Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9wbuPaY44oTiIkcQVdOT4xDSmIc.roa
File: 9wbuPaY44oTiIkcQVdOT4xDSmIc.roa (raw, json)
Hash identifier: lhmpXQUlkZJVGDF4A7+DSUOIlJrzBM27RYPIHnaQ0GM=
Subject key identifier: F7:06:EE:3D:A6:38:E2:84:E2:22:47:10:55:D3:93:E3:10:D2:98:87
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DAA48A70444D98028C8591023045C78BE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9wbuPaY44oTiIkcQVdOT4xDSmIc.roa
Signing time: Mon 20 Apr 2026 09:46:21 +0000
ROA not before: Mon 20 Apr 2026 09:46:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 84.21.188.0/24 maxlen: 24
2a0f:e841::/32 maxlen: 32
2a10:7500::/29 maxlen: 29
2a13:8c85::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:48:a7:04:44:d9:80:28:c8:59:10:23:04:5c:78:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 20 09:46:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f706ee3da638e284e222471055d393e310d29887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:78:96:7a:ac:3a:d6:b0:3a:64:35:c9:7b:
33:b8:3e:d3:bf:c1:cb:10:e7:67:fb:9e:45:35:3e:
f1:50:cf:5a:e9:8c:16:33:f3:2c:10:d0:71:d0:49:
1f:c5:a5:47:f9:b9:2d:e7:34:95:7e:48:dc:13:3b:
d1:a3:e4:f0:4a:43:8a:b5:2f:b4:fe:57:14:bf:e7:
eb:9a:70:3a:98:f3:e7:60:74:8d:f9:f8:82:b3:4b:
aa:14:bb:30:6b:dc:bf:8b:d5:d1:41:ea:da:ab:d6:
5b:63:83:19:8b:de:43:84:54:c8:b8:be:f9:c0:82:
7a:bc:d4:b0:b9:18:dc:6a:32:29:74:96:8f:1f:ac:
61:e9:aa:e6:99:a6:59:55:67:90:f2:c0:23:6b:46:
34:4c:04:ef:1b:3b:d1:7d:59:32:25:19:01:b7:6b:
39:a0:2c:92:c4:99:b6:4b:09:4e:57:cd:3e:5c:9e:
d8:e0:7a:58:97:48:79:51:8a:9b:66:22:0f:14:45:
3a:5b:c8:c3:20:b3:a1:51:b9:aa:91:9b:66:3b:f1:
4a:69:db:b4:ac:58:d4:47:91:d3:a6:6b:5e:8e:61:
de:36:91:da:a1:30:fe:6d:b6:0e:ce:ff:08:7f:fb:
70:7c:74:cf:93:91:ff:37:b1:67:45:8a:eb:4b:66:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:06:EE:3D:A6:38:E2:84:E2:22:47:10:55:D3:93:E3:10:D2:98:87
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9wbuPaY44oTiIkcQVdOT4xDSmIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.188.0/24
IPv6:
2a0f:e841::/32
2a10:7500::/29
2a13:8c85::/32
Signature Algorithm: sha256WithRSAEncryption
8d:d6:d5:73:6d:32:35:89:00:63:94:cd:5a:0d:3f:86:8c:a8:
69:50:5f:d8:9a:23:80:64:fe:89:c8:26:7a:7e:a7:9d:9d:ce:
59:45:4c:76:52:e8:4b:5a:ed:aa:6b:81:c5:27:92:a2:d3:76:
dc:e4:83:64:da:69:49:f7:79:4c:57:54:1f:39:ea:fa:0f:b8:
0e:ee:17:51:ae:1e:ba:2a:81:9f:a2:21:c2:a0:4b:c3:45:a4:
55:97:70:28:ed:1e:59:50:fb:16:88:f6:19:25:81:69:d1:da:
23:2b:32:a0:2c:76:a1:a9:e5:0b:f6:91:ae:f0:cf:55:48:76:
7f:46:00:2c:1c:58:c6:8d:f4:d5:c7:a0:b2:7e:6d:e1:02:ad:
dc:b3:77:89:40:52:3c:94:c3:44:19:0d:51:50:3f:69:cf:35:
de:ff:7e:0f:72:f6:a7:60:8a:0a:2d:23:e6:3a:30:81:f0:d4:
04:3e:a7:83:62:79:db:c8:d2:06:1c:02:0a:95:80:e6:32:c4:
bf:17:68:d9:7c:92:47:15:4c:19:8f:11:9c:17:b9:d0:66:20:
e9:7d:bd:8a:ba:6e:8c:b8:5d:d5:7a:6c:14:1f:5a:cc:23:f7:
ed:23:02:6c:0a:f9:1b:02:e2:dc:b2:d4:b3:ef:0e:7d:c2:d8:
58:78:c7:46
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ2qSKcERNmAKMhZECMEXHi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNDIwMDk0NjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzA2ZWUzZGE2MzhlMjg0ZTIyMjQ3MTA1NWQzOTNlMzEwZDI5ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuZ4lnqsOtawOmQ1yXszuD7Tv8HL
EOdn+55FNT7xUM9a6YwWM/MsENBx0EkfxaVH+bkt5zSVfkjcEzvRo+TwSkOKtS+0
/lcUv+frmnA6mPPnYHSN+fiCs0uqFLswa9y/i9XRQeraq9ZbY4MZi95DhFTIuL75
wIJ6vNSwuRjcajIpdJaPH6xh6armmaZZVWeQ8sAja0Y0TATvGzvRfVkyJRkBt2s5
oCySxJm2SwlOV80+XJ7Y4HpYl0h5UYqbZiIPFEU6W8jDILOhUbmqkZtmO/FKadu0
rFjUR5HTpmtejmHeNpHaoTD+bbYOzv8If/twfHTPk5H/N7FnRYrrS2YcIwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFPcG7j2mOOKE4iJHEFXTk+MQ0piHMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvOXdidVBhWTQ0b1RpSWtjUVZkT1Q0eERTbUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAMBAIAATAGAwQAVBW8MBsE
AgACMBUDBQAqD+hBAwUDKhB1AAMFACoTjIUwDQYJKoZIhvcNAQELBQADggEBAI3W
1XNtMjWJAGOUzVoNP4aMqGlQX9iaI4Bk/onIJnp+p52dzllFTHZS6Eta7aprgcUn
kqLTdtzkg2TaaUn3eUxXVB856voPuA7uF1GuHroqgZ+iIcKgS8NFpFWXcCjtHllQ
+xaI9hklgWnR2iMrMqAsdqGp5Qv2ka7wz1VIdn9GACwcWMaN9NXHoLJ+beECrdyz
d4lAUjyUw0QZDVFQP2nPNd7/fg9y9qdgigotI+Y6MIHw1AQ+p4NiedvI0gYcAgqV
gOYyxL8XaNl8kkcVTBmPEZwXudBmIOl9vYq6boy4XdV6bBQfWswj9+0jAmwK+RsC
4tyy1LPvDn3C2Fh4x0Y=
-----END CERTIFICATE-----
Generated at Tue Apr 21 09:25:36 2026 by rpki-client