Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2Yglu-3OXKpxXnJQpltdSI5-HgM.roa
File: 2Yglu-3OXKpxXnJQpltdSI5-HgM.roa (raw, json)
Hash identifier: Gb/SDTfosk+Tloi4f/5rIE/3V8CcBMRlFZG9Wyl5RRY=
Subject key identifier: D9:88:25:BB:ED:CE:5C:AA:71:5E:72:50:A6:5B:5D:48:8E:7E:1E:03
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A067E3DA80E7FB772D6799ACDAA5665E61
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2Yglu-3OXKpxXnJQpltdSI5-HgM.roa
Signing time: Thu 03 Sep 2026 15:29:40 +0000
ROA not before: Thu 03 Sep 2026 15:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197992
IP address blocks: 2a11:1880::/29 maxlen: 29
2a11:90c0::/29 maxlen: 29
2a11:9340::/29 maxlen: 29
2a11:9e00::/29 maxlen: 29
2a11:b740::/29 maxlen: 29
2a13:4f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:e3:da:80:e7:fb:77:2d:67:99:ac:da:a5:66:5e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 3 15:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d98825bbedce5caa715e7250a65b5d488e7e1e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:43:36:07:8d:8e:0c:2a:a9:dc:5a:01:79:10:
42:9b:4d:bd:b6:03:2c:ce:90:9e:0a:8e:a9:5d:59:
19:e8:e9:5b:60:0b:85:d3:06:15:e0:01:29:81:7c:
2c:20:8f:a0:1e:4b:c0:fc:5c:6d:26:46:03:21:7b:
d9:43:bc:d2:14:e9:90:00:6e:fa:54:38:92:dc:44:
ea:a5:33:2d:a2:be:63:a5:fe:3c:ea:8f:68:b6:02:
8c:2f:f4:a8:a8:ab:35:82:e0:b7:f0:f2:4c:ef:b4:
4b:b8:fd:ef:2a:af:d3:0a:0f:20:e2:70:3a:48:a4:
ed:b0:d0:8b:0d:61:13:66:30:b1:02:39:a4:35:cc:
12:24:a0:12:fb:30:da:c9:fa:32:78:4c:64:7f:f6:
75:89:20:1a:1a:1a:30:7a:4d:1f:a5:73:15:97:7c:
67:3c:c0:bc:09:c9:f0:08:c5:1c:3c:ea:53:c7:31:
22:e1:cf:65:63:2a:e1:6b:d3:6f:9f:a3:65:9c:e4:
fa:ab:86:e9:c4:1c:8a:cb:eb:ae:98:59:1e:3d:d5:
a0:3c:cc:f7:b5:c2:c7:01:e5:7b:c2:9c:d1:80:82:
98:77:10:bc:eb:ca:2a:2b:f0:06:73:5b:73:d1:5b:
1c:76:24:4b:41:10:79:ab:e3:d4:f4:4a:ea:f9:96:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:25:BB:ED:CE:5C:AA:71:5E:72:50:A6:5B:5D:48:8E:7E:1E:03
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2Yglu-3OXKpxXnJQpltdSI5-HgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1880::/29
2a11:90c0::/29
2a11:9340::/29
2a11:9e00::/29
2a11:b740::/29
2a13:4f00::/29
Signature Algorithm: sha256WithRSAEncryption
bd:ec:66:b9:9c:3f:21:44:3d:76:88:b8:56:1d:5b:5e:6e:37:
77:69:b3:0e:44:e1:24:5d:de:df:ab:68:75:25:3e:25:ea:5c:
48:9c:db:53:bc:c1:4b:a8:f6:e8:2b:65:4e:20:64:f9:50:6e:
38:21:e2:df:81:86:ac:5e:e4:87:7c:71:88:85:e9:a2:27:bc:
f8:ef:c5:86:34:83:52:ab:32:cc:f5:83:3b:75:fb:9d:ac:50:
dc:e0:cd:0b:04:4f:50:d3:2c:43:e3:be:7a:d3:4e:04:bd:3c:
0d:b2:7e:d8:2f:e1:55:c5:48:3b:4e:bd:93:de:6d:31:65:e9:
56:bc:e3:24:dd:82:26:dd:39:69:47:73:f4:80:66:f2:0f:87:
21:6f:19:a0:23:1e:02:7b:cc:37:54:96:e6:4a:ba:d7:2d:0d:
f4:33:08:7c:ea:50:30:61:95:4a:3a:42:9f:0c:3b:fa:8c:85:
27:37:80:e0:53:b2:40:d7:a9:a6:3a:55:dc:b8:30:09:f3:17:
8d:5c:f6:e7:f1:79:0f:e0:c9:d3:38:ee:fd:af:b5:73:64:45:
de:21:22:ef:89:d9:4a:29:6a:b6:ca:f8:8d:3f:61:b3:c1:25:
7d:81:f8:e2:ed:3a:34:66:1b:a1:f6:4a:37:78:9d:2e:44:72:
8d:63:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:03 2026 by rpki-client