Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jrQ2eCR8W4Ct4fE-gtzgT8YhkdY.roa
File: jrQ2eCR8W4Ct4fE-gtzgT8YhkdY.roa (raw, json)
Hash identifier: /NKGcS15LVF2aTxrrRDfY91ueOBKiHu2Z1nxXwTMcT0=
Subject key identifier: 8E:B4:36:78:24:7C:5B:80:AD:E1:F1:3E:82:DC:E0:4F:C6:21:91:D6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D313A0142EDD5458F0FAC0DA8585C6822
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jrQ2eCR8W4Ct4fE-gtzgT8YhkdY.roa
Signing time: Fri 27 Mar 2026 21:36:18 +0000
ROA not before: Fri 27 Mar 2026 21:36:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400328
IP address blocks: 2a0a:2d02::/32 maxlen: 32
2a0f:1e06::/32 maxlen: 32
2a10:68c6::/32 maxlen: 32
2a10:7b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:3a:01:42:ed:d5:45:8f:0f:ac:0d:a8:58:5c:68:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 27 21:36:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eb43678247c5b80ade1f13e82dce04fc62191d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:77:8f:52:7c:f5:d1:7a:71:f2:83:1c:65:
54:99:ef:64:25:bc:e7:7a:9b:d0:dd:df:51:d3:e1:
5e:5c:c9:33:54:96:4e:2e:e0:fe:1e:d5:2b:96:e8:
32:24:38:06:39:d8:17:06:9b:82:da:ad:0e:cd:a4:
cb:62:1d:d0:be:34:b2:c0:b9:34:2e:45:29:8c:93:
15:b6:25:32:49:f9:a6:49:e2:52:42:92:fd:6d:6e:
88:f3:d4:91:ea:28:a8:b3:5d:6d:db:e6:52:43:9d:
8f:d0:df:24:b7:f3:52:20:a0:6a:64:ed:4b:14:a3:
bd:b7:9e:71:17:12:12:10:e9:55:e7:e7:f7:2e:ea:
bb:94:53:2b:59:a9:78:75:01:44:5b:5b:8c:f1:f4:
73:1b:60:c9:bb:0e:69:7e:28:6d:1a:b7:f7:3b:94:
8e:f0:10:ab:e5:8c:9b:56:e7:a5:93:d9:be:51:71:
5a:46:10:75:26:f1:9c:7b:bf:e8:46:6c:f0:7b:dd:
2c:ed:b8:22:0c:30:05:ea:8d:f3:bb:69:17:39:02:
20:0f:65:1e:d1:ed:7b:30:b0:e8:c2:31:e1:b8:58:
b0:85:1d:1e:e7:29:3a:b4:99:dc:12:3a:c8:fc:92:
bc:25:ab:fb:89:48:63:8a:14:e3:3a:f3:a0:85:6b:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:36:78:24:7C:5B:80:AD:E1:F1:3E:82:DC:E0:4F:C6:21:91:D6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jrQ2eCR8W4Ct4fE-gtzgT8YhkdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
2a0f:1e06::/32
2a10:68c6::/32
2a10:7b00::/29
Signature Algorithm: sha256WithRSAEncryption
48:86:20:0e:f3:00:68:ad:56:a3:87:18:c8:fd:5b:94:7b:83:
b2:e1:20:05:df:af:49:ba:f1:ff:b5:8b:6f:88:cb:10:81:c9:
d1:c5:71:f7:04:91:b9:1e:ac:f9:c4:a1:70:2a:99:af:fc:a5:
74:f3:bb:59:64:88:20:bc:d6:be:5b:f1:ee:47:d6:65:6c:9e:
94:b3:1f:fd:17:a5:bc:a4:de:da:cc:e0:ba:91:87:be:68:d6:
f3:4e:45:26:85:fb:56:a2:e6:9d:31:89:17:53:87:47:2c:81:
86:b7:7f:50:10:11:28:f7:05:42:a3:c9:09:87:95:e2:6f:d6:
8f:45:39:dd:b5:29:34:eb:ea:fd:fc:61:8b:61:81:73:f9:a5:
59:6f:b6:ab:46:b1:a2:16:1c:b8:f2:a1:b3:69:2c:00:fe:70:
89:c0:b6:73:40:c5:85:85:e3:8e:e2:10:ed:d9:81:01:40:b2:
08:09:f8:87:c2:43:c7:4c:92:71:62:17:5f:39:74:ed:a5:db:
0b:b3:66:c3:d2:ed:8f:48:dd:eb:2a:b7:c8:be:09:af:f7:15:
29:51:fd:84:83:ac:1e:03:10:f6:94:47:e0:e0:4c:4c:39:89:
45:a6:b4:c1:b6:2a:2c:99:5d:0c:41:e5:ef:b0:bb:4f:9e:96:
1e:40:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:33:56 2026 by rpki-client