Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gH9M0hfgfjcYy4m5TdXHdJ3lFGU.roa
File: gH9M0hfgfjcYy4m5TdXHdJ3lFGU.roa (raw, json)
Hash identifier: CfHEQ1ei+3L51nr2yVSSDehDI6Co2l2gE9o+jA+wsi0=
Subject key identifier: 80:7F:4C:D2:17:E0:7E:37:18:CB:89:B9:4D:D5:C7:74:9D:E5:14:65
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E3A32A13CA614881DA03FFC41604F1F26
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gH9M0hfgfjcYy4m5TdXHdJ3lFGU.roa
Signing time: Mon 18 May 2026 08:27:37 +0000
ROA not before: Mon 18 May 2026 08:27:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a06:b5c0::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 15:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:32:a1:3c:a6:14:88:1d:a0:3f:fc:41:60:4f:1f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 18 08:27:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=807f4cd217e07e3718cb89b94dd5c7749de51465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:f0:e3:23:70:7d:e6:20:88:ce:75:5b:bb:
71:da:fe:8a:06:12:6b:09:cf:ae:6b:71:46:30:63:
dc:13:23:c0:62:5f:65:0b:c2:00:fb:3e:46:c8:3b:
78:2d:ed:1e:b2:fc:18:e0:ee:ac:56:3a:36:cd:33:
a6:da:a1:fc:0a:7e:19:7c:8a:55:3d:aa:01:a1:cf:
ed:30:fd:3e:17:3a:aa:ae:7a:7f:aa:f6:b2:ab:46:
11:6d:0e:0b:76:e9:20:e6:04:6f:d1:d0:2d:24:91:
0c:5a:b0:92:01:36:07:ae:24:2e:ef:0c:56:04:d1:
07:90:01:97:df:97:7d:ac:d0:2c:b5:40:0c:d7:22:
42:09:ac:41:78:58:c4:e0:b1:b8:92:7d:e2:cd:1f:
81:22:f2:81:a8:e0:99:51:70:c8:2f:d7:2d:26:d3:
c6:2d:d1:bf:81:c3:e0:ed:a4:46:b7:37:2e:da:8f:
df:1b:f1:e6:21:55:38:bd:2e:c0:1d:fc:d1:10:d4:
67:9f:f8:07:35:96:c6:86:fc:dd:49:cc:36:ae:23:
db:71:a8:dc:cd:56:a3:9e:23:7e:0c:1f:1a:c2:4f:
db:fa:b4:e7:86:a3:20:6a:d3:08:63:ff:4c:35:8c:
f7:51:79:e8:f3:a3:0b:68:48:ed:c8:43:0c:e7:1e:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:4C:D2:17:E0:7E:37:18:CB:89:B9:4D:D5:C7:74:9D:E5:14:65
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gH9M0hfgfjcYy4m5TdXHdJ3lFGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b5c0::/29
2a0e:5a80::/29
2a0f:e00::/29
Signature Algorithm: sha256WithRSAEncryption
37:7d:b1:21:37:aa:e9:e9:49:5c:e8:b4:db:36:73:e9:1e:83:
b6:a3:3a:ae:2d:58:f9:df:46:91:92:9f:c6:d8:53:a1:b0:04:
d6:3f:b9:fd:da:1b:91:0b:e1:b4:e2:e9:b3:f6:fb:c2:34:18:
fc:b3:f2:55:b8:0e:8c:96:90:b6:08:d3:dd:af:ac:ce:82:48:
77:12:f4:e3:a3:e4:09:1b:58:fe:33:5e:16:f4:83:f3:ed:07:
35:e6:f6:61:18:b1:1d:a2:6a:49:f8:1d:d0:6c:35:87:16:35:
b8:40:ca:03:f2:17:20:34:09:aa:64:aa:61:33:04:e9:7f:55:
de:3e:1b:ca:53:e0:e4:6f:40:f7:42:dd:30:61:f8:9b:ce:66:
5c:6c:1e:21:f9:dd:ae:f8:63:94:ed:97:9b:2c:e7:3c:a1:e6:
b7:68:70:cf:7a:5c:18:3a:a1:17:75:55:99:ea:55:56:ff:79:
77:87:06:7b:45:2f:4a:a9:9b:3f:7d:ac:e8:38:8f:d8:bb:d2:
8c:50:f8:a0:e6:d4:ea:9b:4a:f8:17:57:38:e6:df:25:47:48:
4b:00:97:26:fc:0e:38:89:05:56:ae:24:a9:d5:9c:3f:0f:73:
8d:6a:cf:f0:14:26:99:e3:4d:bf:d0:e0:b1:42:b0:8b:1e:e7:
7f:39:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:33:24 2026 by rpki-client