Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hg2fFNLQzV8jrDZGxT1e7e8Vm5U.roa
File: Hg2fFNLQzV8jrDZGxT1e7e8Vm5U.roa (raw, json)
Hash identifier: MDvsMe/8cZCF+EeXf8LN+JihRVA0alDhYT0jt8fHoj0=
Subject key identifier: 1E:0D:9F:14:D2:D0:CD:5F:23:AC:36:46:C5:3D:5E:ED:EF:15:9B:95
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DB54CF4BAF44948010E775899F5C5D65C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hg2fFNLQzV8jrDZGxT1e7e8Vm5U.roa
Signing time: Wed 22 Apr 2026 13:06:52 +0000
ROA not before: Wed 22 Apr 2026 13:06:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 2a06:a600::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a09:17c3::/32 maxlen: 32
2a0c:d380::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0e:15c6::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0e:f207::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d86:11::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a0f:e7c1::/32 maxlen: 32
2a0f:ee00::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a13:d44::/32 maxlen: 32
2a13:2bc0::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:4c:f4:ba:f4:49:48:01:0e:77:58:99:f5:c5:d6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 22 13:06:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e0d9f14d2d0cd5f23ac3646c53d5eedef159b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9d:1f:ad:72:e6:d5:55:3a:14:94:6a:37:77:
6d:cc:0f:da:da:61:73:e9:43:f6:e2:c9:46:a3:39:
b7:86:4c:89:34:01:73:3d:b3:8c:88:d7:17:8b:fd:
f0:8b:53:d9:82:5b:62:79:47:bd:88:72:e2:a4:6c:
38:39:02:b2:61:aa:e9:9b:89:1f:36:12:32:a6:ab:
88:95:35:d4:59:d4:90:87:16:8a:23:5e:6c:26:b7:
f9:28:91:a6:ea:99:11:15:b9:66:5a:61:aa:1d:64:
76:14:91:3d:a6:6b:cb:f5:5b:7d:ee:4e:d2:1d:61:
62:b5:9a:61:a5:0f:d1:78:01:6a:db:92:22:29:ed:
21:83:28:7a:87:d2:bc:b0:91:11:67:87:b5:15:50:
8d:a4:6f:47:a8:04:38:68:5d:a4:4b:ad:12:af:a9:
60:e9:f0:37:26:e9:c8:ce:cc:66:ba:77:e5:f9:e7:
15:a0:20:89:42:22:20:b7:a5:f8:a5:a7:e1:06:78:
b0:62:db:27:29:33:16:ae:8d:15:a2:8b:d7:17:2f:
2a:db:ac:a4:b5:7b:c8:07:87:f0:59:41:e6:c6:90:
bd:3b:c6:b4:ef:23:9c:6e:99:5c:21:01:8b:de:02:
30:29:21:a0:56:c4:89:f9:53:51:67:74:3f:44:26:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0D:9F:14:D2:D0:CD:5F:23:AC:36:46:C5:3D:5E:ED:EF:15:9B:95
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hg2fFNLQzV8jrDZGxT1e7e8Vm5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a600::/29
2a06:bf40::/29
2a07:95c0::/29
2a09:17c3::/32
2a0c:d380::/29
2a0d:8f80::/29
2a0e:15c6::/32
2a0e:2440::/29
2a0e:f207::/32
2a0f:3d83::/32
2a0f:3d86:11::/48
2a0f:7d01::/32
2a0f:e7c1::/32
2a0f:ee00::/29
2a10:3140::/29
2a11:4e80::/29
2a12:d100::/29
2a13:d44::/32
2a13:2bc0::/29
2a13:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
b5:46:36:17:3c:6a:4a:16:c2:fb:5a:6e:2c:bc:52:ff:34:c1:
4c:7f:ca:eb:85:ed:58:b2:8a:ad:12:61:b7:c7:4f:3a:97:a8:
af:92:0c:87:4b:e0:31:cb:27:db:83:a8:d6:39:22:94:3d:3d:
a5:00:03:d4:41:11:2d:29:53:74:36:d0:3d:20:35:6a:33:7d:
dc:e9:83:f6:44:72:6e:c5:b2:e3:8e:8d:52:c2:cf:ef:a5:bf:
b2:7f:00:e9:aa:f6:76:1b:61:6e:df:03:55:44:42:b4:de:7f:
4f:8c:d6:44:f9:35:51:79:64:a9:7e:f7:a5:7d:21:ca:79:9e:
8b:00:c0:22:58:4f:06:df:dc:78:83:b0:78:eb:56:f8:7b:24:
72:1b:e8:2a:6b:8a:ee:8e:76:87:2f:09:76:f9:98:38:88:9b:
31:b5:74:de:4a:13:11:c2:39:97:9e:be:7d:e7:ae:1d:bc:64:
25:fe:91:9a:ba:28:70:75:3f:df:95:69:b8:81:fe:d9:7e:f8:
fd:45:b7:ed:21:f9:d0:ed:b8:60:e6:36:7a:9f:0e:ac:87:10:
c3:02:fc:15:b3:1b:e6:2e:11:e9:90:dd:35:80:a0:24:56:8d:
1e:23:aa:75:19:9a:aa:10:79:4f:4d:3e:ad:c6:a5:82:ae:4c:
d0:e7:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:51 2026 by rpki-client