Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/h6ePR4DFzFRdKSDADPigkAeoypY.roa
File: h6ePR4DFzFRdKSDADPigkAeoypY.roa (raw, json)
Hash identifier: zIeEBbBf5/QjyNsuY9kDovAfDFFKA9WnqsqR/Oio9u8=
Subject key identifier: 87:A7:8F:47:80:C5:CC:54:5D:29:20:C0:0C:F8:A0:90:07:A8:CA:96
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1644A3536DE4BAB2ADEFE93D13C64D6FC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/h6ePR4DFzFRdKSDADPigkAeoypY.roa
Signing time: Thu 22 Oct 2026 15:45:47 +0000
ROA not before: Thu 22 Oct 2026 15:45:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207208
IP address blocks: 2a0f:2f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:4a:35:36:de:4b:ab:2a:de:fe:93:d1:3c:64:d6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 22 15:45:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87a78f4780c5cc545d2920c00cf8a09007a8ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:15:10:de:18:5c:01:61:2e:5e:c4:51:50:
fc:73:1b:04:6c:d4:d0:33:bd:c1:16:ad:65:79:bf:
11:8f:ef:54:24:5d:28:d3:1f:15:41:cd:87:0b:5d:
26:45:b2:ca:56:21:2d:c4:e4:90:71:3a:83:ae:0d:
20:41:da:90:29:60:63:f7:38:22:e9:61:7a:31:ca:
cd:1b:ae:35:b7:6a:b0:dd:ac:a6:89:0f:67:eb:ad:
ff:82:b2:06:d1:4b:ac:5b:1e:d9:5e:55:6d:0d:8f:
5e:f4:58:ce:9c:64:4c:73:11:75:ef:2e:f7:63:d0:
5d:1d:10:b1:b3:bf:5b:b2:b2:c1:73:bb:86:0a:01:
8b:13:4a:74:a3:9c:3d:c8:4b:a9:d1:1e:8f:88:f2:
23:97:74:46:20:da:a0:4e:05:e6:b6:c5:9b:16:d9:
58:3d:5a:f2:7c:b9:96:7c:3b:9c:64:e0:52:c1:e9:
e6:17:61:4b:84:4f:e1:eb:68:da:ab:af:0f:27:9b:
5b:b0:b3:3e:aa:e8:22:ba:84:7c:1c:ef:44:80:ee:
47:b1:bd:c1:66:40:43:5b:95:63:49:85:7c:b6:23:
01:13:76:6c:f3:c7:36:4c:43:cb:bb:65:c9:5e:7a:
f1:fd:34:17:d7:7e:bd:aa:45:5e:29:eb:bd:15:83:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A7:8F:47:80:C5:CC:54:5D:29:20:C0:0C:F8:A0:90:07:A8:CA:96
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/h6ePR4DFzFRdKSDADPigkAeoypY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2f80::/29
Signature Algorithm: sha256WithRSAEncryption
3f:ca:12:f1:13:f0:d0:e7:72:0b:68:98:e5:c1:6f:ba:7d:36:
31:e1:97:8b:ba:fc:c7:a9:30:45:16:4a:38:22:56:44:67:3d:
12:8a:60:67:23:5b:c5:5e:41:a8:e7:c9:ea:36:dd:34:75:3d:
35:09:c2:d2:74:1c:8b:27:1f:3a:7e:e3:d2:4e:56:a6:3a:b5:
4e:f7:22:06:a5:e1:1f:fb:71:c8:dc:eb:9e:3f:6f:f3:b1:1c:
eb:46:52:6f:cf:9a:e6:d8:64:4f:ed:ea:70:f6:ed:28:a1:2c:
f1:d1:f1:c1:b7:9e:78:3d:a3:8b:fa:9d:d2:04:4b:9e:e4:ce:
f5:04:80:2a:23:65:6d:66:ab:c8:10:66:42:53:d2:1d:96:b2:
7b:0b:ee:f2:01:b3:3c:08:0a:55:b2:ba:52:55:84:4c:6a:8f:
fe:38:63:9d:ab:5b:60:0c:0c:9e:8e:6b:8f:d6:2c:78:ab:a9:
f0:0d:55:10:01:e1:a9:6a:8f:2b:e5:5f:3d:b1:e0:d1:a5:5b:
fc:1f:ad:07:3e:1f:ab:d2:9a:7f:c8:96:8f:bb:e8:68:ba:64:
9f:a1:e3:4b:96:fc:c3:4e:a1:10:66:28:6e:c7:de:cb:bf:79:
86:98:8d:df:62:0a:cd:e5:89:f4:77:b0:34:4c:f6:7e:72:53:
97:d1:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:31 2026 by rpki-client