Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6P_NXbcpH8CX9tpTvF44iLEWggs.roa
File: 6P_NXbcpH8CX9tpTvF44iLEWggs.roa (raw, json)
Hash identifier: e+Js7sTpWgEpd3lko1AUH9OCRwwt/H69TePX8usHOVU=
Subject key identifier: E8:FF:CD:5D:B7:29:1F:C0:97:F6:DA:53:BC:5E:38:88:B1:16:82:0B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A01DDB54F58BFC9799162B291A9AB03F84
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6P_NXbcpH8CX9tpTvF44iLEWggs.roa
Signing time: Thu 20 Aug 2026 06:28:28 +0000
ROA not before: Thu 20 Aug 2026 06:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132337
IP address blocks: 2a06:5280::/29 maxlen: 29
2a09:4900::/29 maxlen: 32
2a09:b700::/29 maxlen: 32
2a0a:2940::/29 maxlen: 32
2a0a:3200::/29 maxlen: 32
2a0f:14c0::/29 maxlen: 32
2a0f:1840::/29 maxlen: 29
2a0f:1a40::/29 maxlen: 32
2a0f:2100::/29 maxlen: 29
2a0f:28c0::/29 maxlen: 29
2a0f:2ec0::/29 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0f:a200::/29 maxlen: 32
2a0f:c400::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 32
2a0f:dec0::/29 maxlen: 29
2a10:33c0::/29 maxlen: 32
2a10:3440::/29 maxlen: 32
2a10:36c0::/29 maxlen: 32
2a10:5c00::/29 maxlen: 32
2a10:6b00::/29 maxlen: 32
2a10:7f00::/29 maxlen: 29
2a11:5200::/29 maxlen: 32
2a11:89c0::/29 maxlen: 29
2a11:b200::/29 maxlen: 32
2a11:d240::/29 maxlen: 29
2a12:4ac0::/29 maxlen: 32
2a12:d6c0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:540::/29 maxlen: 32
2a13:3040::/29 maxlen: 32
2a13:9380::/29 maxlen: 32
2a13:9480::/29 maxlen: 32
2a13:9680::/29 maxlen: 32
2a13:cf00::/29 maxlen: 32
2a13:fa00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:db:54:f5:8b:fc:97:99:16:2b:29:1a:9a:b0:3f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 20 06:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8ffcd5db7291fc097f6da53bc5e3888b116820b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:92:1b:be:cb:15:ba:1d:98:a8:be:fd:7c:
f9:05:4f:84:bf:e5:7f:31:33:88:8a:d5:7c:b5:d6:
12:cc:e6:4e:c6:4b:8a:40:7e:02:ff:24:2c:27:d0:
8b:e2:d6:a3:71:02:02:9d:43:28:d8:82:d2:8f:24:
69:6c:95:03:8c:bd:85:fe:5d:4a:cf:f2:02:aa:d5:
b8:cc:d9:8d:12:8e:a7:d7:07:b5:3a:6f:68:a7:9e:
bc:40:11:d3:d4:f1:83:02:7e:4d:a6:2c:bc:d8:6e:
b1:5b:97:ae:54:54:a9:d3:db:89:af:66:cf:b9:40:
6f:45:08:37:cb:c0:0f:dd:ef:7a:4c:83:a7:35:78:
17:1b:54:2d:5d:73:19:b1:56:cf:57:a2:39:1b:9e:
5e:03:3d:f6:12:ff:0b:f3:0f:be:e7:ff:df:fc:f0:
5a:23:bd:48:17:95:07:2f:d2:17:02:65:30:53:e8:
3c:8d:73:51:f3:26:66:7e:8a:25:46:5f:ba:ec:ab:
aa:3d:35:61:9f:c7:bb:41:39:bd:1c:2f:7e:e6:e2:
e6:11:db:d8:b0:16:96:a8:f5:88:26:5e:aa:1d:16:
31:69:94:81:aa:dc:c9:27:f6:6d:27:a4:3e:be:fa:
f0:a9:47:b7:b0:fb:49:46:0e:8e:97:57:54:e4:63:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:CD:5D:B7:29:1F:C0:97:F6:DA:53:BC:5E:38:88:B1:16:82:0B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6P_NXbcpH8CX9tpTvF44iLEWggs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5280::/29
2a09:4900::/29
2a09:b700::/29
2a0a:2940::/29
2a0a:3200::/29
2a0f:14c0::/29
2a0f:1840::/29
2a0f:1a40::/29
2a0f:2100::/29
2a0f:28c0::/29
2a0f:2ec0::/29
2a0f:6d80::/29
2a0f:a200::/29
2a0f:c400::/29
2a0f:dac0::/29
2a0f:dec0::/29
2a10:33c0::/29
2a10:3440::/29
2a10:36c0::/29
2a10:5c00::/29
2a10:6b00::/29
2a10:7f00::/29
2a11:5200::/29
2a11:89c0::/29
2a11:b200::/29
2a11:d240::/29
2a12:4ac0::/29
2a12:d6c0::/29
2a13:200::/29
2a13:540::/29
2a13:3040::/29
2a13:9380::/29
2a13:9480::/29
2a13:9680::/29
2a13:cf00::/29
2a13:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
a8:84:d7:40:6f:07:8f:6f:3d:6b:81:9d:9e:66:6c:b7:c0:db:
ea:e9:99:c2:2f:06:26:b0:68:ff:4d:c2:1c:4c:6e:c0:35:af:
ac:ec:df:84:95:7a:ba:93:0b:26:08:4f:fe:e0:ba:e8:04:8a:
79:81:87:51:b8:e0:c9:37:ff:52:e5:1b:16:02:44:54:43:74:
2f:c5:6a:cd:fc:cc:4f:7d:8b:3a:5c:06:0c:33:b0:79:e1:b7:
05:93:be:fe:54:46:df:fe:f4:4f:77:77:a1:93:09:70:86:9c:
73:f6:f9:70:40:5d:40:7e:75:ca:dd:6f:db:3f:50:fe:e9:5a:
a8:74:61:27:26:19:ed:75:cd:69:22:05:67:18:25:6c:07:ab:
11:45:2b:17:c8:f5:9b:77:9b:6b:99:8e:6e:0f:77:f7:54:c0:
a1:40:65:52:b5:53:ac:b8:25:bf:d9:a5:63:a7:68:ab:53:b0:
fc:02:89:80:c2:41:df:09:e3:8d:92:47:68:18:ba:36:df:75:
b6:40:97:93:9e:4e:f9:3f:ea:e4:0a:49:c5:b4:c5:9e:12:34:
c5:66:fa:73:58:dd:a4:d1:8b:d9:b5:3d:44:81:bc:1a:31:de:
cb:96:6e:fc:9f:f7:d0:29:b6:37:fd:4e:f7:e1:33:cd:6f:3f:
89:16:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:53 2026 by rpki-client