Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hiTJrNur7X9bRsPyUSExtJaf6is.roa
File: hiTJrNur7X9bRsPyUSExtJaf6is.roa (raw, json)
Hash identifier: gJS52ilxwfE53u5GPawveSS6A4caOnmt0umfn7xA+Ko=
Subject key identifier: 86:24:C9:AC:DB:AB:ED:7F:5B:46:C3:F2:51:21:31:B4:96:9F:EA:2B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FC69BA10CDEC16B7DD3215A196CDF6EFC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hiTJrNur7X9bRsPyUSExtJaf6is.roa
Signing time: Mon 03 Aug 2026 07:51:55 +0000
ROA not before: Mon 03 Aug 2026 07:51:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 2a12:f440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:9b:a1:0c:de:c1:6b:7d:d3:21:5a:19:6c:df:6e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 3 07:51:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8624c9acdbabed7f5b46c3f2512131b4969fea2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:d4:cd:d2:29:e7:aa:07:c8:26:17:86:e6:
da:df:eb:bb:14:05:8b:d4:0b:28:b2:9f:9c:1f:d9:
23:f9:3f:a9:d2:62:fa:98:2a:61:24:09:06:e3:73:
0d:4c:a4:40:f5:79:cd:c6:52:00:7e:35:80:33:4b:
db:46:9f:b0:a6:f5:de:2d:eb:ce:53:6a:d4:f5:c1:
02:51:0a:24:56:5f:da:e0:5a:d1:eb:ab:30:0f:db:
4d:4c:6b:3c:69:6a:47:d4:49:cc:c3:e4:a2:a6:50:
e7:28:07:d3:a2:8a:5a:0a:c8:94:3b:52:61:e8:ac:
62:17:ab:52:19:0c:77:25:bd:ed:db:a9:3c:fc:d9:
fc:f4:27:90:c8:e3:98:2c:69:ee:b9:29:e8:8a:b6:
18:e8:fe:98:72:a0:8d:30:47:36:a0:93:bb:57:dd:
79:3f:a9:ad:72:02:f4:ec:04:83:e7:e5:1b:b2:18:
0d:c5:80:ca:bc:90:fb:03:22:00:41:a7:c1:d7:35:
19:a1:70:46:d0:6c:24:c6:a7:5b:c5:ef:1d:61:27:
ca:60:02:f0:47:b2:26:1c:37:f5:21:a9:47:67:21:
6a:38:6a:c5:ea:6f:75:d1:cf:13:8b:69:b4:6f:4d:
17:0a:eb:6f:2b:b6:76:52:00:56:4d:e1:2a:31:ff:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:24:C9:AC:DB:AB:ED:7F:5B:46:C3:F2:51:21:31:B4:96:9F:EA:2B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hiTJrNur7X9bRsPyUSExtJaf6is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f440::/29
Signature Algorithm: sha256WithRSAEncryption
9d:2a:5f:b7:99:8c:29:4a:be:9e:77:15:9f:48:29:44:15:e8:
57:0a:c3:a6:41:73:35:49:c9:f4:a5:13:ca:92:2d:de:16:0f:
75:e3:be:c4:34:45:46:9f:78:20:a7:89:f5:e6:bd:08:e5:a5:
f9:8d:44:38:21:e9:ac:9d:46:a1:df:af:e9:ae:ab:c0:21:d2:
15:8f:e5:2a:88:bc:98:25:0f:93:28:32:65:37:41:12:ca:12:
79:eb:1d:dc:27:71:57:36:f1:d4:76:ff:af:96:6c:2d:e8:3c:
09:dc:81:42:d6:70:b9:6b:48:9a:ef:4f:58:d5:0a:dc:e3:1f:
3c:c4:fd:9c:ce:39:af:17:6b:27:ee:70:fc:63:5f:75:e1:3f:
96:ec:16:27:a2:82:3a:56:c4:ba:87:d0:38:11:30:c3:d2:e1:
c1:e7:76:bc:33:9e:24:e4:e0:48:26:6a:da:5e:55:12:82:16:
2e:20:3f:09:54:83:46:e4:6f:a2:92:d6:b3:7e:c4:07:00:17:
78:56:62:fc:58:28:82:87:be:ef:b2:36:b0:be:2e:0b:3c:41:
cf:be:d8:5c:4d:da:ce:4e:f4:52:2b:59:03:d8:07:32:3b:27:
9e:be:48:53:0e:a2:81:c1:c4:3f:3e:a1:fd:9a:a9:fb:c6:86:
ed:3e:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:34:42 2026 by rpki-client