Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zxFQePmhypPnlPnmIVT_2MxkEEQ.roa
File: zxFQePmhypPnlPnmIVT_2MxkEEQ.roa (raw, json)
Hash identifier: 8srPHbq3fCOMZH3Vyj74Nn0Dc3Q440VdZeir4PI8Nlg=
Subject key identifier: CF:11:50:78:F9:A1:CA:93:E7:94:F9:E6:21:54:FF:D8:CC:64:10:44
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0E76ADB8F65EB5A672FD85EAB86A213BF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zxFQePmhypPnlPnmIVT_2MxkEEQ.roa
Signing time: Mon 28 Sep 2026 09:48:54 +0000
ROA not before: Mon 28 Sep 2026 09:48:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29226
IP address blocks: 2a0a:2d01::/32 maxlen: 32
2a0d:b740::/29 maxlen: 29
2a0f:7d03::/32 maxlen: 32
2a10:7100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:6a:db:8f:65:eb:5a:67:2f:d8:5e:ab:86:a2:13:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 28 09:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf115078f9a1ca93e794f9e62154ffd8cc641044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:10:0c:9c:f8:63:30:32:ea:20:6c:45:fb:
4d:9c:87:0e:b1:d4:a0:c5:79:15:03:6d:26:3e:5d:
67:fb:82:b5:12:30:db:90:34:57:42:ed:c8:2c:c5:
cb:e0:4d:e6:e7:23:2f:58:82:8b:6c:e2:72:bb:2a:
e6:40:6b:ac:6e:f0:6c:29:7c:4d:eb:60:7a:14:bf:
83:d2:0e:a5:86:4f:c9:e3:f9:fb:c8:ab:08:2d:f1:
15:5a:27:46:28:2a:28:48:30:2e:76:3a:c8:38:19:
6b:d3:13:01:5e:c6:18:5d:49:a1:c5:39:9a:07:a4:
3e:26:da:f4:f9:aa:df:cb:fb:2f:f1:e4:c1:f8:18:
e4:a1:aa:19:c0:f6:3d:2a:d0:7e:35:a4:47:2f:b4:
8e:7e:d3:c3:5e:fb:76:92:f7:c3:82:30:4f:73:9b:
3e:a8:ff:c0:ba:78:c5:21:ae:a3:73:1c:59:ea:85:
0b:fd:92:b9:3a:ac:ac:95:18:af:47:58:ad:4f:c9:
e6:37:74:19:11:2e:f0:29:73:71:99:e3:97:79:c8:
20:9b:22:77:ef:a4:b6:91:a4:ac:34:76:5b:dd:5c:
94:83:a6:b1:20:fa:80:3e:5c:16:b3:d9:c3:31:d5:
99:9d:c3:43:39:69:4a:8f:6a:a7:32:cd:95:5f:ec:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:50:78:F9:A1:CA:93:E7:94:F9:E6:21:54:FF:D8:CC:64:10:44
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zxFQePmhypPnlPnmIVT_2MxkEEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d01::/32
2a0d:b740::/29
2a0f:7d03::/32
2a10:7100::/29
Signature Algorithm: sha256WithRSAEncryption
c0:e8:63:19:43:ef:cf:22:2e:1b:f9:7f:a0:b3:70:c4:58:7e:
ee:6e:1b:a4:c8:07:ec:5d:95:2e:d6:6a:77:5e:e1:79:66:a6:
06:b0:5d:ab:93:1f:8b:f1:ac:88:2d:6f:cf:f5:a8:49:ff:cf:
0a:62:02:94:3f:b6:0a:60:a6:8c:9f:6c:ab:6b:27:a0:0c:17:
7f:8f:39:5b:3e:ca:99:a1:48:6b:57:57:bb:ca:5e:50:c3:75:
db:1b:e5:27:d6:44:84:d4:1f:6c:76:56:ed:85:df:eb:57:74:
df:d4:d8:f4:97:3e:ce:e1:43:ca:ea:3f:4a:3a:f9:d0:3a:11:
93:40:e4:98:b4:8b:e5:fd:eb:9a:b4:99:4f:98:22:92:64:c9:
69:48:6a:45:76:46:de:ad:01:ae:ec:fd:8c:3d:1d:b9:bc:6a:
95:fe:04:2b:4a:ca:67:05:34:dc:62:dd:75:ec:20:34:ae:9a:
61:c5:7a:0f:76:51:19:6d:68:59:9a:11:a6:c9:c4:71:18:15:
16:16:cc:0d:ba:d6:78:df:04:0b:c8:8e:55:ba:76:19:15:f0:
9a:5d:39:24:9c:fc:72:75:0a:ea:0c:c0:87:4c:76:38:e4:27:
09:f9:e1:84:6b:55:1d:c9:98:6b:4a:99:48:11:ec:ba:e5:7e:
67:d5:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:28 2026 by rpki-client