Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/6lyNrJZc2KgbHUFw9DHupU7_v28.roa
File: 6lyNrJZc2KgbHUFw9DHupU7_v28.roa (raw, json)
Hash identifier: AX1c1nt6sPaC/PWZVy5ukPx0yab2OYoZOn2zfTvXv0Q=
Subject key identifier: EA:5C:8D:AC:96:5C:D8:A8:1B:1D:41:70:F4:31:EE:A5:4E:FF:BF:6F
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019F47F5E000A2951C768766AB7A3FCE9BF0
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/6lyNrJZc2KgbHUFw9DHupU7_v28.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a11:4840::/29 maxlen: 29
2a12:a680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:00:a2:95:1c:76:87:66:ab:7a:3f:ce:9b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea5c8dac965cd8a81b1d4170f431eea54effbf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:c9:50:4c:57:a3:bc:99:ae:60:20:22:73:
5f:f0:99:59:24:d2:69:22:bd:9b:a5:37:49:31:42:
69:bb:7c:85:09:e6:03:d7:22:81:8d:f4:01:fd:2f:
92:e2:57:8d:bb:13:31:77:28:63:49:eb:3c:e2:a3:
00:22:cc:de:8a:98:2c:d3:50:a4:83:b9:32:a1:c7:
07:ed:76:b3:42:3c:c6:67:75:32:3d:aa:db:36:d9:
aa:f8:0f:dd:ee:7b:9d:11:7c:d8:5e:f6:31:3c:f1:
6b:13:9e:60:eb:09:c8:6f:37:d3:66:3a:56:94:07:
89:ed:af:04:22:04:4a:b7:7e:8d:0c:64:dd:cf:e4:
17:df:10:a1:67:b0:ec:93:3d:d7:83:49:cc:0f:e8:
2e:17:57:f0:15:ac:b9:e3:f8:cf:5d:0d:bf:97:dd:
f2:e9:45:89:0f:02:72:70:f6:09:de:a2:f5:18:c6:
06:d5:1d:59:87:57:7c:12:63:ea:09:af:33:f1:b7:
c0:ab:bf:9f:df:ae:db:06:9e:84:a8:12:0c:d6:0c:
cf:5e:24:1e:e3:0f:26:68:e6:74:de:0f:bc:1f:88:
d9:ca:c7:92:c6:69:21:1f:22:44:cf:a9:1c:24:f8:
46:09:02:8e:1e:dc:a6:30:c0:27:b3:ee:a1:22:2a:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:8D:AC:96:5C:D8:A8:1B:1D:41:70:F4:31:EE:A5:4E:FF:BF:6F
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/6lyNrJZc2KgbHUFw9DHupU7_v28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4840::/29
2a12:a680::/29
Signature Algorithm: sha256WithRSAEncryption
03:23:48:37:89:ba:52:30:3c:b3:98:c0:a2:61:95:2a:e3:aa:
d4:5d:f0:6d:67:50:49:13:60:49:e2:97:39:84:4f:d6:c1:62:
7e:5c:26:35:e1:92:41:0c:e0:16:61:73:b1:a7:a8:3a:06:ae:
2d:09:03:83:b8:2e:9c:13:ce:ff:ed:84:7c:e8:c8:53:6f:90:
3a:ca:5d:b0:25:1b:cd:7c:39:24:b0:f4:3b:ee:30:25:bb:68:
96:87:8e:e6:e5:a8:80:1a:4a:14:a5:f7:30:cd:f2:2c:44:5c:
e8:7b:96:f1:fd:e0:46:a3:91:3a:fd:17:bd:e1:e0:3d:22:13:
89:f0:a4:85:f8:f3:31:ef:58:e8:6b:25:72:a4:66:aa:78:35:
4c:3e:33:01:c8:1a:d1:38:45:a6:67:67:fa:d2:4b:b0:6f:e2:
d3:5a:8b:76:7c:5c:a8:34:47:70:5a:f3:59:5e:12:23:bf:ac:
ea:df:70:da:c0:9c:d7:f7:f1:a0:40:e0:9e:25:53:78:e0:65:
e9:aa:76:f1:57:d0:9d:14:cc:a6:c9:43:5c:27:0e:d0:67:70:
25:c2:4b:63:80:30:55:81:1a:36:f6:36:26:7d:7b:73:12:15:
4f:2b:84:01:44:a3:cd:dc:e0:f3:84:52:77:8d:e2:e0:7c:c3:
cd:21:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:35 2026 by rpki-client