Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XOQ7Vg6Xoskqp5V4rO8RvhzT5NM.roa
File: XOQ7Vg6Xoskqp5V4rO8RvhzT5NM.roa (raw, json)
Hash identifier: tS9ISEPynG6m3PSJV1b1r3YHJSvcVeuA/OyLWAEOED4=
Subject key identifier: 5C:E4:3B:56:0E:97:A2:C9:2A:A7:95:78:AC:EF:11:BE:1C:D3:E4:D3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FADFC8655FFE33094EEFE59C3F75F3E57
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XOQ7Vg6Xoskqp5V4rO8RvhzT5NM.roa
Signing time: Wed 29 Jul 2026 13:07:15 +0000
ROA not before: Wed 29 Jul 2026 13:07:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60064
IP address blocks: 2a0f:bc05::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:fc:86:55:ff:e3:30:94:ee:fe:59:c3:f7:5f:3e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 29 13:07:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ce43b560e97a2c92aa79578acef11be1cd3e4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:3e:f0:93:20:9f:09:54:6e:fa:50:1e:6f:
a1:c3:ca:84:fb:f1:74:1c:68:18:02:bc:55:59:96:
91:38:a2:30:74:32:e1:58:47:b7:bb:f4:98:90:5e:
f9:69:d4:56:f4:fe:1d:68:f0:62:f1:70:f5:37:84:
ac:2e:06:c1:47:ec:11:3d:2a:e9:25:7d:c5:b6:8f:
5f:c7:45:57:25:87:7f:86:70:ca:3f:96:52:f1:21:
14:8b:e8:39:e9:f1:5d:9f:20:f3:ff:a4:fb:58:67:
a6:da:a7:8d:c5:df:d3:9d:0b:7f:70:2b:80:14:1d:
f1:24:02:c8:2f:83:a2:00:a3:4d:70:80:5e:19:f8:
75:ef:9c:92:d7:b9:f7:28:69:3f:8d:c2:b5:60:a4:
da:8c:52:a7:ea:b9:79:85:92:76:c9:f2:de:de:a5:
c8:e4:02:af:1a:54:66:ac:c5:d8:07:be:d3:90:78:
64:12:d1:20:08:4d:3c:0f:b3:90:e1:50:e4:59:7c:
8f:18:53:7c:ce:3d:9b:9c:40:2f:99:d1:8e:9f:35:
b4:1f:49:14:4c:dc:43:04:e1:78:45:98:8d:36:f0:
2a:bf:77:e3:be:68:d1:06:e3:a8:8d:7f:9c:a4:5f:
10:a4:ed:30:81:7d:a8:cb:b3:7a:77:a9:15:b6:d5:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E4:3B:56:0E:97:A2:C9:2A:A7:95:78:AC:EF:11:BE:1C:D3:E4:D3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XOQ7Vg6Xoskqp5V4rO8RvhzT5NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bc05::/32
Signature Algorithm: sha256WithRSAEncryption
8b:ff:b8:3c:88:ce:06:51:cb:1b:c2:e6:8b:aa:a3:15:3d:df:
cb:8c:12:f2:98:78:23:dc:cf:2c:f6:e2:1b:28:8f:6e:e0:66:
06:a5:ca:f4:90:37:fb:7f:eb:d6:cf:70:13:b3:3d:eb:ee:0d:
eb:1b:ff:db:3e:aa:bc:ee:c4:96:3b:4a:7c:6a:87:54:a8:40:
e5:20:73:43:52:d6:34:c6:af:6b:b5:03:bd:97:a6:4d:e0:95:
7c:d4:10:4a:be:b9:0f:a9:43:0f:0b:cb:be:73:d5:72:7e:20:
72:4c:71:d4:88:1d:61:90:10:1f:42:ac:f2:02:04:08:76:ba:
ab:c5:f5:ab:c0:30:09:44:74:61:b9:ad:5c:28:47:b2:c8:71:
67:82:9b:8e:3f:ab:6e:b2:71:52:9a:d0:83:41:c4:23:3b:53:
40:d9:d4:14:68:51:2f:02:37:50:19:85:bc:02:8a:84:dd:df:
da:3a:76:d2:f4:00:fe:57:ce:ca:77:e6:e1:09:bf:b2:e2:83:
ef:7f:5e:fe:2d:fe:a6:38:50:7d:c0:e7:82:7a:12:bb:42:59:
18:48:ee:6c:b6:4a:da:97:17:1e:46:d6:34:2c:bf:bf:ae:a3:
60:d8:f6:aa:f7:52:d8:d3:5a:67:9f:e3:27:e1:f6:9c:b9:34:
f9:79:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:29 2026 by rpki-client