Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ivYBripIp6HkywtCjGQOlNKhE1I.roa
File: ivYBripIp6HkywtCjGQOlNKhE1I.roa (raw, json)
Hash identifier: gP0bdbgrw9ApbWEm8mE1b1HgPFYOA92GG8Yp1NR+KPc=
Subject key identifier: 8A:F6:01:AE:2A:48:A7:A1:E4:CB:0B:42:8C:64:0E:94:D2:A1:13:52
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FCB893B56168260A299A529EA8C2D8709
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ivYBripIp6HkywtCjGQOlNKhE1I.roa
Signing time: Tue 04 Aug 2026 06:49:56 +0000
ROA not before: Tue 04 Aug 2026 06:49:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275004
IP address blocks: 2a0c:7886:e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:89:3b:56:16:82:60:a2:99:a5:29:ea:8c:2d:87:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 4 06:49:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8af601ae2a48a7a1e4cb0b428c640e94d2a11352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:4d:ee:80:2e:14:e5:9c:c5:c8:f5:d7:66:
79:9b:39:5b:1b:79:fb:f4:23:59:ea:e1:dc:cb:7d:
e7:e6:8d:18:6c:ce:04:2c:0d:7f:22:8f:e5:97:ac:
95:98:56:8f:e2:f5:bf:97:b4:28:0b:a2:41:0f:60:
91:66:05:b0:af:d9:b1:4b:aa:56:4a:03:67:b5:6b:
a2:55:51:02:06:97:e9:02:c8:e3:1b:30:3f:ea:22:
52:2e:52:f5:cc:20:2c:f4:d2:d7:fd:b2:2c:74:83:
ca:f7:00:70:cf:f4:4e:6b:eb:f8:fe:ea:62:76:ad:
73:56:8a:0a:9d:16:31:54:2e:a5:4f:f5:6d:cc:68:
db:8c:6b:00:2f:cb:94:5e:67:c5:7c:0a:e9:9e:36:
df:15:d3:cd:fe:6a:03:fa:8c:0b:31:4f:b0:67:56:
ec:d9:e3:70:9b:58:f5:fb:e7:72:15:94:8d:88:62:
ec:a3:5d:b6:da:f0:2d:0d:7b:96:de:58:4e:d4:d4:
ec:f7:64:ac:d5:d6:5f:09:ce:61:41:dd:43:b3:83:
f0:e5:45:bf:9f:8e:ea:ad:82:10:89:7e:3d:7e:ae:
c5:8c:77:89:a8:15:85:fe:7b:a5:4d:9b:9a:d8:a1:
8c:15:eb:e5:78:6f:22:16:e4:3a:01:f7:5c:fc:77:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:01:AE:2A:48:A7:A1:E4:CB:0B:42:8C:64:0E:94:D2:A1:13:52
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ivYBripIp6HkywtCjGQOlNKhE1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7886:e4::/48
Signature Algorithm: sha256WithRSAEncryption
aa:42:26:59:23:6e:c3:8b:35:35:8b:c5:2b:8e:a2:7e:86:0c:
a1:4b:78:d7:fb:e3:8e:99:22:d0:fd:21:49:6a:3d:fc:ef:b7:
4a:cf:4a:a7:cb:33:76:91:e7:5b:35:58:64:8f:5e:c4:74:87:
6a:3b:50:a4:24:13:40:f3:0f:69:69:c8:5e:2a:77:20:83:cd:
c6:1e:a8:f7:11:fc:33:d6:02:8f:1b:9e:fc:52:83:eb:90:ba:
23:a9:18:95:73:38:49:03:36:f7:8c:a9:21:d0:ee:06:dd:4a:
13:1c:cd:81:de:a1:4a:f4:08:f2:67:ad:3e:08:a6:49:1a:61:
9f:31:67:21:51:64:96:12:9f:3e:d6:37:0d:f9:bc:a5:dd:2a:
20:ed:01:ca:bf:55:ac:02:ed:01:dc:72:c8:3c:7b:86:65:87:
34:b0:d3:46:64:ca:f7:8d:f8:f3:22:0d:b5:03:25:17:60:b1:
db:39:92:04:72:fd:c3:79:f9:0c:8e:f5:a8:93:56:f0:24:72:
bd:3d:3f:da:60:2d:a5:af:15:ff:e5:96:2e:79:e9:4b:4a:de:
d5:15:af:fb:8f:f5:63:1d:7f:f5:79:18:27:9d:20:90:68:12:
fc:45:5c:b6:7c:8a:16:95:16:53:dc:00:60:4e:44:ed:e4:b8:
a5:f0:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:51 2026 by rpki-client