Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2XXZHs_aHXOLD5OdseNrikV47Xw.roa
File: 2XXZHs_aHXOLD5OdseNrikV47Xw.roa (raw, json)
Hash identifier: 5inZuh0pK3kINDJmrT0ukmyHtgivocNf8h48qinpvrY=
Subject key identifier: D9:75:D9:1E:CF:DA:1D:73:8B:0F:93:9D:B1:E3:6B:8A:45:78:ED:7C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CB45D6C9409CF5EC18A2EC6FE7797AA22
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2XXZHs_aHXOLD5OdseNrikV47Xw.roa
Signing time: Tue 03 Mar 2026 15:42:27 +0000
ROA not before: Tue 03 Mar 2026 15:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a12:ac43:1312::/48 maxlen: 48
2a12:ecc0:158::/48 maxlen: 48
2a12:ecc6:1312::/48 maxlen: 48
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:5d:6c:94:09:cf:5e:c1:8a:2e:c6:fe:77:97:aa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 3 15:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d975d91ecfda1d738b0f939db1e36b8a4578ed7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:ff:31:5e:f3:89:85:ce:a0:3f:34:80:8a:
31:c4:ae:b0:97:b8:d2:c3:75:25:63:53:2a:0a:b8:
fb:43:8e:df:36:75:3c:6c:34:60:07:e2:a7:a1:5e:
fd:05:56:13:9b:c7:39:ee:9b:ea:12:d0:e5:9c:bd:
0b:56:3c:fd:e8:56:38:67:f3:7d:cb:3e:1b:48:c5:
a4:fd:a6:e0:b0:c1:e7:fb:c5:9c:16:0c:49:f5:a6:
e5:74:67:2d:1a:0a:92:26:55:e6:e7:4c:3b:b7:d5:
9e:28:6a:1a:3f:16:9f:3d:22:2a:7d:1b:46:83:07:
b8:25:f0:a7:c8:1c:4a:48:fb:26:71:86:5b:49:78:
ec:15:b0:a8:a0:74:fc:be:83:c6:38:64:e5:d3:91:
19:34:00:31:52:54:1d:ac:af:fa:e7:5f:94:13:13:
0c:a7:69:61:e6:c3:64:2e:2b:aa:ec:71:bd:8d:b2:
94:4a:67:ef:29:ec:32:9c:76:e4:1f:a9:3d:2d:c1:
38:53:9f:19:de:f6:74:e5:31:15:a8:33:7c:9f:ce:
df:83:e4:56:fc:3a:57:b5:ad:00:88:85:55:79:ac:
45:3a:07:c5:6b:3a:aa:f4:0c:e4:a5:33:be:dc:9b:
75:0a:39:6f:b4:0e:c9:3b:71:1d:8b:32:b4:eb:97:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:75:D9:1E:CF:DA:1D:73:8B:0F:93:9D:B1:E3:6B:8A:45:78:ED:7C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2XXZHs_aHXOLD5OdseNrikV47Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/47
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0e:15c7:99::/48
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:db40::/29
2a11:8880::/29
2a12:ac43:1312::/48
2a12:ecc0:158::/48
2a12:ecc6:1312::/48
2a13:1380::/29
2a13:18c6:66::/48
2a13:18c6:88::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:3a:1f:8b:74:59:be:5e:52:92:60:ab:d8:e7:14:98:34:94:
5c:1e:c0:57:ee:f7:79:24:bc:aa:98:2c:fe:5d:76:a9:13:10:
a3:4b:e5:20:21:f8:dc:d9:4b:74:67:19:f1:7f:fc:7a:25:e3:
17:f7:05:a2:1d:1a:ef:01:6d:06:42:34:2d:bb:a8:2a:88:2d:
c9:b3:80:75:58:45:e9:07:d3:cf:4d:6f:4b:cb:19:4f:f5:d6:
7a:f1:27:1f:36:f4:dc:f2:75:f0:15:57:e4:8a:94:99:b8:d0:
c0:4e:cf:f8:9f:a7:2a:50:1e:69:4d:0c:60:3f:19:56:21:de:
7d:5e:dc:0d:d7:1b:51:e2:3d:f4:34:96:ca:c8:41:81:23:d9:
d7:fa:ef:69:f0:07:78:73:26:11:bc:cf:17:ef:28:12:d2:b8:
40:c6:95:32:82:1e:97:89:61:f7:f3:d5:29:a1:f5:e9:74:dc:
88:08:96:4a:cc:59:23:8b:d3:12:73:f4:8b:e1:f2:8c:50:ae:
9e:91:74:77:8c:a1:12:04:2b:31:89:96:76:74:78:eb:f3:51:
6e:dc:30:7e:61:5b:2f:57:a0:bf:b1:4f:d3:a9:68:7a:b9:8c:
79:45:3b:28:fc:8a:7f:1a:a9:e7:cf:d8:f4:36:aa:f0:02:45:
4b:89:3e:4a
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgISAZy0XWyUCc9ewYouxv53l6oiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMzAzMTU0MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTc1ZDkxZWNmZGExZDczOGIwZjkzOWRiMWUzNmI4YTQ1NzhlZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSb/MV7ziYXOoD80gIoxxK6wl7jS
w3UlY1MqCrj7Q47fNnU8bDRgB+KnoV79BVYTm8c57pvqEtDlnL0LVjz96FY4Z/N9
yz4bSMWk/abgsMHn+8WcFgxJ9abldGctGgqSJlXm50w7t9WeKGoaPxafPSIqfRtG
gwe4JfCnyBxKSPsmcYZbSXjsFbCooHT8voPGOGTl05EZNAAxUlQdrK/651+UExMM
p2lh5sNkLiuq7HG9jbKUSmfvKewynHbkH6k9LcE4U58Z3vZ05TEVqDN8n87fg+RW
/DpXta0AiIVVeaxFOgfFazqq9AzkpTO+3Jt1CjlvtA7JO3EdizK065dTcwIDAQAB
o4IDGzCCAxcwHQYDVR0OBBYEFNl12R7P2h1ziw+TnbHja4pFeO18MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvMlhYWkhzX2FIWE9MRDVPZHNlTnJpa1Y0N1h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCCARYEAgACMIIB
DgMFAyoEn0ADBwAqBhGEAQEDBQMqBjvAAwUDKgeKQAMFAyoJewADBwEqCi0GAQID
BQMqCn0AAwUDKgxIgAMHACoMeIYAmQMHACoOFccAmQMFAyoPF8ADBQMqDyUAAwUD
Kg/SAAMFAyoP20ADBQMqEYiAAwcAKhKsQxMSAwcAKhLswAFYAwcAKhLsxhMSAwUD
KhMTgAMHACoTGMYAZgMHACoTGMYAiAMFAyoTLMADBQMqEy1AAwUDKhMtwAMFAyoT
LkADBQMqEzOAAwUDKhNJAAMFAyoTW4ADBQMqE3kAAwUDKhN9gAMFAyoTggADBQMq
E9EAAwUDKhPXAAMFAyoT2QADBQMqE/kAAwUDKhP7ADANBgkqhkiG9w0BAQsFAAOC
AQEAGjofi3RZvl5SkmCr2OcUmDSUXB7AV+73eSS8qpgs/l12qRMQo0vlICH43NlL
dGcZ8X/8eiXjF/cFoh0a7wFtBkI0LbuoKogtybOAdVhF6QfTz01vS8sZT/XWevEn
Hzb03PJ18BVX5IqUmbjQwE7P+J+nKlAeaU0MYD8ZViHefV7cDdcbUeI99DSWyshB
gSPZ1/rvafAHeHMmEbzPF+8oEtK4QMaVMoIel4lh9/PVKaH16XTciAiWSsxZI4vT
EnP0i+HyjFCunpF0d4yhEgQrMYmWdnR46/NRbtwwfmFbL1egv7FP06loermMeUU7
KPyKfxqp58/Y9Daq8AJFS4k+Sg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 19:14:03 2026 by rpki-client