Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/0qv4M2adyHk8d7EeCvFIfdU48N4.roa
File: 0qv4M2adyHk8d7EeCvFIfdU48N4.roa (raw, json)
Hash identifier: wHf9TqZHJ93kXF0WkoV8vR23UCx8MgnFHkCW9uKnTtc=
Subject key identifier: D2:AB:F8:33:66:9D:C8:79:3C:77:B1:1E:0A:F1:48:7D:D5:38:F0:DE
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019EDA59F21D000A828ACEBD424E0F83749A
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/0qv4M2adyHk8d7EeCvFIfdU48N4.roa
Signing time: Thu 18 Jun 2026 10:49:48 +0000
ROA not before: Thu 18 Jun 2026 10:49:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402394
IP address blocks: 2a07:dd80::/29 maxlen: 29
2a0c:b500::/29 maxlen: 29
2a12:3000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:59:f2:1d:00:0a:82:8a:ce:bd:42:4e:0f:83:74:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jun 18 10:49:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2abf833669dc8793c77b11e0af1487dd538f0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:22:74:88:d0:b4:b0:e8:9f:ae:db:cb:1f:
84:f2:aa:c9:0b:40:12:00:8f:d0:5f:57:5e:ae:7b:
81:71:27:dd:d9:9c:ef:ce:8f:10:09:7f:bf:be:05:
e9:1f:28:47:7b:26:e6:01:06:1b:c0:ea:e8:bc:68:
1a:31:ce:19:1c:bb:e1:c3:88:54:42:9a:60:13:88:
f4:68:d1:8d:8d:9a:08:45:9a:8d:43:11:7c:90:32:
f2:e3:a1:16:5a:3a:4c:8c:5d:6c:a8:a4:30:14:d0:
f5:b4:77:bb:ce:e2:5a:6c:8b:26:30:8f:4c:6b:7b:
93:8a:a5:7e:7e:b6:58:4f:3c:3d:cb:3a:af:ed:61:
90:bc:9a:91:69:5d:3e:45:d6:0c:55:e3:14:e4:0b:
93:1a:57:93:7d:b8:34:8b:6c:06:a0:49:7a:5d:52:
f7:b5:85:b0:2b:45:1c:26:17:5d:f4:b7:72:9f:7e:
a0:a3:7c:a8:04:fc:20:a1:a1:59:bd:5c:47:10:69:
0a:0f:a7:20:8b:bd:39:66:a3:cf:3e:69:2b:08:43:
5b:79:6f:5b:85:2f:2f:54:88:72:cb:bf:82:d2:5c:
a1:81:1f:d5:ab:04:ac:74:db:ab:ba:b0:bc:a9:d0:
cd:9b:5a:e9:f3:35:db:20:d9:aa:97:fa:1a:f3:d9:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AB:F8:33:66:9D:C8:79:3C:77:B1:1E:0A:F1:48:7D:D5:38:F0:DE
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/0qv4M2adyHk8d7EeCvFIfdU48N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:dd80::/29
2a0c:b500::/29
2a12:3000::/29
Signature Algorithm: sha256WithRSAEncryption
9a:66:14:6f:52:35:28:9b:d2:6b:2d:c9:51:39:e5:06:00:72:
a7:aa:c8:85:3e:92:f2:ee:01:98:3a:49:19:8a:b7:d7:d4:b9:
90:44:51:6c:a2:48:48:76:65:56:5a:9e:68:3f:7d:99:66:0d:
d0:97:9c:ac:e0:6a:28:2e:80:c9:07:b5:5a:16:b0:81:a2:b8:
e0:fb:c3:2b:ef:c3:bd:35:77:ef:db:77:7a:54:3a:12:12:83:
1b:f2:24:7d:88:31:b7:80:7e:a0:f2:34:39:5f:1f:3d:88:f5:
2b:72:b8:cf:ad:13:20:fa:0c:82:79:64:98:7f:c6:e8:34:5a:
e2:c7:0f:53:7f:8d:bb:df:00:3e:54:fe:50:87:b7:31:bf:bd:
a0:68:4b:73:14:ff:96:f3:b8:f4:58:8d:9e:91:bc:2d:7f:25:
fe:59:94:97:16:43:c4:f4:d7:b0:ad:14:14:eb:ec:06:66:3a:
36:95:aa:c0:be:cc:40:dc:35:97:c6:71:91:69:3b:88:09:b8:
f7:54:68:ce:17:69:9e:50:17:33:71:40:c9:64:52:e1:d8:6a:
73:5d:01:68:9e:d8:e0:99:34:ed:54:d0:91:71:4c:78:d4:46:
b7:ae:06:35:95:1c:a4:af:8e:25:1d:9f:08:b2:e0:97:9d:ab:
27:11:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 06:10:06 2026 by rpki-client