Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KwDQpRiWggVbE4glm3Yarzra2Tk.roa
File: KwDQpRiWggVbE4glm3Yarzra2Tk.roa (raw, json)
Hash identifier: SI+gzE0l8uweTS4qoAhg90R6Nt7Ax6uhNbYEHmgkAZA=
Subject key identifier: 2B:00:D0:A5:18:96:82:05:5B:13:88:25:9B:76:1A:AF:3A:DA:D9:39
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DAA50E4F3170194CEDF4FEF1D0BDB3722
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KwDQpRiWggVbE4glm3Yarzra2Tk.roa
Signing time: Mon 20 Apr 2026 09:55:21 +0000
ROA not before: Mon 20 Apr 2026 09:55:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 2a0f:1580::/32 maxlen: 32
2a0f:7d05::/32 maxlen: 32
2a13:c905::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:50:e4:f3:17:01:94:ce:df:4f:ef:1d:0b:db:37:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 20 09:55:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b00d0a5189682055b1388259b761aaf3adad939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:0a:6a:7e:f4:92:24:39:38:e1:49:fe:bf:
90:5b:e7:ba:c7:7c:b1:5e:8e:bc:3f:fc:69:06:2d:
be:88:d2:da:72:dc:32:e1:ff:aa:79:be:ca:82:02:
ee:7f:98:2c:34:fa:35:cd:23:22:1c:88:a1:15:a8:
ea:c9:73:4f:bd:69:44:5f:84:85:dc:98:a0:fe:f2:
3f:5d:a2:d6:d3:98:fc:84:53:d9:5b:d2:75:b7:9b:
d0:fd:84:5a:c9:ea:4d:d9:d8:af:88:54:96:73:d0:
f6:c7:7c:4b:ac:07:9e:42:ca:42:ff:e3:4d:d0:bf:
63:d6:bc:71:93:f1:b4:a2:96:a9:01:3d:47:d9:55:
22:95:fc:cc:11:2b:ac:22:9c:da:cb:98:56:bf:45:
72:b2:72:ed:ca:27:fa:19:b3:c6:ba:2c:d9:f5:87:
ce:5e:93:41:9e:df:b7:71:41:65:2b:ab:ed:f5:b8:
2d:69:4c:d6:83:45:ae:17:03:a6:de:99:78:f5:18:
4d:d0:92:ee:47:ac:85:20:e7:ce:ae:ce:a4:f9:45:
a2:bd:53:5a:96:7f:95:11:74:aa:05:89:3c:b6:91:
99:bb:33:62:90:f1:2d:4a:93:fa:4f:19:45:1f:24:
83:d9:74:42:c8:01:92:65:96:bc:76:2c:39:b7:d9:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:00:D0:A5:18:96:82:05:5B:13:88:25:9B:76:1A:AF:3A:DA:D9:39
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KwDQpRiWggVbE4glm3Yarzra2Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1580::/32
2a0f:7d05::/32
2a13:c905::/32
Signature Algorithm: sha256WithRSAEncryption
50:23:26:c2:5c:10:8d:74:4f:a4:9c:66:14:3d:c0:ee:da:50:
09:39:98:77:0e:ff:30:39:10:48:73:9e:20:d8:b8:af:97:ae:
9c:a1:ea:db:93:64:df:28:d2:4d:1e:32:3e:ad:86:28:34:12:
80:39:66:92:66:e9:c8:8b:b9:00:87:c8:ab:e6:dc:70:42:b2:
97:9b:92:f8:a9:e1:ab:d8:58:f4:5d:35:7d:d8:cf:f2:fe:78:
e4:56:c4:3b:08:20:f8:a6:45:32:c5:12:fd:bb:ff:ce:e7:2e:
42:f4:cf:bc:f4:74:0d:fe:6a:d4:6b:d5:48:4a:93:f9:3d:23:
d4:89:e8:27:9c:14:03:19:47:77:08:9f:ce:4f:e0:36:97:aa:
f5:e6:55:2a:e8:51:92:e9:84:11:26:61:c5:2e:93:93:14:f0:
f8:1c:5c:ca:5b:d1:27:c1:fe:f7:7a:7c:87:9c:d9:5c:83:39:
9d:93:c8:cd:f3:fb:8b:20:33:b9:60:aa:7f:7d:97:3c:50:54:
aa:6a:91:94:b5:6a:70:ac:a8:ab:7b:9a:6c:55:87:8e:47:91:
2d:ca:43:10:42:4e:4e:09:1c:4c:77:72:b2:11:56:da:2c:22:
d0:30:9e:80:5d:c7:bf:c3:8c:e0:89:a2:9c:ca:5b:b2:57:a6:
cd:e0:e8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 09:25:37 2026 by rpki-client