Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2pYYoptlXTPj6y-uNXYtTEuELhA.roa
File: 2pYYoptlXTPj6y-uNXYtTEuELhA.roa (raw, json)
Hash identifier: JQpZqVOwPhLy+mXaGCgbfu9MnqsYL0WCDYQ8HM/nq2E=
Subject key identifier: DA:96:18:A2:9B:65:5D:33:E3:EB:2F:AE:35:76:2D:4C:4B:84:2E:10
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EDA70D9A004DA62977C9842F2EFE0A2F5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2pYYoptlXTPj6y-uNXYtTEuELhA.roa
Signing time: Thu 18 Jun 2026 11:14:49 +0000
ROA not before: Thu 18 Jun 2026 11:14:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213200
IP address blocks: 2a10:4a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 10:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:70:d9:a0:04:da:62:97:7c:98:42:f2:ef:e0:a2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 18 11:14:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da9618a29b655d33e3eb2fae35762d4c4b842e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:7a:7c:c9:da:5a:22:7c:63:bb:46:b6:12:
f3:98:8a:b6:b0:b1:c0:cf:ab:12:21:6c:72:e7:ac:
ee:b4:5a:2a:e3:f8:03:82:1a:64:12:94:07:d1:4a:
57:08:93:1d:f3:2a:fe:05:bc:f9:5f:c8:fb:b2:10:
26:0c:9e:eb:47:5c:fb:eb:64:5c:c0:50:41:01:98:
70:11:4c:1d:5b:c6:51:9e:eb:2b:56:b6:7a:1d:5d:
e3:36:90:ff:34:8d:62:c4:90:93:50:55:7f:80:e6:
7e:b5:54:28:04:9a:1c:9d:b7:d7:1e:51:b2:bd:de:
b5:ce:de:be:5f:86:79:aa:8e:51:57:55:c7:ee:be:
ec:fc:f3:02:c9:96:44:f5:50:ca:97:e1:58:c6:2f:
36:a6:7e:98:d5:34:cc:a6:af:3f:33:da:16:1d:71:
6f:c3:9d:4d:4c:e3:f2:f0:5d:bd:ff:56:77:e7:31:
d4:b5:52:4a:6f:46:82:98:c0:12:22:57:fe:05:4f:
b3:7b:3e:96:35:3b:ff:dc:0a:42:ef:6a:b5:2c:c0:
63:2b:6f:3e:d2:a6:f1:3b:44:a6:08:76:26:24:7a:
73:12:5e:43:45:18:8d:fb:8b:2b:ab:3f:d3:c2:23:
4c:9f:ca:f2:46:5b:34:33:47:c7:2a:69:65:39:cd:
88:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:96:18:A2:9B:65:5D:33:E3:EB:2F:AE:35:76:2D:4C:4B:84:2E:10
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2pYYoptlXTPj6y-uNXYtTEuELhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4a00::/29
Signature Algorithm: sha256WithRSAEncryption
4c:79:ed:bb:c1:89:cc:a8:a1:b9:c7:23:4f:f6:fd:cc:9a:a1:
89:da:ba:53:a3:d1:2e:34:0a:5e:19:2d:f2:8c:ba:69:55:ee:
77:63:27:a1:71:97:41:f8:d6:e2:a2:bd:50:c5:09:d2:75:03:
41:c8:31:57:16:7d:83:07:19:e9:16:11:87:4b:6d:bf:46:a9:
35:2c:f3:ec:23:e6:e8:ec:be:c9:50:75:c5:f8:8a:e2:dd:f6:
68:cb:3d:a9:14:58:e6:c7:de:32:14:e9:02:58:78:4b:97:af:
8a:de:d5:79:da:8d:f4:6d:80:b4:96:8b:a9:34:b6:b9:93:f5:
14:11:42:28:ad:49:9e:11:2c:c5:0b:72:34:25:6e:3e:b1:20:
0e:ea:5b:40:95:82:20:26:6e:ac:97:94:00:1f:90:a3:c6:45:
ce:a2:d5:9b:00:59:26:ea:0c:21:16:ad:5a:28:85:6c:dc:db:
b0:78:93:39:b0:7b:a0:71:4e:90:83:54:ad:37:07:8b:3e:e4:
2b:8c:6c:3a:a0:41:ef:ee:3a:2b:00:28:51:bb:dd:50:49:a5:
14:4a:4c:b2:c8:d5:ec:ea:07:fc:53:bf:28:55:6a:41:00:ff:
2e:cd:be:ac:e0:9e:77:be:99:5b:f7:36:f5:4a:07:a3:82:49:
4c:d4:7b:e1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ7acNmgBNpil3yYQvLv4KL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNjE4MTExNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTk2MThhMjliNjU1ZDMzZTNlYjJmYWUzNTc2MmQ0YzRiODQyZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CV6fMnaWiJ8Y7tGthLzmIq2sLHA
z6sSIWxy56zutFoq4/gDghpkEpQH0UpXCJMd8yr+Bbz5X8j7shAmDJ7rR1z762Rc
wFBBAZhwEUwdW8ZRnusrVrZ6HV3jNpD/NI1ixJCTUFV/gOZ+tVQoBJocnbfXHlGy
vd61zt6+X4Z5qo5RV1XH7r7s/PMCyZZE9VDKl+FYxi82pn6Y1TTMpq8/M9oWHXFv
w51NTOPy8F29/1Z35zHUtVJKb0aCmMASIlf+BU+zez6WNTv/3ApC72q1LMBjK28+
0qbxO0SmCHYmJHpzEl5DRRiN+4srqz/TwiNMn8ryRls0M0fHKmllOc2I9wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNqWGKKbZV0z4+svrjV2LUxLhC4QMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvMnBZWW9wdGxYVFBqNnktdU5YWXRURXVFTGhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhBKADAN
BgkqhkiG9w0BAQsFAAOCAQEATHntu8GJzKihuccjT/b9zJqhidq6U6PRLjQKXhkt
8oy6aVXud2MnoXGXQfjW4qK9UMUJ0nUDQcgxVxZ9gwcZ6RYRh0ttv0apNSzz7CPm
6Oy+yVB1xfiK4t32aMs9qRRY5sfeMhTpAlh4S5evit7VedqN9G2AtJaLqTS2uZP1
FBFCKK1JnhEsxQtyNCVuPrEgDupbQJWCICZurJeUAB+Qo8ZFzqLVmwBZJuoMIRat
WiiFbNzbsHiTObB7oHFOkINUrTcHiz7kK4xsOqBB7+46KwAoUbvdUEmlFEpMssjV
7OoH/FO/KFVqQQD/Ls2+rOCed76ZW/c29UoHo4JJTNR74Q==
-----END CERTIFICATE-----
Generated at Fri Jul 3 20:06:02 2026 by rpki-client