Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1Dq0tgAJwc8vdJQVKgTfvdNM83Y.roa
File: 1Dq0tgAJwc8vdJQVKgTfvdNM83Y.roa (raw, json)
Hash identifier: gJDkctH8/JBS9K3dbeynCIQajQXl2E6CbLEzq4xPxBc=
Subject key identifier: D4:3A:B4:B6:00:09:C1:CF:2F:74:94:15:2A:04:DF:BD:D3:4C:F3:76
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CD26F0D092B757381A8E260CF448A14EF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1Dq0tgAJwc8vdJQVKgTfvdNM83Y.roa
Signing time: Mon 09 Mar 2026 11:50:18 +0000
ROA not before: Mon 09 Mar 2026 11:50:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10111
IP address blocks: 2a0f:ac00::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5200::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a12:ba00::/29 maxlen: 29
2a13:1480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:6f:0d:09:2b:75:73:81:a8:e2:60:cf:44:8a:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 9 11:50:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d43ab4b60009c1cf2f7494152a04dfbdd34cf376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:9a:fc:a3:cb:23:d6:39:fe:15:08:15:10:
f6:9e:b3:1f:f0:15:52:55:6b:75:ed:73:f7:d9:93:
d7:6a:70:66:d9:b0:1c:f1:18:df:03:19:5c:7d:b2:
8e:63:da:ab:5b:47:a3:6e:8e:d6:c8:58:9c:39:cf:
43:cb:cd:76:97:59:e8:07:d2:50:73:74:fd:c3:be:
c1:f4:db:73:75:ff:25:09:df:7c:78:de:d3:20:3c:
aa:c4:64:eb:79:f4:4f:4e:8a:2e:17:fd:41:b4:c5:
e0:eb:2d:55:b7:c5:df:b9:5b:76:d4:2c:ff:1c:61:
2d:cf:4f:60:1f:33:6b:09:f4:d1:62:82:49:b6:f2:
af:7c:42:fb:24:43:fc:8a:d5:65:7b:86:86:66:ff:
1a:f1:6e:d2:6c:62:17:84:d0:89:4f:f1:c9:ec:0d:
eb:06:15:ca:20:cf:f3:18:4b:7f:d4:55:fc:3c:91:
f8:c5:8c:a9:59:14:2d:4b:7e:ff:75:a6:bc:fd:53:
7f:05:4e:9c:6c:1e:f7:49:b7:44:dc:b1:e8:db:c1:
c6:39:5c:df:c3:80:59:f2:da:fd:97:f6:ba:93:47:
5f:ec:9b:cf:e3:24:96:43:55:31:bb:53:eb:69:5b:
07:1a:04:ea:10:ca:d0:08:6f:f0:12:42:e3:8e:94:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3A:B4:B6:00:09:C1:CF:2F:74:94:15:2A:04:DF:BD:D3:4C:F3:76
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1Dq0tgAJwc8vdJQVKgTfvdNM83Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ac00::/29
2a0f:e4c0::/29
2a10:3840::/29
2a10:5200::/29
2a11:5c80::/29
2a12:ba00::/29
2a13:1480::/29
Signature Algorithm: sha256WithRSAEncryption
19:78:a9:69:67:3d:87:79:6d:ed:59:61:ae:c5:d3:77:2b:96:
28:c5:08:6a:9a:bc:90:0e:84:b5:01:42:fb:d9:a6:dc:00:6b:
55:13:50:78:87:5b:2d:1e:02:df:74:10:f8:39:db:9e:1e:56:
c6:75:39:32:6d:c5:3a:9f:3f:fe:1c:32:9d:d5:17:b8:62:1a:
9f:12:e1:f1:3e:39:da:11:c2:25:2c:a0:08:fb:6b:c3:23:ab:
45:10:70:86:c1:58:7a:91:ed:4b:72:d0:57:60:74:01:f3:b1:
73:75:29:30:8c:60:a4:6d:32:79:35:db:89:e4:b8:8b:6d:69:
3e:38:7d:e8:32:bf:a0:1d:10:7e:64:49:51:3b:87:62:a1:93:
d5:f4:1d:32:a6:9b:54:4c:41:98:0f:9c:f4:e2:e2:56:4d:fb:
ba:dd:eb:d5:6c:fe:bb:71:2d:81:2c:9d:72:af:7a:d0:f6:24:
8c:73:1c:2d:94:c3:3f:e4:d9:65:a2:5e:5d:11:57:e2:2f:81:
f0:11:64:1c:9d:8b:ab:e1:50:6b:28:1c:09:37:18:02:3d:c9:
5b:5d:ba:e3:f2:96:a4:27:40:fd:ed:d1:10:79:f0:d3:dd:90:
0c:7c:0f:85:97:62:9a:19:6e:e9:b9:cf:d2:3b:38:49:38:80:
28:fb:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:50 2026 by rpki-client