Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H2nPUNGXYMgtK9oMUTL2Yh6uvCI.roa
File: H2nPUNGXYMgtK9oMUTL2Yh6uvCI.roa (raw, json)
Hash identifier: N84azr9TKmnDOuAjW7BTG2kE026HfNTCYXVVAZ0QHdU=
Subject key identifier: 1F:69:CF:50:D1:97:60:C8:2D:2B:DA:0C:51:32:F6:62:1E:AE:BC:22
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D056CCF814C961C898E863838C7EAA1E8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H2nPUNGXYMgtK9oMUTL2Yh6uvCI.roa
Signing time: Thu 19 Mar 2026 09:28:30 +0000
ROA not before: Thu 19 Mar 2026 09:28:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213200
IP address blocks: 2a10:4a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:6c:cf:81:4c:96:1c:89:8e:86:38:38:c7:ea:a1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 19 09:28:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f69cf50d19760c82d2bda0c5132f6621eaebc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:f6:00:10:f5:9b:61:04:dc:75:26:4a:27:
82:16:3c:cd:d9:c7:d4:b7:f3:7d:1d:e1:d3:6c:49:
c5:ac:23:5b:bf:fc:7a:78:85:16:c2:04:41:f4:2a:
5c:d6:eb:97:07:0c:59:e3:49:a3:01:bd:0f:5c:2e:
c8:7f:f1:fd:bf:2d:ef:02:84:4e:1d:03:f6:db:12:
df:dd:7e:cb:f8:89:96:b9:72:f9:f2:b3:a4:47:10:
e8:f2:9f:b0:28:c8:ca:77:31:95:07:1f:23:92:dc:
c8:62:f1:e4:b6:3b:08:f2:f6:4b:44:ae:24:cb:46:
4a:0b:2b:55:08:90:b0:06:ae:0a:7b:58:8c:dc:3c:
b7:5a:02:b3:ed:e2:f6:5d:81:40:b6:65:8c:dd:41:
3e:0e:2a:4f:46:b3:e0:2b:14:23:1a:ff:cf:4a:8b:
05:30:fc:81:1f:a1:6b:f6:bd:be:ff:5e:07:bd:b2:
da:d6:ea:7a:5b:ca:43:f8:0b:4b:8f:e2:6d:7e:83:
d7:b5:ed:5f:f6:ee:63:c9:aa:fa:e0:9c:f8:bc:52:
87:49:3f:99:64:d0:25:e8:48:ad:5d:ec:b6:bb:54:
5d:0a:fc:60:b1:54:98:25:6a:02:d5:f0:f7:6b:94:
db:98:41:38:40:f4:79:66:07:06:38:0a:be:30:3b:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:CF:50:D1:97:60:C8:2D:2B:DA:0C:51:32:F6:62:1E:AE:BC:22
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H2nPUNGXYMgtK9oMUTL2Yh6uvCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4a00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:e1:e1:d7:75:2c:3d:32:be:16:15:dc:63:32:93:c7:80:02:
0a:a0:f8:ec:5d:48:97:3c:28:27:b7:46:29:bc:89:87:15:88:
f7:fa:14:05:54:43:9e:84:88:6a:5b:a7:68:5b:40:e5:e3:4b:
96:dc:cb:a9:df:6d:b0:c1:55:2a:84:5a:5a:68:1f:f5:88:54:
6d:ec:86:d5:7b:fc:56:19:5d:ca:63:3e:54:08:a3:1a:85:8f:
55:7e:ac:69:a1:0a:6e:b3:ff:c3:3e:73:e1:25:66:73:c1:f7:
05:60:1a:db:89:5e:52:c1:76:02:b1:11:75:7e:86:dd:f8:70:
b9:c2:4e:13:03:5b:fd:d6:75:3b:44:bc:a7:97:62:53:8d:9a:
0f:22:05:aa:08:06:ae:6f:a4:9c:d7:94:c2:55:2c:b1:2c:ed:
45:73:85:a5:47:1f:b4:ef:ad:c4:28:5a:93:31:e6:42:81:38:
0b:e5:8e:06:4c:ef:6f:77:39:37:60:35:ba:c9:85:d4:bb:1b:
5e:69:b3:92:d1:00:ad:47:46:bd:72:88:02:c7:13:61:23:eb:
0b:9c:3f:86:f7:21:3e:1b:91:ac:b1:d3:5a:ef:47:e7:d2:c0:
2f:60:cd:c7:05:f8:25:bf:3b:f0:7a:e9:9f:ec:42:bb:18:a0:
35:ba:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:13:02 2026 by rpki-client