4c:6a:9e:9b:43:c0:42:
58:2f:5c:a6:22:88:94:2e:6d:c4:b8:49:de:61:69:
51:5e:3c:56:42:80:06:ac:bb:e1:06:a8:8c:bb:5f:
00:20:1c:ff:e9:3d:34:ac:36:cb:53:2f:06:30:74:
3f:3f:37:1f:17:1a:90:b2:12:8e:5f:d1:b9:bd:5a:
aa:33:cd:d8:c1:5e:ae:28:24:68:fc:95:2c:e2:10:
e9:10:10:f6:13:85:59:a5:c1:b8:19:31:a0:db:b3:
eb:0b:6e:0d:d8:8d:46:16:c0:89:2c:5e:72:a5:a2:
91:c6:95:e7:fc:92:96:bc:83:95:e5:c9:39:2c:9d:
fb:aa:3c:8f:08:15:15:cb:ef:db:3e:da:81:db:e1:
7a:f6:e2:b5:bc:17:4a:83:d7:3f:04:47:b5:9c:7c:
5d:2e:a9:46:50:21:8a:84:60:60:65:35:dc:4f:a0:
f3:e7:31:24:5c:17:e6:16:c9:91:96:16:fe:e7:48:
f2:b7:eb:d2:f5:52:1e:89:f3:aa:6e:db:f6:f9:86:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:71:97:FE:3F:3A:9E:00:EC:89:E1:BE:84:F0:0A:1C:D8:36:5A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i6xxl_4_Op4A7InhvoTwChzYNlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:67c1::/32
2a10:67c3::-2a10:67c4:ffff:ffff:ffff:ffff:ffff:ffff
2a10:68c1::-2a10:68c4:ffff:ffff:ffff:ffff:ffff:ffff
2a12:ac42::/32
2a12:ac45::/32
2a12:ecc1::-2a12:ecc2:ffff:ffff:ffff:ffff:ffff:ffff
2a12:ecc7::/32
2a13:d41::-2a13:d43:ffff:ffff:ffff:ffff:ffff:ffff
2a13:18c1::/32
2a13:18c3::-2a13:18c4:ffff:ffff:ffff:ffff:ffff:ffff
2a13:18c7::/32
2a13:8c81::/32
2a13:8c83::-2a13:8c84:ffff:ffff:ffff:ffff:ffff:ffff
2a13:9283::-2a13:9284:ffff:ffff:ffff:ffff:ffff:ffff
2a13:9286::/32
2a13:c901::/32
2a13:c903::-2a13:c904:ffff:ffff:ffff:ffff:ffff:ffff
2a13:e105::-2a13:e106:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:0c:1e:cc:86:25:ca:4f:be:55:55:5d:0b:21:9f:73:96:1b:
32:a5:7d:d4:8c:33:5d:ab:57:88:e0:db:24:f8:35:0c:cc:66:
3d:7d:e3:a6:a7:52:4f:bc:6e:6f:35:37:69:40:e2:52:42:b0:
0a:00:88:26:5f:35:57:e3:44:92:eb:df:8b:cb:fb:f1:56:e6:
8b:4b:c1:81:fb:4a:a5:3c:61:1d:de:3b:00:ce:d5:0a:7a:7f:
ae:05:ba:6b:ca:55:82:f8:7a:58:5c:b0:bc:43:e4:2a:27:d0:
4a:ac:4a:44:5b:fc:0a:d4:fb:9a:f0:12:a7:b7:92:06:36:12:
9e:c6:e7:5f:7b:5e:d7:ee:cf:32:c2:8a:2c:0a:88:ab:84:3e:
c0:ec:65:22:5a:66:e7:d6:9b:9b:04:98:b4:4e:00:74:60:be:
64:98:6b:da:fc:52:27:69:73:2b:26:d0:be:fb:90:a3:f1:8c:
a4:f3:c6:f6:2d:1c:8d:71:94:e4:31:49:65:97:64:02:5f:d1:
2c:c4:98:df:12:06:c7:b6:84:af:02:ab:a3:48:b9:cb:17:92:
b0:26:35:48:7f:0c:10:a1:cd:71:95:37:9c:13:2f:aa:de:18:
b5:ba:50:76:dd:1f:8d:9f:05:c6:95:55:9e:91:24:07:89:07:
67:ea:55:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:09 2026 by rpki-client