Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_dU3_drai17Eu7Xk3oVWfYg2ngc.roa
File: _dU3_drai17Eu7Xk3oVWfYg2ngc.roa (raw, json)
Hash identifier: /4wwlvgCUtzPdmPtI+FHZV7ux5bRMoV3npK1g2T421M=
Subject key identifier: FD:D5:37:FD:DA:DA:8B:5E:C4:BB:B5:E4:DE:85:56:7D:88:36:9E:07
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DAF8253B7C4688AAC42E59154E5B32553
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_dU3_drai17Eu7Xk3oVWfYg2ngc.roa
Signing time: Tue 21 Apr 2026 10:07:27 +0000
ROA not before: Tue 21 Apr 2026 10:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 2a0f:1580::/32 maxlen: 32
2a0f:7d05::/32 maxlen: 32
2a0f:bc05::/32 maxlen: 32
2a13:c905::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:82:53:b7:c4:68:8a:ac:42:e5:91:54:e5:b3:25:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 21 10:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdd537fddada8b5ec4bbb5e4de85567d88369e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:9a:7c:97:1d:cc:d5:a3:2f:e7:a4:be:5d:
23:61:af:d8:d9:73:df:d4:60:64:9e:80:05:d8:0e:
a8:03:9a:c4:b5:31:56:1a:ca:4b:12:4e:c7:d5:cc:
d9:81:31:1e:ee:39:05:7d:b1:83:c6:dd:6b:ca:53:
97:2a:d5:10:e0:60:2a:b1:98:1f:c7:56:2a:1a:d6:
35:cd:87:59:24:71:41:c2:09:ef:54:39:d7:31:98:
2c:8d:cd:4a:a7:99:61:52:ec:98:d7:fa:4a:44:99:
a1:60:bc:09:04:ed:4c:25:e3:c0:3e:35:07:43:6f:
1c:38:d3:e4:33:13:ca:28:07:88:a2:e5:92:7c:ed:
41:1d:8a:91:e8:d3:3b:25:84:a5:5c:da:83:a3:a0:
f1:1f:63:27:ad:36:ad:33:26:b2:7e:f1:00:3b:6d:
16:53:bd:70:65:c2:fa:39:09:51:79:23:f7:46:45:
d9:70:0c:e8:80:90:01:cc:ac:3e:3a:d6:0e:5e:d9:
a6:fb:00:ee:f0:19:61:f9:35:f0:14:a0:d5:f0:9b:
62:e0:ef:62:64:38:2a:3a:72:70:a2:05:39:13:23:
16:98:c1:a4:54:37:cc:75:3f:30:54:13:73:5a:b4:
ae:00:24:49:98:91:61:58:c5:6f:c6:c8:e7:b0:74:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D5:37:FD:DA:DA:8B:5E:C4:BB:B5:E4:DE:85:56:7D:88:36:9E:07
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_dU3_drai17Eu7Xk3oVWfYg2ngc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1580::/32
2a0f:7d05::/32
2a0f:bc05::/32
2a13:c905::/32
Signature Algorithm: sha256WithRSAEncryption
61:c3:79:10:ba:ac:7c:b5:a0:fe:51:74:79:08:59:05:55:6f:
e8:ec:5d:92:d8:91:df:14:95:13:77:a4:89:ac:d8:9a:f6:69:
2e:3f:b5:c7:10:65:da:6b:ed:6f:cc:a6:fa:32:ea:29:2b:06:
96:6a:3e:36:b5:80:06:28:cc:a3:35:d6:af:27:7a:39:07:95:
2c:0d:57:9c:91:fd:55:47:be:be:3c:d1:6d:83:86:2f:72:a3:
e1:63:07:48:d8:71:bf:4b:9f:68:60:01:57:b6:c5:43:11:ed:
ee:c3:0d:6c:b9:ed:bd:48:22:3b:09:23:4b:0e:1f:e4:78:77:
6b:06:2c:d9:f0:d7:80:83:d5:27:37:78:1e:9a:6c:66:6b:21:
96:59:fa:62:c1:fe:aa:cb:75:dd:b0:b3:e7:fd:b5:f4:ce:09:
6a:15:16:ee:1d:2b:9a:9c:15:74:0c:0e:61:ca:97:b4:bd:f0:
40:e8:b3:44:16:34:cc:d7:1c:c0:3e:5a:e6:c6:32:bd:41:aa:
25:55:45:fa:4b:42:09:a2:72:48:01:9b:02:90:33:f9:ee:b8:
6d:99:e2:aa:d4:c4:5e:77:63:54:23:68:1c:a2:a1:1e:7f:69:
aa:e8:01:ac:e7:03:c6:34:cd:03:d7:06:c1:0b:59:d9:70:d0:
22:64:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:03:53 2026 by rpki-client