Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HTcGuQ3Aq_GUr8NlFAjh282uceI.roa
File: HTcGuQ3Aq_GUr8NlFAjh282uceI.roa (raw, json)
Hash identifier: POBkrO2gl9712CDi7kkAKOowpPZ8igT1pTGizKm0rxk=
Subject key identifier: 1D:37:06:B9:0D:C0:AB:F1:94:AF:C3:65:14:08:E1:DB:CD:AE:71:E2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0688C5046EAA0FED16C430D3FE52A0EAD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HTcGuQ3Aq_GUr8NlFAjh282uceI.roa
Signing time: Thu 03 Sep 2026 18:33:40 +0000
ROA not before: Thu 03 Sep 2026 18:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 2a0f:3043::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:8c:50:46:ea:a0:fe:d1:6c:43:0d:3f:e5:2a:0e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 3 18:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d3706b90dc0abf194afc3651408e1dbcdae71e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:30:bf:ba:8f:2f:db:fb:96:07:21:35:2d:
b3:76:c5:ea:4e:df:d9:f5:b3:2e:f0:f7:44:06:6b:
9f:6e:71:a8:bf:1f:07:b8:37:25:38:a5:90:22:6b:
d8:b1:57:31:86:94:3c:9e:e5:d2:eb:af:13:18:c7:
d6:28:dc:36:3b:b7:5d:bc:37:26:09:28:01:cd:48:
12:df:f0:40:2f:ba:43:03:e4:d4:e7:6f:cd:ae:19:
2f:5d:dc:b4:70:40:75:68:43:4c:9e:a9:2a:ae:5d:
77:05:fa:87:18:be:3b:c6:66:07:c2:64:f1:8e:96:
46:06:15:b6:45:27:aa:e8:78:8a:71:ad:29:79:e7:
8f:21:9a:be:bb:36:61:5c:94:de:4e:88:c4:2e:58:
cf:eb:fd:b6:34:40:78:0d:c3:dc:d7:40:44:fe:ac:
eb:63:27:70:6f:7c:9c:34:d4:a1:19:ab:f8:7d:d0:
67:2e:ca:f2:c8:92:b6:90:cc:20:89:47:ce:4f:d8:
53:fc:f1:fa:e6:77:fd:ba:e0:76:46:96:30:fc:05:
10:aa:aa:db:dc:76:ef:ca:7b:f2:c8:7b:b1:bb:0b:
13:6d:73:ac:70:88:aa:e3:8d:02:dc:2f:9e:f4:9b:
b4:06:de:ce:98:13:9d:15:37:a3:da:d7:e3:4a:7e:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:37:06:B9:0D:C0:AB:F1:94:AF:C3:65:14:08:E1:DB:CD:AE:71:E2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HTcGuQ3Aq_GUr8NlFAjh282uceI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3043::/32
Signature Algorithm: sha256WithRSAEncryption
0f:1e:ea:d3:2c:50:2e:98:06:b3:7d:59:cf:5b:6c:53:42:c8:
57:25:61:f3:59:57:14:e9:a1:8b:79:20:f4:d1:55:86:06:f4:
3f:32:57:ae:fc:e6:d6:45:55:dc:05:46:38:7c:ef:a7:8f:f7:
eb:db:50:f7:49:e6:00:e0:a3:68:02:63:91:6f:ad:88:12:71:
f6:12:a2:e9:2d:48:e0:2e:d3:6a:05:6b:7d:f6:ff:05:3b:7d:
79:18:68:60:99:15:14:2e:7b:c7:2f:68:91:28:6a:40:8a:e9:
b7:9f:54:09:6f:ca:d5:aa:16:7f:b7:dc:6a:80:b7:ad:49:38:
d7:d6:d9:63:11:6b:b6:c7:46:fe:eb:53:b5:7a:a7:25:0d:84:
d7:36:c0:f0:27:e3:94:cd:62:e7:38:ff:c2:01:4a:b2:e2:71:
52:8e:ea:5c:06:1d:a1:b3:ca:9e:a8:5a:2f:f1:71:9a:09:7a:
13:c3:2d:00:ca:5f:0d:68:17:ba:c4:29:08:0e:e6:5d:a5:cd:
bb:fe:55:fa:a8:04:a7:f4:b8:6a:6b:4d:e3:60:1f:0f:10:84:
55:0c:06:4a:b0:ae:28:88:38:5d:35:6a:40:2a:5b:d5:9b:15:
41:87:dc:c5:48:34:42:38:4a:96:6c:73:3c:13:8c:1c:23:91:
8e:d8:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:57 2026 by rpki-client