Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R1o1TBIO36NoU5vXxfBEfxp74U4.roa
File: R1o1TBIO36NoU5vXxfBEfxp74U4.roa (raw, json)
Hash identifier: nOrcITn5I4kxKyttbESLqXmQPdMKy9Jy+WXmLTmfU7s=
Subject key identifier: 47:5A:35:4C:12:0E:DF:A3:68:53:9B:D7:C5:F0:44:7F:1A:7B:E1:4E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F08A3714086CBC90F5BD9FBBA812E7207
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R1o1TBIO36NoU5vXxfBEfxp74U4.roa
Signing time: Sat 27 Jun 2026 10:32:36 +0000
ROA not before: Sat 27 Jun 2026 10:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60064
IP address blocks: 2a0f:bc05::/32 maxlen: 32
2a12:f440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:a3:71:40:86:cb:c9:0f:5b:d9:fb:ba:81:2e:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 27 10:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=475a354c120edfa368539bd7c5f0447f1a7be14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:12:dc:f5:4a:fa:26:f4:9b:02:ba:70:8a:d9:
53:84:45:90:3e:7b:21:b7:50:38:47:12:32:77:4c:
6f:81:82:e1:6a:52:92:f8:b8:6a:97:e9:97:bd:65:
38:3a:1a:ac:a1:0e:0a:8a:a3:a9:72:08:0a:a7:3e:
bf:48:b9:bc:eb:33:f3:84:3d:d5:64:63:43:ed:7c:
96:67:e8:01:c9:e7:b9:7f:58:de:34:17:ab:d4:51:
a2:5a:e4:8a:27:76:49:a0:bc:2d:64:9b:a4:bc:fa:
49:37:20:2d:67:4b:d5:4c:ef:08:52:81:b9:dd:8d:
d7:ea:07:dd:c5:5a:a2:87:b7:ce:e2:61:54:90:1b:
6c:3a:2e:84:79:b9:ca:47:ca:89:0f:4e:3b:05:83:
99:03:e4:80:09:34:42:89:d7:66:70:29:2e:ce:98:
a6:06:b0:30:96:c2:57:2b:dd:bb:05:04:00:4d:2b:
60:a0:f5:2b:5a:ad:1a:3a:dd:8a:32:39:e6:6c:e2:
44:ce:c0:fc:55:db:80:2e:75:9c:0c:aa:e1:7f:a7:
63:61:2f:24:8b:f8:21:df:a6:5a:bf:c0:06:75:ef:
07:e5:27:30:c5:ef:1e:5e:17:19:0b:d5:78:12:81:
f9:12:8d:de:b0:35:a6:54:cc:d0:20:d8:c7:13:3f:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:35:4C:12:0E:DF:A3:68:53:9B:D7:C5:F0:44:7F:1A:7B:E1:4E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R1o1TBIO36NoU5vXxfBEfxp74U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bc05::/32
2a12:f440::/29
Signature Algorithm: sha256WithRSAEncryption
b2:0e:64:1d:ef:e5:3a:9d:04:9a:1d:f1:37:43:8d:9c:40:e6:
4d:7a:63:1c:fb:7e:a9:34:1f:c1:f9:0a:ca:b1:48:f7:cb:ba:
16:49:55:71:c1:a0:3d:8c:d9:96:52:c7:b6:bb:fd:0d:e9:d1:
27:8c:73:4e:65:a8:6b:55:82:fc:05:95:bd:12:87:51:b6:20:
05:5f:19:48:6e:9f:a7:8e:94:86:31:e1:c1:25:6b:7b:ef:4e:
6e:69:d9:09:f2:32:41:e5:01:fe:c6:23:38:65:7b:66:51:dd:
86:15:08:4c:b8:a1:19:2d:4f:d6:cd:4d:37:d3:9b:da:af:1a:
f7:17:63:8a:bf:1e:96:43:c6:ed:f8:ee:09:45:37:ae:e7:6f:
e4:c3:5e:18:b8:9c:38:de:ed:8f:23:73:41:6e:ea:13:cd:e3:
f8:66:27:2c:17:fc:e3:5e:00:49:7c:31:03:c3:c1:6c:7b:22:
59:a5:6c:e8:d8:10:e2:55:77:a3:66:38:59:1a:7e:9d:c1:43:
a9:cb:63:f3:cf:1c:57:de:d2:d4:db:a6:b6:60:e2:21:b9:bf:
d9:b2:fc:0c:6e:ab:f0:76:6a:ab:ff:0f:1e:4a:1c:82:cb:ee:
78:18:70:a3:84:fc:9f:9c:a5:ea:25:77:ef:eb:3a:73:43:b8:
d3:1d:95:e1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8Io3FAhsvJD1vZ+7qBLnIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNjI3MTAzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzVhMzU0YzEyMGVkZmEzNjg1MzliZDdjNWYwNDQ3ZjFhN2JlMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RLc9Ur6JvSbArpwitlThEWQPnsh
t1A4RxIyd0xvgYLhalKS+Lhql+mXvWU4OhqsoQ4KiqOpcggKpz6/SLm86zPzhD3V
ZGND7XyWZ+gByee5f1jeNBer1FGiWuSKJ3ZJoLwtZJukvPpJNyAtZ0vVTO8IUoG5
3Y3X6gfdxVqih7fO4mFUkBtsOi6EebnKR8qJD047BYOZA+SACTRCiddmcCkuzpim
BrAwlsJXK927BQQATStgoPUrWq0aOt2KMjnmbOJEzsD8VduALnWcDKrhf6djYS8k
i/gh36Zav8AGde8H5Scwxe8eXhcZC9V4EoH5Eo3esDWmVMzQINjHEz91AQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEdaNUwSDt+jaFOb18XwRH8ae+FOMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUjFvMVRCSU8zNk5vVTV2WHhmQkVmeHA3NFU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg+8BQMF
AyoS9EAwDQYJKoZIhvcNAQELBQADggEBALIOZB3v5TqdBJod8TdDjZxA5k16Yxz7
fqk0H8H5CsqxSPfLuhZJVXHBoD2M2ZZSx7a7/Q3p0SeMc05lqGtVgvwFlb0Sh1G2
IAVfGUhun6eOlIYx4cEla3vvTm5p2QnyMkHlAf7GIzhle2ZR3YYVCEy4oRktT9bN
TTfTm9qvGvcXY4q/HpZDxu347glFN67nb+TDXhi4nDje7Y8jc0Fu6hPN4/hmJywX
/ONeAEl8MQPDwWx7IlmlbOjYEOJVd6NmOFkafp3BQ6nLY/PPHFfe0tTbprZg4iG5
v9my/Axuq/B2aqv/Dx5KHILL7ngYcKOE/J+cpeold+/rOnNDuNMdleE=
-----END CERTIFICATE-----
Generated at Fri Jul 10 04:41:21 2026 by rpki-client