Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E9LKpe3ZC-FISgB1Lmp6dEjyut4.roa
File: E9LKpe3ZC-FISgB1Lmp6dEjyut4.roa (raw, json)
Hash identifier: B35ftBL2ExGjjpRxhV2QCmqQweP65YvXP7N78NK0sTI=
Subject key identifier: 13:D2:CA:A5:ED:D9:0B:E1:48:4A:00:75:2E:6A:7A:74:48:F2:BA:DE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CBD451636E9E4BFB69148D104890C0B1F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E9LKpe3ZC-FISgB1Lmp6dEjyut4.roa
Signing time: Thu 05 Mar 2026 09:12:27 +0000
ROA not before: Thu 05 Mar 2026 09:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:1180:36af::/48 maxlen: 48
2a0a:2d07:24::/48 maxlen: 48
2a0a:2d07:cc::/48 maxlen: 48
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:df45:25b::/48 maxlen: 48
2a12:ecc0:22::/48 maxlen: 48
2a13:18c6:c9a1::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:45:16:36:e9:e4:bf:b6:91:48:d1:04:89:0c:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 5 09:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13d2caa5edd90be1484a00752e6a7a7448f2bade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:fc:ca:89:85:07:ca:eb:c7:c6:54:89:69:
67:30:bb:dd:ee:52:d9:4f:97:12:78:94:17:b1:a8:
cc:82:6d:25:35:7c:84:ee:37:f0:6c:a7:14:a0:52:
de:1b:20:1a:77:1d:71:67:5c:b6:ba:bd:a3:83:b0:
da:fe:d3:5d:43:66:4d:d3:30:c9:aa:1c:03:9b:fb:
6b:7c:2f:d0:a5:4f:26:eb:cc:bb:2f:35:a1:86:e1:
0a:81:ee:b7:4e:43:a0:7f:f5:1f:e1:ee:a7:78:7c:
c9:63:4e:ce:f8:18:57:62:a2:b7:21:33:85:b8:0a:
fe:e9:b4:54:a6:7a:13:93:e8:f5:5a:54:fc:6e:bd:
c1:da:f2:62:97:16:92:44:ad:da:85:e0:0e:bc:c8:
29:16:a9:e7:12:53:cc:08:20:74:e0:bf:39:4f:2e:
df:4b:14:ee:f1:4e:47:07:b5:ff:ff:af:b1:02:81:
3b:3a:ea:b7:66:dd:0e:4d:05:bd:47:cc:2f:16:69:
6a:f3:69:36:33:b3:de:cb:76:1d:95:f0:28:10:a2:
63:db:8b:dc:44:cd:d2:cd:c4:ad:f0:65:d6:c1:df:
af:7d:fd:41:e8:47:5d:a1:b0:ec:60:db:41:c3:32:
35:8a:a5:4d:bd:3b:7f:28:2f:72:e4:ce:c9:e5:5d:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:CA:A5:ED:D9:0B:E1:48:4A:00:75:2E:6A:7A:74:48:F2:BA:DE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E9LKpe3ZC-FISgB1Lmp6dEjyut4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:36af::/48
2a0a:2d07:24::/48
2a0a:2d07:cc::/48
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:df45:25b::/48
2a12:ecc0:22::/48
2a13:18c6:c9a1::/48
2a13:c900:66::/48
Signature Algorithm: sha256WithRSAEncryption
ad:d9:28:17:d5:ad:0d:31:b2:bc:6a:8e:73:ff:a2:46:ee:d9:
c3:64:6a:fe:86:ca:0b:6a:d8:9b:6e:52:ef:00:7c:30:99:56:
c5:e9:4d:d4:18:d7:87:26:2c:c4:38:5b:50:a1:7e:f9:c5:53:
45:64:d6:50:cf:7f:8f:18:da:a3:31:16:9a:e8:21:5a:12:03:
e1:83:99:a1:df:57:c4:5b:10:02:24:c8:3d:f4:4e:11:92:66:
9c:94:64:31:57:0d:50:96:74:b2:11:41:b0:57:4b:5b:0b:85:
a0:39:56:b5:34:31:3b:79:e6:4f:e8:27:96:6c:6d:6d:c7:37:
d1:13:82:59:16:e8:02:0d:df:1f:6b:1f:a7:8b:40:93:c3:2c:
39:ee:e0:73:a3:09:37:be:a1:9c:6b:d8:6f:81:cb:39:64:f6:
e4:41:4b:fa:38:64:55:5a:dd:73:34:1a:60:52:80:b1:08:28:
08:e0:9a:f8:31:d7:0e:8b:a6:4c:5f:c6:22:fd:7f:9d:b5:61:
9d:74:59:f0:01:27:4b:c6:9b:e5:02:6e:ae:43:f0:d9:e5:39:
8c:47:0b:95:67:3a:98:d9:75:a9:bf:9a:ce:62:02:9b:1e:52:
35:9d:1c:41:57:9a:b8:4f:c4:c7:57:af:ff:97:5d:72:6e:64:
69:43:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 19:07:14 2026 by rpki-client