Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CDRpRDY4n-r7y1jG8xkqvsWzY8Y.roa
File: CDRpRDY4n-r7y1jG8xkqvsWzY8Y.roa (raw, json)
Hash identifier: Zo9tCkoGtEgV8xV6t6LR97BMXv9l7lE+bdpB3SnkxV4=
Subject key identifier: 08:34:69:44:36:38:9F:EA:FB:CB:58:C6:F3:19:2A:BE:C5:B3:63:C6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A01E350E7F611BCB1E55653B47A06ACADB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CDRpRDY4n-r7y1jG8xkqvsWzY8Y.roa
Signing time: Thu 20 Aug 2026 08:06:28 +0000
ROA not before: Thu 20 Aug 2026 08:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219329
IP address blocks: 2a05:35c0:10::/48 maxlen: 48
2a06:1185:10::/48 maxlen: 48
2a06:35c3:200::/48 maxlen: 48
2a09:17c1:9e::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0c:7886:95af::/48 maxlen: 48
2a0e:15c7:89::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c785:2::/48 maxlen: 48
2a0e:f200:144::/48 maxlen: 48
2a0e:f600:29::/48 maxlen: 48
2a0f:1206:1896::/48 maxlen: 48
2a0f:1584:7::/48 maxlen: 48
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:2700:1::/48 maxlen: 48
2a0f:2d80:1000::/48 maxlen: 48
2a0f:3046:179::/48 maxlen: 48
2a0f:31c3:200::/48 maxlen: 48
2a0f:3d80:49ff::/48 maxlen: 48
2a0f:bc04:1000::/48 maxlen: 48
2a0f:df45:25b::/48 maxlen: 48
2a0f:e1c0:8512::/48 maxlen: 48
2a0f:e200:5641::/48 maxlen: 48
2a0f:e6c6:bf88::/48 maxlen: 48
2a0f:e7c5:98bc::/48 maxlen: 48
2a0f:e844:ffff::/48 maxlen: 48
2a0f:ea44:8691::/48 maxlen: 48
2a10:67c2:2::/48 maxlen: 48
2a12:ac44:b5a9::/48 maxlen: 48
2a12:ecc0:9213::/48 maxlen: 48
2a13:18c6:5584::/48 maxlen: 48
2a13:8c86:359::/48 maxlen: 48
2a13:9281:200::/48 maxlen: 48
2a13:c900:9876::/48 maxlen: 48
2a13:e102:d9a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:35:0e:7f:61:1b:cb:1e:55:65:3b:47:a0:6a:ca:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 20 08:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0834694436389feafbcb58c6f3192abec5b363c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c6:47:af:7f:63:bd:79:a4:c9:88:21:b1:71:
ed:05:5e:c3:d0:a3:6a:c3:00:f9:04:50:e7:d5:79:
6c:44:6c:ca:d5:61:90:11:1c:98:01:50:25:bd:95:
57:65:ad:fa:8f:2f:2f:f0:63:e5:35:e6:30:b4:fd:
4b:96:f3:b2:8f:c1:a9:4c:7b:cb:c5:1f:0a:d5:3c:
45:2b:35:d5:df:09:00:0c:5b:d5:ba:3b:11:90:02:
66:0b:d8:9c:24:c3:7d:44:1c:03:07:f3:e4:b5:f7:
14:28:2b:6c:01:c0:ab:f2:fb:df:3a:14:df:69:f7:
4b:be:16:97:f3:d1:68:ff:69:d8:ec:c8:e2:49:5f:
de:57:27:f7:a1:74:8c:e1:29:61:66:47:11:9f:6b:
15:9a:07:e9:08:29:80:34:90:83:e2:d9:24:48:7c:
ae:ed:82:1f:93:17:6c:e6:80:93:d7:73:4a:bc:12:
63:cc:45:9f:f4:f5:cd:cc:64:4f:ab:6c:be:b3:d7:
39:ad:1f:6b:3c:90:84:b3:e6:9b:7d:97:34:74:ac:
39:9b:a6:9d:2f:b3:ae:f3:1a:96:fc:f6:91:18:37:
19:fe:c0:9b:26:cf:a0:ec:40:4e:e7:e9:86:ae:e4:
03:de:b3:9c:9a:5f:a8:ee:cd:0d:1a:f7:f8:67:d8:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:69:44:36:38:9F:EA:FB:CB:58:C6:F3:19:2A:BE:C5:B3:63:C6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CDRpRDY4n-r7y1jG8xkqvsWzY8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:35c0:10::/48
2a06:1185:10::/48
2a06:35c3:200::/48
2a09:17c1:9e::/48
2a0a:2d00:1::/48
2a0c:7886:95af::/48
2a0e:15c7:89::/48
2a0e:1a80:2541::/48
2a0e:c785:2::/48
2a0e:f200:144::/48
2a0e:f600:29::/48
2a0f:1206:1896::/48
2a0f:1584:7::/48
2a0f:1e80:d9a8::/48
2a0f:2700:1::/48
2a0f:2d80:1000::/48
2a0f:3046:179::/48
2a0f:31c3:200::/48
2a0f:3d80:49ff::/48
2a0f:bc04:1000::/48
2a0f:df45:25b::/48
2a0f:e1c0:8512::/48
2a0f:e200:5641::/48
2a0f:e6c6:bf88::/48
2a0f:e7c5:98bc::/48
2a0f:e844:ffff::/48
2a0f:ea44:8691::/48
2a10:67c2:2::/48
2a12:ac44:b5a9::/48
2a12:ecc0:9213::/48
2a13:18c6:5584::/48
2a13:8c86:359::/48
2a13:9281:200::/48
2a13:c900:9876::/48
2a13:e102:d9a1::/48
Signature Algorithm: sha256WithRSAEncryption
2f:82:5b:99:4a:7a:34:d4:fa:bc:63:8c:4d:71:ad:49:68:fb:
54:06:c2:20:b7:9d:e8:95:9d:14:cf:8e:68:0a:53:78:1e:42:
6e:92:36:cc:08:a3:ff:92:e6:6c:90:ac:90:7e:fb:49:5e:86:
d9:c2:09:8a:7f:cb:f2:07:5a:c3:87:68:53:12:63:21:fd:da:
60:af:99:32:ff:04:e3:99:e3:4f:98:61:fd:12:ad:a2:57:df:
64:cc:2a:5e:72:ad:21:69:db:80:c3:8d:91:f8:79:e2:95:85:
1d:b6:8d:79:49:4a:c5:2e:5c:03:d7:f3:b5:9d:21:8e:28:a1:
9d:f2:98:c2:76:8d:91:a6:5a:9c:29:0a:0e:e4:0a:80:dc:86:
f7:b0:53:91:f9:d7:96:94:28:e5:7f:bf:a4:7d:b9:e9:45:fa:
71:cf:c1:14:8c:be:e3:e4:d3:45:9d:8d:53:08:97:b8:ce:27:
bc:88:79:26:5f:34:74:e7:8e:5b:4a:2b:6d:01:cd:d2:b6:8a:
30:ab:07:f1:0c:0e:42:c0:cc:d2:ba:b5:aa:af:23:9a:e8:9e:
8b:ba:2b:7e:2f:31:ee:4d:ad:c5:ad:52:b0:85:2f:5a:80:6d:
10:c0:c7:49:94:1f:53:b0:2c:27:fd:9f:d9:24:10:41:26:d0:
e4:f9:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:12:37 2026 by rpki-client