Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AgE5X-WTveciQO_Dn_5UUH4VcsA.roa
File: AgE5X-WTveciQO_Dn_5UUH4VcsA.roa (raw, json)
Hash identifier: VD2p0u2ARNTPjudPvOqNXWLAaqEtkplS/FSeSiS8fdk=
Subject key identifier: 02:01:39:5F:E5:93:BD:E7:22:40:EF:C3:9F:FE:54:50:7E:15:72:C0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FF488C64C78B901CCEDDCC82CEF954878
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AgE5X-WTveciQO_Dn_5UUH4VcsA.roa
Signing time: Wed 12 Aug 2026 05:53:52 +0000
ROA not before: Wed 12 Aug 2026 05:53:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a06:1181:2::/48 maxlen: 48
2a09:17c0:22::/48 maxlen: 48
2a09:17c7:10::/48 maxlen: 48
2a0a:2d07:9a::/48 maxlen: 48
2a0c:7886:22::/48 maxlen: 48
2a0d:1140::/29 maxlen: 32
2a0e:15c0:4::/48 maxlen: 48
2a0e:1a80:1312::/48 maxlen: 48
2a0e:2240::/29 maxlen: 32
2a0e:c785:273::/48 maxlen: 48
2a0e:e980::/29 maxlen: 32
2a0e:f500::/29 maxlen: 32
2a0e:f604:10::/48 maxlen: 48
2a0f:1200:2::/48 maxlen: 48
2a0f:1587:100::/48 maxlen: 48
2a0f:16c0::/29 maxlen: 32
2a0f:1e84:3f::/48 maxlen: 48
2a0f:1e86:100::/48 maxlen: 48
2a0f:2d40::/29 maxlen: 32
2a0f:3047:fc1d::/48 maxlen: 48
2a0f:3940::/29 maxlen: 32
2a0f:3d86:77::/48 maxlen: 48
2a0f:7d06:9c8a::/48 maxlen: 48
2a0f:bc00:100::/48 maxlen: 48
2a0f:df45:fc78::/48 maxlen: 48
2a0f:df47:200::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e640::/29 maxlen: 32
2a0f:e6c6:5532::/48 maxlen: 48
2a0f:e7c5:f8f9::/48 maxlen: 48
2a0f:e847:77::/48 maxlen: 48
2a10:3540::/29 maxlen: 32
2a10:3640::/29 maxlen: 32
2a10:6500::/29 maxlen: 32
2a10:7300::/29 maxlen: 32
2a10:7d00::/29 maxlen: 32
2a11:1200::/29 maxlen: 32
2a11:3f80::/29 maxlen: 29
2a12:ac44:1312::/48 maxlen: 48
2a12:dc00::/29 maxlen: 32
2a12:ecc3:2::/48 maxlen: 48
2a13:cc0::/29 maxlen: 32
2a13:18c0:22::/48 maxlen: 48
2a13:1940::/29 maxlen: 32
2a13:8c82:1::/48 maxlen: 48
2a13:9281:100::/48 maxlen: 48
2a13:9580::/29 maxlen: 32
2a13:c900:fd1a::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:88:c6:4c:78:b9:01:cc:ed:dc:c8:2c:ef:95:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 12 05:53:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0201395fe593bde72240efc39ffe54507e1572c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:e7:b2:54:c0:80:29:25:a0:21:91:7c:63:
01:50:53:95:3c:23:ff:3f:dc:05:09:d0:85:81:94:
82:d9:bd:08:42:3f:80:3f:fa:3c:71:d6:38:cd:13:
33:c6:61:87:1c:cb:33:1b:92:14:8d:47:5a:e6:85:
36:76:dc:94:23:31:00:03:2c:2a:fb:be:50:c9:a9:
08:22:6e:e0:5f:08:c7:74:a5:bd:76:ad:27:27:be:
a2:6a:27:dc:d7:a4:36:1e:d1:e7:58:16:08:05:43:
70:dc:08:cf:6e:af:38:5a:62:27:31:73:2a:5d:60:
23:ec:fd:bb:91:c7:b6:86:81:13:c9:a3:6e:55:65:
e8:c0:47:91:27:e9:fd:16:da:d1:17:8c:95:73:d7:
75:5c:e2:db:1b:a3:ca:92:46:6d:05:2a:37:88:60:
1f:72:85:0c:fd:5c:c7:5d:74:c3:87:e1:ee:6e:f7:
13:07:33:d6:34:8a:78:c5:3f:8e:03:2a:9c:ae:4c:
01:cd:6a:22:5c:a6:c0:24:49:5a:65:35:d3:c7:45:
47:14:a4:0a:22:1b:7c:e2:c0:1b:1d:90:2e:40:0e:
a7:58:8e:03:70:54:49:34:68:41:31:a0:93:be:7a:
d5:b7:d5:87:69:8c:fb:18:01:95:ca:5c:3e:cd:40:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:39:5F:E5:93:BD:E7:22:40:EF:C3:9F:FE:54:50:7E:15:72:C0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AgE5X-WTveciQO_Dn_5UUH4VcsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1181:2::/48
2a09:17c0:22::/48
2a09:17c7:10::/48
2a0a:2d07:9a::/48
2a0c:7886:22::/48
2a0d:1140::/29
2a0e:15c0:4::/48
2a0e:1a80:1312::/48
2a0e:2240::/29
2a0e:c785:273::/48
2a0e:e980::/29
2a0e:f500::/29
2a0e:f604:10::/48
2a0f:1200:2::/48
2a0f:1587:100::/48
2a0f:16c0::/29
2a0f:1e84:3f::/48
2a0f:1e86:100::/48
2a0f:2d40::/29
2a0f:3047:fc1d::/48
2a0f:3940::/29
2a0f:3d86:77::/48
2a0f:7d06:9c8a::/48
2a0f:bc00:100::/48
2a0f:df45:fc78::/48
2a0f:df47:200::/48
2a0f:e202:55::/48
2a0f:e640::/29
2a0f:e6c6:5532::/48
2a0f:e7c5:f8f9::/48
2a0f:e847:77::/48
2a10:3540::/29
2a10:3640::/29
2a10:6500::/29
2a10:7300::/29
2a10:7d00::/29
2a11:1200::/29
2a11:3f80::/29
2a12:ac44:1312::/48
2a12:dc00::/29
2a12:ecc3:2::/48
2a13:cc0::/29
2a13:18c0:22::/48
2a13:1940::/29
2a13:8c82:1::/48
2a13:9281:100::/48
2a13:9580::/29
2a13:c900:fd1a::/48
2a13:e107:99::/48
Signature Algorithm: sha256WithRSAEncryption
53:a3:46:f0:7e:3b:d7:55:71:f9:20:de:f1:9b:1d:f5:f3:5f:
d8:77:ae:e1:d3:7e:21:c8:6c:64:f7:6c:13:8a:4b:c6:96:8c:
9f:f3:2c:d7:32:76:2c:17:b8:ce:5a:d0:32:19:84:a7:13:10:
a4:ba:87:33:36:41:1e:34:bf:ac:78:e3:16:cd:53:13:78:94:
ba:75:85:8c:0c:34:fc:39:67:ea:e8:a8:cb:a2:6c:7b:d5:43:
07:c1:05:27:58:5c:23:3d:45:09:a4:8f:19:4e:ac:14:b5:ec:
3f:b3:ab:47:95:7f:cb:8f:b3:67:ea:84:a4:7a:2c:e0:f9:bb:
76:4b:bf:10:d0:a0:12:06:3b:09:cb:18:bf:cb:70:b7:75:d1:
e8:5a:d9:74:4e:3a:d8:7a:c6:4e:13:e6:0a:36:be:a9:fc:02:
37:2f:87:ac:70:ab:d2:28:4b:47:4a:ba:bc:5f:5d:8e:dd:c3:
3d:af:da:06:ff:34:44:87:f7:b1:fe:88:a3:66:b9:a7:44:0b:
76:0a:bf:57:b7:e3:34:fc:f6:44:9e:73:c2:f6:a4:2f:cb:df:
8f:50:f5:7c:7e:5e:5d:85:2e:03:d2:60:6c:b2:5c:1f:e4:6e:
04:f7:d9:1a:6b:d7:95:c4:d7:8e:54:92:a5:99:2d:aa:92:91:
44:84:e5:a6
-----BEGIN CERTIFICATE-----
MIIGlDCCBXygAwIBAgISAZ/0iMZMeLkBzO3cyCzvlUh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODEyMDU1MzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjAxMzk1ZmU1OTNiZGU3MjI0MGVmYzM5ZmZlNTQ1MDdlMTU3MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ADnslTAgCkloCGRfGMBUFOVPCP/
P9wFCdCFgZSC2b0IQj+AP/o8cdY4zRMzxmGHHMszG5IUjUda5oU2dtyUIzEAAywq
+75QyakIIm7gXwjHdKW9dq0nJ76iaifc16Q2HtHnWBYIBUNw3AjPbq84WmInMXMq
XWAj7P27kce2hoETyaNuVWXowEeRJ+n9FtrRF4yVc9d1XOLbG6PKkkZtBSo3iGAf
coUM/VzHXXTDh+HubvcTBzPWNIp4xT+OAyqcrkwBzWoiXKbAJElaZTXTx0VHFKQK
Iht84sAbHZAuQA6nWI4DcFRJNGhBMaCTvnrVt9WHaYz7GAGVylw+zUAmpQIDAQAB
o4IDoDCCA5wwHQYDVR0OBBYEFAIBOV/lk73nIkDvw5/+VFB+FXLAMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQWdFNVgtV1R2ZWNpUU9fRG5fNVVVSDRWY3NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBtAYIKwYBBQUHAQcBAf8EggGjMIIBnzCCAZsEAgACMIIB
kwMHACoGEYEAAgMHACoJF8AAIgMHACoJF8cAEAMHACoKLQcAmgMHACoMeIYAIgMF
AyoNEUADBwAqDhXAAAQDBwAqDhqAExIDBQMqDiJAAwcAKg7HhQJzAwUDKg7pgAMF
AyoO9QADBwAqDvYEABADBwAqDxIAAAIDBwAqDxWHAQADBQMqDxbAAwcAKg8ehAA/
AwcAKg8ehgEAAwUDKg8tQAMHACoPMEf8HQMFAyoPOUADBwAqDz2GAHcDBwAqD30G
nIoDBwAqD7wAAQADBwAqD99F/HgDBwAqD99HAgADBwAqD+ICAFUDBQMqD+ZAAwcA
Kg/mxlUyAwcAKg/nxfj5AwcAKg/oRwB3AwUDKhA1QAMFAyoQNkADBQMqEGUAAwUD
KhBzAAMFAyoQfQADBQMqERIAAwUDKhE/gAMHACoSrEQTEgMFAyoS3AADBwAqEuzD
AAIDBQMqEwzAAwcAKhMYwAAiAwUDKhMZQAMHACoTjIIAAQMHACoTkoEBAAMFAyoT
lYADBwAqE8kA/RoDBwAqE+EHAJkwDQYJKoZIhvcNAQELBQADggEBAFOjRvB+O9dV
cfkg3vGbHfXzX9h3ruHTfiHIbGT3bBOKS8aWjJ/zLNcydiwXuM5a0DIZhKcTEKS6
hzM2QR40v6x44xbNUxN4lLp1hYwMNPw5Z+roqMuibHvVQwfBBSdYXCM9RQmkjxlO
rBS17D+zq0eVf8uPs2fqhKR6LOD5u3ZLvxDQoBIGOwnLGL/LcLd10eha2XROOth6
xk4T5go2vqn8Ajcvh6xwq9IoS0dKurxfXY7dwz2v2gb/NESH97H+iKNmuadEC3YK
v1e34zT89kSec8L2pC/L349Q9Xx+Xl2FLgPSYGyyXB/kbgT32Rpr15XE145UkqWZ
LaqSkUSE5aY=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:50 2026 by rpki-client