Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KDjfHNEi8W8jNGWVBGM4boik-UI.roa
File: KDjfHNEi8W8jNGWVBGM4boik-UI.roa (raw, json)
Hash identifier: o90oADijXboiLsXR9Di5ZXBcyixtpz9kd8fYUTGQhsw=
Subject key identifier: 28:38:DF:1C:D1:22:F1:6F:23:34:65:95:04:63:38:6E:88:A4:F9:42
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A032F406A586E6F0F1BDA7D6E55DCF9402
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KDjfHNEi8W8jNGWVBGM4boik-UI.roa
Signing time: Mon 24 Aug 2026 08:47:28 +0000
ROA not before: Mon 24 Aug 2026 08:47:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a05:b300::/29 maxlen: 32
2a06:1184:11::/48 maxlen: 48
2a06:35c3:100::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a09:17c1:4a::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0c:7882:2::/48 maxlen: 48
2a0d:1140::/29 maxlen: 29
2a0e:15c7:101::/48 maxlen: 48
2a0e:1a83:99::/48 maxlen: 48
2a0e:c786:122::/48 maxlen: 48
2a0e:c787:1000::/48 maxlen: 48
2a0e:e980::/29 maxlen: 29
2a0e:f600:2a::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1380::/29 maxlen: 32
2a0f:1584:6::/48 maxlen: 48
2a0f:18c0::/29 maxlen: 32
2a0f:1e80:1986::/48 maxlen: 48
2a0f:1fc0::/29 maxlen: 32
2a0f:3046:85::/48 maxlen: 48
2a0f:3047:fe48::/48 maxlen: 48
2a0f:36c0::/29 maxlen: 32
2a0f:3d80:1312::/48 maxlen: 48
2a0f:3e80::/29 maxlen: 29
2a0f:7d00:100::/48 maxlen: 48
2a0f:9b00::/29 maxlen: 32
2a0f:bc04:1004::/48 maxlen: 48
2a0f:da40::/29 maxlen: 32
2a0f:de40::/29 maxlen: 32
2a0f:e1c0:1312::/48 maxlen: 48
2a0f:e1c7:77::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e740::/29 maxlen: 32
2a0f:e7c7:b4::/48 maxlen: 48
2a0f:ea44:55::/48 maxlen: 48
2a0f:ea44:acab::/48 maxlen: 48
2a0f:ec00::/29 maxlen: 29
2a10:4e00::/29 maxlen: 32
2a10:5400::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:67c2:d6::/48 maxlen: 48
2a10:67c5:2::/48 maxlen: 48
2a10:6f00::/29 maxlen: 32
2a10:7300::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7700::/29 maxlen: 32
2a10:7d00::/29 maxlen: 29
2a11:1200::/29 maxlen: 29
2a11:6d40::/29 maxlen: 32
2a12:2c80::/29 maxlen: 32
2a12:ac46:77::/48 maxlen: 48
2a12:ac46:99::/48 maxlen: 48
2a12:dc00::/29 maxlen: 29
2a12:ecc0:11::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a13:cc0::/29 maxlen: 29
2a13:18c5:11::/48 maxlen: 48
2a13:18c6:101::/48 maxlen: 48
2a13:18c6:8512::/48 maxlen: 48
2a13:1940::/29 maxlen: 29
2a13:2c40::/29 maxlen: 32
2a13:3080::/29 maxlen: 29
2a13:8100::/29 maxlen: 32
2a13:8c86:88::/48 maxlen: 48
2a13:8c86:10a::/48 maxlen: 48
2a13:9180::/29 maxlen: 32
2a13:9285:100::/48 maxlen: 48
2a13:c900:120::/48 maxlen: 48
2a13:e100:323::/48 maxlen: 48
2a13:e102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:f4:06:a5:86:e6:f0:f1:bd:a7:d6:e5:5d:cf:94:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 24 08:47:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2838df1cd122f16f233465950463386e88a4f942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:37:bc:75:47:fe:5b:6e:ba:02:da:79:c0:
67:51:3d:e7:05:20:5e:59:4b:63:a9:15:d3:3f:2d:
1f:59:e9:4c:75:6f:e9:7f:7d:ce:42:09:43:c4:bb:
21:82:f9:e3:a6:a0:a7:fd:6e:bd:a8:24:84:a9:c4:
c0:63:39:43:f4:44:88:6b:b0:2d:14:5f:11:2b:b6:
97:82:39:6d:14:8e:88:9c:ec:cf:a6:66:37:17:ba:
c4:0b:cb:b7:27:cb:6e:3c:46:f8:aa:a1:17:c8:6f:
6f:b0:f8:4b:16:16:49:fd:a4:3b:1e:73:4e:28:68:
d7:80:24:a6:f8:cb:13:50:5c:4b:a2:ee:44:7d:bd:
18:d4:8a:df:30:01:17:19:da:d2:e7:e4:4a:f6:f6:
47:d4:ea:b4:8c:59:0d:e5:9c:53:bd:33:6d:41:62:
d7:43:d5:f8:6b:bb:8c:c4:3e:87:70:e4:d5:32:c2:
f6:ed:01:43:13:ef:31:f1:94:9f:82:1b:09:6d:4c:
88:38:d5:5e:f7:4e:59:e0:a0:83:e5:9d:5c:23:05:
52:1d:6c:ee:83:09:18:f5:04:0c:f6:2a:e0:dd:f4:
e0:55:a7:ac:bc:2e:af:fe:8b:77:af:e1:3c:64:9c:
95:d7:31:a5:6d:a2:57:ef:42:aa:e6:ca:03:dd:f3:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:38:DF:1C:D1:22:F1:6F:23:34:65:95:04:63:38:6E:88:A4:F9:42
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KDjfHNEi8W8jNGWVBGM4boik-UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:1184:11::/48
2a06:35c3:100::/48
2a07:f300::/29
2a09:17c1:4a::/48
2a0a:2d06:66::/48
2a0c:7882:2::/48
2a0d:1140::/29
2a0e:15c7:101::/48
2a0e:1a83:99::/48
2a0e:c786:122::/48
2a0e:c787:1000::/48
2a0e:e980::/29
2a0e:f600:2a::/48
2a0f:1206:66::/48
2a0f:1380::/29
2a0f:1584:6::/48
2a0f:18c0::/29
2a0f:1e80:1986::/48
2a0f:1fc0::/29
2a0f:3046:85::/48
2a0f:3047:fe48::/48
2a0f:36c0::/29
2a0f:3d80:1312::/48
2a0f:3e80::/29
2a0f:7d00:100::/48
2a0f:9b00::/29
2a0f:bc04:1004::/48
2a0f:da40::/29
2a0f:de40::/29
2a0f:e1c0:1312::/48
2a0f:e1c7:77::/48
2a0f:e207:fd38::/48
2a0f:e740::/29
2a0f:e7c7:b4::/48
2a0f:ea44:55::/48
2a0f:ea44:acab::/48
2a0f:ec00::/29
2a10:4e00::/29
2a10:5400::/29
2a10:6500::/29
2a10:67c2:d6::/48
2a10:67c5:2::/48
2a10:6f00::/29
2a10:7300::/29
2a10:7500::/29
2a10:7700::/29
2a10:7d00::/29
2a11:1200::/29
2a11:6d40::/29
2a12:2c80::/29
2a12:ac46:77::/48
2a12:ac46:99::/48
2a12:dc00::/29
2a12:ecc0:11::/48
2a12:ecc0:3e2::/48
2a13:cc0::/29
2a13:18c5:11::/48
2a13:18c6:101::/48
2a13:18c6:8512::/48
2a13:1940::/29
2a13:2c40::/29
2a13:3080::/29
2a13:8100::/29
2a13:8c86:88::/48
2a13:8c86:10a::/48
2a13:9180::/29
2a13:9285:100::/48
2a13:c900:120::/48
2a13:e100:323::/48
2a13:e102:1::/48
Signature Algorithm: sha256WithRSAEncryption
76:0a:fb:7d:ef:3d:2f:23:0b:ac:b9:1d:12:53:f3:d9:9c:29:
40:ab:e5:55:53:f2:94:11:98:ce:69:79:2d:30:07:45:9e:af:
87:64:c4:93:38:e7:51:b7:bc:36:cb:c6:ce:00:1f:50:7b:9b:
5a:65:1a:3c:77:70:f0:90:02:90:1b:59:2b:5c:46:d3:07:cc:
3a:36:2b:e2:bd:0b:97:a7:9a:22:f9:70:d7:93:93:df:45:b2:
5b:aa:25:15:6c:3f:83:da:41:a9:ed:72:3c:68:6b:43:c7:73:
72:f8:5f:f2:a2:94:82:fe:ea:2e:f5:91:b9:96:89:b0:42:5e:
94:c8:41:f9:1c:f6:53:99:33:55:4c:11:e6:ca:c8:e8:f4:2a:
24:c5:3a:4b:d9:5a:19:1c:ec:03:09:73:82:ff:e0:08:dd:88:
fe:b5:a0:2a:ec:ea:f2:0e:14:70:5e:05:e0:58:c4:a9:6f:8e:
85:88:2f:4d:69:16:9d:01:b0:8d:0e:a8:b2:5d:f2:bf:19:8c:
9c:d9:85:66:6e:37:7c:08:e4:04:45:bf:b8:07:f7:55:bb:6f:
ee:12:87:29:f2:70:f8:ba:02:9c:41:b1:bc:21:4c:62:a6:c7:
86:90:1e:db:b2:d4:45:71:d0:b9:ff:a3:39:94:09:f8:ca:dc:
90:19:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:57 2026 by rpki-client