Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8DsFGKZyPdKD7AiiopWcTQJDwi8.roa
File: 8DsFGKZyPdKD7AiiopWcTQJDwi8.roa (raw, json)
Hash identifier: ph7gSgip0kT/bevlTPq6S1iRrnoSdaPo9olHxwsvYAg=
Subject key identifier: F0:3B:05:18:A6:72:3D:D2:83:EC:08:A2:A2:95:9C:4D:02:43:C2:2F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E3ACA9C324859A206630226C407199320
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8DsFGKZyPdKD7AiiopWcTQJDwi8.roa
Signing time: Mon 18 May 2026 11:13:37 +0000
ROA not before: Mon 18 May 2026 11:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 2a0f:1580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:ca:9c:32:48:59:a2:06:63:02:26:c4:07:19:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 18 11:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f03b0518a6723dd283ec08a2a2959c4d0243c22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:9c:ca:df:29:c9:3f:79:e6:5a:01:f2:c1:
67:7d:3c:13:7f:a1:c5:da:50:62:62:48:cd:b5:a1:
3b:e6:7f:31:91:cd:7a:33:c5:eb:6c:df:c6:98:f6:
85:9f:8e:d8:03:20:81:cc:87:89:e4:4e:d2:ac:bf:
65:8a:e9:05:df:8e:06:34:b6:ad:91:e2:58:1c:05:
13:14:52:92:ca:11:88:62:ec:d6:77:ab:6f:c5:4e:
bb:29:bd:b2:5e:52:fa:47:dd:bf:91:ca:d1:a6:d9:
95:4a:54:d3:7b:f5:bb:81:f2:a7:51:89:9e:cc:c6:
81:80:aa:02:14:1c:b1:b8:87:83:b2:93:a9:10:e1:
1d:b8:3a:c8:6b:de:6f:9e:c2:8e:fc:eb:7a:cf:e1:
13:8e:d6:49:75:97:b7:2d:89:f2:0e:61:40:e3:d2:
27:68:ba:38:de:4b:ba:b1:17:02:03:f2:60:91:fa:
a8:bf:64:2a:c6:d5:f4:08:91:6b:22:0d:92:11:7b:
39:17:c3:6f:f1:92:f9:23:96:02:58:70:14:ca:42:
15:34:98:c2:a3:05:8e:54:fa:c3:e3:51:78:11:1a:
50:47:de:d1:c8:c5:b6:8b:7b:7e:9e:18:1a:c6:b6:
8a:02:ab:f4:ca:17:1f:8d:c4:33:c2:bc:aa:0b:2b:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3B:05:18:A6:72:3D:D2:83:EC:08:A2:A2:95:9C:4D:02:43:C2:2F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8DsFGKZyPdKD7AiiopWcTQJDwi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1580::/32
Signature Algorithm: sha256WithRSAEncryption
66:ff:dc:65:84:8a:eb:c3:9d:4a:39:51:74:9d:77:4a:c0:ca:
82:fd:a5:d1:5e:01:c5:70:ae:84:bf:57:d8:21:98:58:95:df:
fb:c4:f8:fb:39:a4:7e:68:d7:9b:50:0f:16:65:a9:ea:d2:e3:
dc:16:fd:90:7c:f7:11:57:47:23:e4:54:d5:d9:f9:e3:ce:cf:
7e:32:a5:14:16:c8:05:1e:3b:5f:0b:85:ba:36:78:a2:01:8e:
c5:0a:5e:bc:3c:32:20:e7:60:1a:0f:1e:fb:aa:35:d2:9e:69:
4a:73:46:28:ff:43:ea:ae:8f:4c:2e:ae:7e:02:16:d6:bb:f7:
2b:43:42:a5:36:1e:53:cc:98:67:11:97:b6:a3:8c:41:57:ff:
50:cc:77:a8:1d:80:85:1f:d9:8f:7c:1a:85:0b:93:07:43:5e:
7a:08:62:51:c1:97:ff:a3:a6:b1:a7:7e:e7:17:22:61:11:b0:
81:cb:a4:b1:6e:ab:38:5c:19:d6:ea:12:a5:67:7a:d9:19:cb:
ff:5d:de:d9:27:49:01:e5:6b:52:b3:80:76:cd:58:88:60:ed:
e9:ee:ab:96:3b:2d:88:fc:93:88:3a:75:5a:82:ba:3e:10:c1:
b7:69:16:ff:cb:79:48:bb:3a:d1:b0:bd:a5:16:d5:74:2b:00:
6a:ac:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:48 2026 by rpki-client