Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/F69YeOGnUnl56hIP5CVwxqaE6dY.roa
File: F69YeOGnUnl56hIP5CVwxqaE6dY.roa (raw, json)
Hash identifier: TmFpd8naizPTzsHGyGWh2SFb0Ja+u2XCWmh4Hb7koSc=
Subject key identifier: 17:AF:58:78:E1:A7:52:79:79:EA:12:0F:E4:25:70:C6:A6:84:E9:D6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1110C61B4BC6FA22E9E016B4CB33B64E9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/F69YeOGnUnl56hIP5CVwxqaE6dY.roa
Signing time: Tue 06 Oct 2026 11:49:46 +0000
ROA not before: Tue 06 Oct 2026 11:49:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219329
IP address blocks: 2a05:35c0:10::/48 maxlen: 48
2a06:1185:10::/48 maxlen: 48
2a06:35c3:200::/48 maxlen: 48
2a09:17c1:9e::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0c:7886:95af::/48 maxlen: 48
2a0e:15c7:89::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c785:2::/48 maxlen: 48
2a0e:f200:144::/48 maxlen: 48
2a0e:f500::/29 maxlen: 29
2a0e:f600:29::/48 maxlen: 48
2a0f:1206:1896::/48 maxlen: 48
2a0f:1584:7::/48 maxlen: 48
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:2700:1::/48 maxlen: 48
2a0f:2d80:1000::/48 maxlen: 48
2a0f:3046:179::/48 maxlen: 48
2a0f:31c3:200::/48 maxlen: 48
2a0f:3d80:49ff::/48 maxlen: 48
2a0f:bc04:1000::/48 maxlen: 48
2a0f:df45:25b::/48 maxlen: 48
2a0f:e1c0:8512::/48 maxlen: 48
2a0f:e200:5641::/48 maxlen: 48
2a0f:e640::/29 maxlen: 29
2a0f:e6c6:bf88::/48 maxlen: 48
2a0f:e7c5:98bc::/48 maxlen: 48
2a0f:e844:ffff::/48 maxlen: 48
2a0f:ea44:8691::/48 maxlen: 48
2a10:67c2:2::/48 maxlen: 48
2a12:ac44:b5a9::/48 maxlen: 48
2a12:ecc0:9213::/48 maxlen: 48
2a13:18c6:5584::/48 maxlen: 48
2a13:8c86:359::/48 maxlen: 48
2a13:9281:200::/48 maxlen: 48
2a13:c900:9876::/48 maxlen: 48
2a13:e102:d9a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:0c:61:b4:bc:6f:a2:2e:9e:01:6b:4c:b3:3b:64:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 6 11:49:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17af5878e1a7527979ea120fe42570c6a684e9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:bd:ba:b4:76:1d:7d:5d:37:e4:54:27:a0:
fc:f9:84:61:7a:0b:90:33:cb:be:27:36:ba:39:39:
00:6f:23:e7:a1:68:ab:29:fd:09:c2:bf:20:1f:47:
2f:6a:5d:7b:e0:02:7b:cc:3c:f4:02:a2:60:d6:80:
28:6e:22:cd:b6:13:1d:c0:d8:9b:97:ed:5e:74:f7:
04:e9:7e:5f:5d:88:98:4b:9d:a3:97:75:fe:ad:03:
f9:df:af:4e:67:04:9f:fa:49:e8:bf:03:17:9d:a9:
e4:1f:da:57:46:12:64:d7:93:68:68:cc:5e:63:24:
39:55:27:f6:bd:84:f5:68:70:6f:d1:0e:06:cf:26:
d5:6d:39:9d:3b:98:dd:00:9e:8a:32:58:4d:17:40:
db:e1:f3:27:73:f8:5c:07:4b:16:35:13:0f:82:df:
54:76:6a:45:60:b7:a8:e3:ae:37:70:89:2f:9a:1e:
2a:af:c3:ef:31:39:55:97:39:18:75:9c:89:24:f6:
a4:1e:79:e9:91:e9:0c:05:bf:db:7e:00:f7:16:c2:
5a:ff:de:19:20:ce:1f:a8:31:20:82:67:79:64:e1:
ae:82:07:fb:38:58:46:73:0c:55:c8:68:2a:ff:b7:
22:64:dc:35:6b:6a:dc:cf:8d:66:83:f8:b7:18:c1:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AF:58:78:E1:A7:52:79:79:EA:12:0F:E4:25:70:C6:A6:84:E9:D6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/F69YeOGnUnl56hIP5CVwxqaE6dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:35c0:10::/48
2a06:1185:10::/48
2a06:35c3:200::/48
2a09:17c1:9e::/48
2a0a:2d00:1::/48
2a0c:7886:95af::/48
2a0e:15c7:89::/48
2a0e:1a80:2541::/48
2a0e:c785:2::/48
2a0e:f200:144::/48
2a0e:f500::/29
2a0e:f600:29::/48
2a0f:1206:1896::/48
2a0f:1584:7::/48
2a0f:1e80:d9a8::/48
2a0f:2700:1::/48
2a0f:2d80:1000::/48
2a0f:3046:179::/48
2a0f:31c3:200::/48
2a0f:3d80:49ff::/48
2a0f:bc04:1000::/48
2a0f:df45:25b::/48
2a0f:e1c0:8512::/48
2a0f:e200:5641::/48
2a0f:e640::/29
2a0f:e6c6:bf88::/48
2a0f:e7c5:98bc::/48
2a0f:e844:ffff::/48
2a0f:ea44:8691::/48
2a10:67c2:2::/48
2a12:ac44:b5a9::/48
2a12:ecc0:9213::/48
2a13:18c6:5584::/48
2a13:8c86:359::/48
2a13:9281:200::/48
2a13:c900:9876::/48
2a13:e102:d9a1::/48
Signature Algorithm: sha256WithRSAEncryption
0d:d6:66:d6:a2:3c:59:fe:b2:e7:ac:81:54:ba:00:04:fe:bf:
1b:f7:cc:72:f5:42:99:1f:9f:d5:8c:27:81:30:52:42:3f:b1:
bf:d2:d2:e3:12:dd:ad:24:5b:d7:75:29:f1:fd:54:15:cd:fe:
eb:f2:14:1d:75:db:14:de:03:06:70:6b:25:53:d7:a6:15:fb:
64:c7:96:a4:81:a1:c5:d7:47:99:da:31:a9:ce:be:5a:3f:c2:
e1:f9:ec:ef:28:fb:1e:d7:d3:56:af:e5:aa:71:85:0c:40:e9:
08:67:21:34:ce:f3:b1:ef:9f:8b:ac:6e:d6:1a:dd:92:8e:35:
ab:0a:66:d5:4b:98:c1:f1:a7:af:04:8e:bd:fe:2d:7a:31:94:
3a:09:2b:68:27:63:dd:ba:f0:00:e8:39:48:56:ad:b2:ac:5b:
bc:39:7b:36:b2:cb:b2:01:1d:a3:b2:51:b3:72:42:2a:3c:90:
9a:28:36:62:2d:22:79:ba:2d:2f:07:c6:08:77:22:ac:2c:65:
b7:76:04:eb:17:e7:cd:94:de:02:d5:25:f9:b2:33:cf:3a:ad:
8f:6c:da:22:e2:09:5c:18:a7:1b:1c:b1:06:9f:4f:13:30:49:
aa:20:e5:61:ed:45:7b:cb:46:95:36:0c:d2:ae:ae:2c:6a:0c:
9c:84:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:39 2026 by rpki-client