Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_AdTdguV5v7gqkoG04flyvbFPck.roa
File: _AdTdguV5v7gqkoG04flyvbFPck.roa (raw, json)
Hash identifier: TgreKWyBw4C5rOhhJVcpKi1zjoihV1KMVGQo5fVgmEY=
Subject key identifier: FC:07:53:76:0B:95:E6:FE:E0:AA:4A:06:D3:87:E5:CA:F6:C5:3D:C9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0471D2FDD51A83F314B713370E000BA85
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_AdTdguV5v7gqkoG04flyvbFPck.roa
Signing time: Fri 28 Aug 2026 06:44:50 +0000
ROA not before: Fri 28 Aug 2026 06:44:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199925
IP address blocks: 2a12:d5c0::/29 maxlen: 29
2a13:9b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:1d:2f:dd:51:a8:3f:31:4b:71:33:70:e0:00:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 28 06:44:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc0753760b95e6fee0aa4a06d387e5caf6c53dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:ae:b8:c3:15:12:c2:61:88:61:82:b2:29:
97:72:f1:91:c8:a5:b8:36:a9:1c:3f:f3:85:ea:f7:
b2:82:c1:1a:38:4a:65:de:28:2f:1d:84:0f:68:b9:
9a:ed:f9:e4:42:17:46:39:c4:47:8c:59:d3:d9:b0:
0c:fc:30:da:cd:70:67:3e:98:1a:ce:04:a7:7e:2d:
63:03:9c:8a:e9:5d:8f:db:4f:80:c7:c1:75:c1:7d:
67:03:f3:ca:c8:70:5d:71:db:2e:1a:b7:0c:9f:e9:
a5:a6:88:f1:1b:71:31:99:ae:99:d7:8c:02:1b:cb:
fa:93:b8:02:71:8c:4c:f4:dc:25:93:99:82:35:91:
22:3d:dd:18:2f:65:43:f8:b5:80:e0:f8:2b:de:65:
ee:77:80:ce:41:16:95:8f:75:54:8a:6d:bf:1c:8e:
21:43:ae:b9:6e:60:bf:b7:dc:bf:0e:ab:ff:a5:82:
79:eb:69:87:1c:28:fa:73:ff:23:01:57:85:61:61:
f3:aa:bb:7a:71:c0:af:c3:1b:c5:42:a3:7e:90:2d:
f4:0b:bb:a2:ba:d8:bd:f5:f7:ce:bf:19:97:3f:b1:
a9:8f:96:8f:b0:a2:3e:62:dc:0e:f6:8f:6d:df:3d:
bf:9c:09:8e:4e:e2:fd:43:18:9b:f9:1e:3b:92:66:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:07:53:76:0B:95:E6:FE:E0:AA:4A:06:D3:87:E5:CA:F6:C5:3D:C9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_AdTdguV5v7gqkoG04flyvbFPck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d5c0::/29
2a13:9b00::/29
Signature Algorithm: sha256WithRSAEncryption
cd:19:82:fc:37:29:35:0d:fc:7f:74:58:f9:dd:1e:1f:2d:75:
96:2f:f2:eb:a6:af:51:bd:51:99:04:ea:26:b1:ac:72:0b:a4:
9a:6e:fc:66:6c:6e:ad:35:10:bc:7d:f3:eb:1d:94:2d:27:de:
5f:3e:fc:aa:05:aa:67:3e:0d:b8:e1:63:71:ee:b2:92:3d:96:
23:1b:b2:32:95:ae:73:bb:c0:ae:fd:32:e7:48:4f:e0:77:34:
0c:55:36:e6:94:e5:b7:9b:83:e1:d5:71:24:d8:b5:85:b5:e0:
d5:41:d5:d9:35:a4:63:eb:3e:8f:6a:81:ba:d1:64:94:3a:da:
d9:d9:5a:29:ee:a8:0b:38:2a:12:dd:c9:26:51:64:84:2b:3b:
9e:a2:a0:aa:e0:c1:28:eb:5e:19:d1:9a:8f:a1:be:bd:41:78:
4d:82:56:b9:64:b9:55:b5:90:ac:24:af:2b:3a:4c:44:14:6b:
de:60:34:ba:69:95:77:10:75:9a:92:66:c9:36:ef:08:f7:6c:
43:2f:7f:4a:89:bb:aa:58:9c:0a:a8:59:24:5f:e8:f3:12:ac:
54:9b:9d:5e:10:89:65:b0:b0:24:cd:77:97:39:67:fd:45:0d:
63:ba:a7:0b:ca:77:61:26:54:5d:a6:2d:b2:a0:bf:d8:e9:ff:
35:37:72:cf
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaBHHS/dUag/MUtxM3DgALqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODI4MDY0NDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzA3NTM3NjBiOTVlNmZlZTBhYTRhMDZkMzg3ZTVjYWY2YzUzZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BKuuMMVEsJhiGGCsimXcvGRyKW4
NqkcP/OF6veygsEaOEpl3igvHYQPaLma7fnkQhdGOcRHjFnT2bAM/DDazXBnPpga
zgSnfi1jA5yK6V2P20+Ax8F1wX1nA/PKyHBdcdsuGrcMn+mlpojxG3Exma6Z14wC
G8v6k7gCcYxM9Nwlk5mCNZEiPd0YL2VD+LWA4Pgr3mXud4DOQRaVj3VUim2/HI4h
Q665bmC/t9y/Dqv/pYJ562mHHCj6c/8jAVeFYWHzqrt6ccCvwxvFQqN+kC30C7ui
uti99ffOvxmXP7Gpj5aPsKI+YtwO9o9t3z2/nAmOTuL9Qxib+R47kmYyIQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPwHU3YLleb+4KpKBtOH5cr2xT3JMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvX0FkVGRndVY1djdncWtvRzA0Zmx5dmJGUGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhLVwAMF
AyoTmwAwDQYJKoZIhvcNAQELBQADggEBAM0Zgvw3KTUN/H90WPndHh8tdZYv8uum
r1G9UZkE6iaxrHILpJpu/GZsbq01ELx98+sdlC0n3l8+/KoFqmc+DbjhY3HuspI9
liMbsjKVrnO7wK79MudIT+B3NAxVNuaU5bebg+HVcSTYtYW14NVB1dk1pGPrPo9q
gbrRZJQ62tnZWinuqAs4KhLdySZRZIQrO56ioKrgwSjrXhnRmo+hvr1BeE2CVrlk
uVW1kKwkrys6TEQUa95gNLpplXcQdZqSZsk27wj3bEMvf0qJu6pYnAqoWSRf6PMS
rFSbnV4QiWWwsCTNd5c5Z/1FDWO6pwvKd2EmVF2mLbKgv9jp/zU3cs8=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:40 2026 by rpki-client