Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iI-qk8-NhMDQFefIgCke9PzHx6Y.roa
File: iI-qk8-NhMDQFefIgCke9PzHx6Y.roa (raw, json)
Hash identifier: XNVyrDxOByVlPsXsylUkmZ15iJm2CxwVakR0CHmAlSY=
Subject key identifier: 88:8F:AA:93:CF:8D:84:C0:D0:15:E7:C8:80:29:1E:F4:FC:C7:C7:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A11F98AC623659D75ADD00B2ED63C5F04B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iI-qk8-NhMDQFefIgCke9PzHx6Y.roa
Signing time: Fri 09 Oct 2026 07:37:41 +0000
ROA not before: Fri 09 Oct 2026 07:37:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396362
IP address blocks: 2a0f:1e80:1::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:e6c5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:98:ac:62:36:59:d7:5a:dd:00:b2:ed:63:c5:f0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 9 07:37:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=888faa93cf8d84c0d015e7c880291ef4fcc7c7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:99:2e:da:37:45:7b:09:2e:d0:d6:39:1c:
47:e8:e0:e4:43:42:b4:ed:9d:8d:5f:36:9d:83:47:
82:20:bf:4b:d5:7e:98:6d:cc:5d:fb:ab:9c:ff:a2:
c7:fb:b1:fe:2c:12:5d:2c:64:ba:25:18:88:4a:77:
53:90:e9:e7:83:2d:0c:fd:49:be:f7:78:b7:f9:b3:
17:42:a1:ce:45:d8:6e:4d:ac:0c:40:64:8a:56:b4:
50:5f:4c:4f:81:47:69:f8:29:7c:98:0a:98:80:60:
23:8b:e0:36:e2:f1:d9:20:80:c2:9d:b7:a7:a9:8e:
f3:47:aa:01:98:b4:16:64:95:f5:38:c1:2e:a7:11:
fd:22:03:0c:7e:43:27:04:f1:1d:58:71:3d:0c:15:
40:47:ac:53:a6:0e:51:da:87:73:26:13:c1:ef:7c:
31:35:c7:43:7f:25:36:c2:85:95:4b:4f:93:9e:11:
1f:47:74:d0:1a:58:8f:64:53:68:22:6b:f4:53:d5:
32:c1:07:4c:ef:09:7d:ce:de:74:42:3b:30:03:ea:
8f:b3:0d:2f:25:68:42:e2:3f:f9:8e:fe:9d:25:ce:
5b:18:7a:ed:fe:d8:b6:b2:f6:00:d1:35:0e:23:61:
03:ad:a2:63:cf:cb:26:85:e0:d3:18:a7:6d:bd:43:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8F:AA:93:CF:8D:84:C0:D0:15:E7:C8:80:29:1E:F4:FC:C7:C7:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iI-qk8-NhMDQFefIgCke9PzHx6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1e80:1::/48
2a0f:3d87::/32
2a0f:e6c5::/32
Signature Algorithm: sha256WithRSAEncryption
30:f8:fe:7a:bc:fa:94:4a:f1:9d:f2:79:52:17:7d:4d:77:64:
da:c7:61:e3:16:46:e1:1c:7d:42:82:0c:68:62:47:63:82:c7:
49:48:3f:b1:ed:01:39:8f:8f:66:c0:8d:a4:00:7f:cf:05:dc:
0a:3e:a9:23:e0:d2:0c:c6:75:f7:1a:99:6c:a2:db:aa:37:ca:
20:cd:d0:19:69:05:19:6d:af:96:17:89:a9:cb:68:1d:80:25:
85:0d:52:ac:3d:80:72:b6:52:bc:31:f5:c4:9f:90:d6:d9:2e:
93:72:d1:04:6b:5a:d2:25:a6:ba:3c:78:2d:d3:28:bc:88:27:
d6:c5:ce:d4:d0:d9:3e:20:75:fa:eb:fb:e3:ef:3d:59:f1:09:
87:97:a7:68:d3:6b:1f:39:ea:28:23:0c:f1:be:fe:75:a2:cc:
78:ff:ad:03:40:34:dc:7c:c2:1d:4e:b6:ed:7f:ac:d9:31:2c:
d5:3c:37:6b:3e:63:4a:17:78:b1:3f:12:d3:0a:9f:92:98:ab:
58:73:9d:d3:f6:cb:1b:ec:31:be:2b:15:dc:e8:81:cf:e2:37:
5d:11:ec:10:5e:45:1e:4d:f1:bf:45:63:ae:72:ed:f9:7b:39:
64:a4:b2:49:00:a5:92:ca:83:55:58:a7:46:c4:ef:cf:1a:26:
19:aa:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:08 2026 by rpki-client