Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YCfGgfD9udTkmpQRT0mwPKfDGRk.roa
File: YCfGgfD9udTkmpQRT0mwPKfDGRk.roa (raw, json)
Hash identifier: acu92FZqebxh5RYhy+g0/XZRAOboxfTpZQcah7Tc7nM=
Subject key identifier: 60:27:C6:81:F0:FD:B9:D4:E4:9A:94:11:4F:49:B0:3C:A7:C3:19:19
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FF62D01D454B3AF220D442FEB3299C223
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YCfGgfD9udTkmpQRT0mwPKfDGRk.roa
Signing time: Wed 12 Aug 2026 13:32:52 +0000
ROA not before: Wed 12 Aug 2026 13:32:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 2a0f:e841::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 08:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:2d:01:d4:54:b3:af:22:0d:44:2f:eb:32:99:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 12 13:32:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6027c681f0fdb9d4e49a94114f49b03ca7c31919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:dc:a0:de:ed:21:6d:63:d7:75:00:ce:04:
fa:e8:64:b6:5d:81:d4:49:70:ce:d4:e7:c3:45:4a:
30:30:79:c7:25:c7:ab:a6:01:b9:d4:f8:73:fa:b3:
1f:d9:67:de:c3:0a:fd:5c:2a:2a:53:fc:e3:ec:be:
75:4d:78:f8:73:26:1f:1c:b2:83:19:3f:75:6c:bb:
c2:53:21:aa:4f:d8:7c:06:dd:ff:d9:50:51:6b:a1:
ee:1c:7f:09:f2:ad:4e:2d:a7:2d:3c:7a:0c:dd:5b:
4e:0c:18:78:01:0b:8c:09:a8:e5:d2:3a:e7:3f:9a:
fd:ff:67:05:28:18:d6:05:e5:14:f5:b6:58:34:f2:
5c:f9:b6:7b:15:26:a7:d2:c1:69:0a:f1:23:50:bf:
25:89:fa:65:84:13:f1:a2:ad:2f:4b:1c:d6:6b:50:
d6:bd:fc:ba:35:60:84:4f:50:d4:b4:10:b7:9d:50:
aa:7f:e9:c8:90:81:80:44:a4:04:09:46:28:05:7a:
03:3e:e8:70:d6:b4:a2:5a:3d:20:e8:43:67:1b:7f:
83:1a:f2:7a:71:1b:1d:52:27:da:15:68:a1:8e:df:
37:2b:c9:44:b0:1d:26:82:f6:fe:1c:95:10:0a:58:
9f:8a:17:44:5a:04:53:a1:2a:45:fb:a6:19:62:ca:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:C6:81:F0:FD:B9:D4:E4:9A:94:11:4F:49:B0:3C:A7:C3:19:19
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YCfGgfD9udTkmpQRT0mwPKfDGRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e841::/32
Signature Algorithm: sha256WithRSAEncryption
ad:4c:43:d9:e2:32:fa:fd:2b:e8:13:07:e7:2e:85:3a:f2:33:
10:9b:23:2d:f5:63:e8:a4:ec:bb:ae:66:be:41:6f:00:86:cc:
8c:2e:5a:e7:a8:19:10:a8:58:ed:0d:7e:f9:a1:93:9e:99:6e:
50:02:79:25:c0:b7:da:08:bd:3b:bc:66:42:b0:7f:26:83:29:
6d:50:5b:19:e0:4c:53:f4:60:96:e2:e1:16:2d:f1:e7:8d:4b:
90:8a:cf:31:9b:be:5a:1f:6f:2c:a0:f3:4f:4e:e6:0c:70:b4:
5b:af:e3:b9:73:23:05:d0:b5:eb:5d:f0:c1:36:83:53:71:58:
45:c7:2e:22:a5:72:96:21:c3:37:a4:ee:60:77:b4:c1:19:e3:
dd:4d:38:12:18:db:6b:cc:95:49:01:fe:63:18:5f:69:43:f8:
e4:79:12:c1:d9:b5:23:93:68:be:fd:22:a9:37:17:2f:c2:ef:
af:cc:5d:33:f5:e8:43:4e:29:51:2b:91:2b:6f:61:53:7d:f6:
1b:07:82:d2:3b:37:3c:93:fa:fe:22:35:33:44:1e:a3:a9:9d:
4b:13:67:8c:80:e1:8f:eb:15:33:6b:24:e5:2c:ee:ee:ce:08:
a3:9b:e0:a9:4a:92:b2:7b:b7:aa:a4:63:a0:06:c9:43:cd:93:
93:0f:d8:b9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ/2LQHUVLOvIg1EL+symcIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODEyMTMzMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDI3YzY4MWYwZmRiOWQ0ZTQ5YTk0MTE0ZjQ5YjAzY2E3YzMxOTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiffcoN7tIW1j13UAzgT66GS2XYHU
SXDO1OfDRUowMHnHJcerpgG51Phz+rMf2Wfewwr9XCoqU/zj7L51TXj4cyYfHLKD
GT91bLvCUyGqT9h8Bt3/2VBRa6HuHH8J8q1OLactPHoM3VtODBh4AQuMCajl0jrn
P5r9/2cFKBjWBeUU9bZYNPJc+bZ7FSan0sFpCvEjUL8lifplhBPxoq0vSxzWa1DW
vfy6NWCET1DUtBC3nVCqf+nIkIGARKQECUYoBXoDPuhw1rSiWj0g6ENnG3+DGvJ6
cRsdUifaFWihjt83K8lEsB0mgvb+HJUQClifihdEWgRToSpF+6YZYsqNtwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGAnxoHw/bnU5JqUEU9JsDynwxkZMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWUNmR2dmRDl1ZFRrbXBRUlQwbXdQS2ZER1JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg/oQTAN
BgkqhkiG9w0BAQsFAAOCAQEArUxD2eIy+v0r6BMH5y6FOvIzEJsjLfVj6KTsu65m
vkFvAIbMjC5a56gZEKhY7Q1++aGTnpluUAJ5JcC32gi9O7xmQrB/JoMpbVBbGeBM
U/RgluLhFi3x541LkIrPMZu+Wh9vLKDzT07mDHC0W6/juXMjBdC1613wwTaDU3FY
RccuIqVyliHDN6TuYHe0wRnj3U04Ehjba8yVSQH+YxhfaUP45HkSwdm1I5Novv0i
qTcXL8Lvr8xdM/XoQ04pUSuRK29hU332GweC0js3PJP6/iI1M0Qeo6mdSxNnjIDh
j+sVM2sk5Szu7s4Io5vgqUqSsnu3qqRjoAbJQ82Tkw/YuQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 15:35:28 2026 by rpki-client