Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/49pi52pOyp_C4o4f22tUfRHrnbA.roa
File: 49pi52pOyp_C4o4f22tUfRHrnbA.roa (raw, json)
Hash identifier: 2rlC05X5kAD0AZs+XN50Ny1OraFocKa1Q7W9eIat73A=
Subject key identifier: E3:DA:62:E7:6A:4E:CA:9F:C2:E2:8E:1F:DB:6B:54:7D:11:EB:9D:B0
Certificate issuer: /CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Certificate serial: 019F23691437EDF1C0C4E7A102E4251B786A
Authority key identifier: 69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/49pi52pOyp_C4o4f22tUfRHrnbA.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41458
IP address blocks: 94.229.0.0/20 maxlen: 20
185.50.132.0/22 maxlen: 22
195.3.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:14:37:ed:f1:c0:c4:e7:a1:02:e4:25:1b:78:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3da62e76a4eca9fc2e28e1fdb6b547d11eb9db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:19:64:91:92:72:1c:e4:78:72:c6:28:18:
4c:8b:ad:d0:2c:a1:ff:a5:31:07:1c:a7:5f:1f:84:
f6:e6:b1:48:6b:fd:3b:0a:cd:57:4a:9b:66:7f:3f:
e6:bb:b2:71:e8:5c:4e:2f:38:9f:43:70:3a:4c:51:
09:a8:b8:61:3d:ab:9b:50:8c:7c:ba:d6:ec:36:27:
17:2a:76:65:31:8e:fb:5d:46:bc:10:4c:06:12:93:
8d:49:f8:6f:9b:ed:62:19:79:0e:e8:9a:3b:f9:49:
be:2f:00:9f:de:eb:4d:b5:ea:c4:c8:64:fd:11:f2:
70:7e:48:8a:68:b2:6d:a6:1c:20:8a:d7:74:6d:1b:
86:68:10:af:76:b8:cf:a1:72:ec:1f:fc:39:af:40:
1b:25:4e:88:c8:31:b6:65:cf:93:6d:57:c2:38:db:
c5:5e:db:80:f3:84:f9:9a:10:a5:72:26:dd:8d:f4:
0b:df:a2:a8:d0:1b:ff:fd:29:37:69:40:5c:87:e9:
b2:39:af:23:8e:18:25:4e:62:b9:42:b3:84:b4:79:
e3:c3:67:e3:0f:1d:50:22:c3:a4:78:2d:16:7c:78:
e3:07:13:08:e6:74:7a:98:68:6a:d7:fc:d7:37:0f:
e0:69:f7:4b:a4:24:4f:f7:21:3a:fb:85:3f:ad:24:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:62:E7:6A:4E:CA:9F:C2:E2:8E:1F:DB:6B:54:7D:11:EB:9D:B0
X509v3 Authority Key Identifier:
keyid:69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/49pi52pOyp_C4o4f22tUfRHrnbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.0.0/20
185.50.132.0/22
195.3.164.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:38:3f:61:31:6e:4a:2e:13:87:e7:c5:4c:ed:2a:21:b3:96:
df:ad:50:75:32:4b:d8:d0:7a:be:da:7f:95:f8:2e:ec:8b:07:
97:6f:ad:90:0b:2c:64:93:b3:1d:79:a8:30:99:28:cd:b7:d4:
1b:33:34:cc:ff:ac:34:8e:c7:39:70:ca:e0:cf:8b:42:c0:7b:
af:20:e3:8d:3f:30:b6:27:e9:65:ce:a5:09:82:24:bd:83:43:
4c:cd:d2:f4:7d:58:c3:7f:1f:6c:51:8c:31:85:1c:5d:c3:e7:
f2:39:b4:b4:f7:79:9e:8e:86:32:f0:49:f6:ea:69:c0:03:04:
9b:af:d1:5d:01:21:bb:28:e5:61:49:4c:be:af:26:b4:05:98:
b7:1e:86:3b:5d:f9:71:8f:bd:64:47:4d:88:0b:43:c2:ea:b9:
65:d3:7f:b5:17:40:0e:19:f0:f9:95:6e:1d:d1:3e:98:22:60:
cb:11:24:8d:d2:61:5b:8c:6e:31:6e:fc:7c:66:ca:2c:80:16:
b2:ee:e6:ce:95:04:ee:9a:ee:c8:29:1e:b7:04:14:ed:f1:8a:
72:47:25:36:8d:e1:87:80:f5:0c:bf:e4:8d:dd:71:f5:0a:ed:
67:a3:4f:86:ab:be:4c:9b:52:ef:b1:18:73:1c:2e:97:c9:06:
33:de:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:56 2026 by rpki-client