Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nntz2f1ulN_nF8DrxufvOhrENE0.roa
File: nntz2f1ulN_nF8DrxufvOhrENE0.roa (raw, json)
Hash identifier: grOAwIiE5J7yFbJZS7PLlckE/O70GR0gsASnz59K+0A=
Subject key identifier: 9E:7B:73:D9:FD:6E:94:DF:E7:17:C0:EB:C6:E7:EF:3A:1A:C4:34:4D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DAA473D29F1DBFD2447D3F40212CB2857
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nntz2f1ulN_nF8DrxufvOhrENE0.roa
Signing time: Mon 20 Apr 2026 09:44:48 +0000
ROA not before: Mon 20 Apr 2026 09:44:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:1180:100::/48 maxlen: 48
2a0a:2d07:44::/48 maxlen: 48
2a0a:2d07:cc::/48 maxlen: 48
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:47:3d:29:f1:db:fd:24:47:d3:f4:02:12:cb:28:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 20 09:44:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e7b73d9fd6e94dfe717c0ebc6e7ef3a1ac4344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:c3:af:8c:f5:83:af:53:32:bd:ff:d7:d1:
90:88:65:48:e4:a9:02:68:f5:55:e8:4c:ff:8d:62:
35:7f:3d:94:50:a8:82:35:0d:1c:e8:e7:15:7a:b8:
91:d9:71:b2:a9:89:b4:b2:12:84:97:ac:e9:a4:ff:
d9:5b:e4:2d:83:e7:42:23:69:da:ef:48:bb:4a:fd:
23:56:44:6f:c8:bb:45:36:bc:2a:dd:c2:6f:18:c4:
bc:99:fb:7f:1b:d3:8f:32:33:09:60:d2:7e:3d:77:
0e:d0:aa:ae:ed:02:80:fd:5e:7e:01:6a:32:30:6d:
db:36:63:c8:91:25:5b:2c:1a:db:ad:d5:27:0a:7a:
ab:5f:68:21:60:91:fc:53:9c:15:65:21:33:54:14:
85:c8:63:5b:c5:ca:33:36:ae:d5:df:91:c7:ee:82:
8c:78:e4:8f:d2:3c:4e:ee:59:e4:29:2c:3e:ac:ff:
1a:02:75:06:59:f5:57:48:5a:45:8d:df:79:d1:9d:
99:0c:4b:d5:8e:0b:5f:8b:eb:ec:52:f3:78:7d:09:
f2:fa:3e:8c:fa:30:e6:6f:78:39:dd:0b:91:13:b6:
89:60:26:60:cd:78:98:f3:0d:b9:3b:25:30:69:9b:
28:64:30:e5:39:9b:43:d4:72:db:ce:26:f8:60:ac:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:73:D9:FD:6E:94:DF:E7:17:C0:EB:C6:E7:EF:3A:1A:C4:34:4D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nntz2f1ulN_nF8DrxufvOhrENE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:100::/48
2a0a:2d07:44::/48
2a0a:2d07:cc::/48
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a13:c900:66::/48
Signature Algorithm: sha256WithRSAEncryption
75:44:ad:7e:79:e1:d0:8e:0f:b5:fc:0d:6c:80:55:fa:19:b8:
24:57:07:99:aa:2a:a1:5f:4c:d3:f0:55:5b:1e:d4:6d:e8:65:
b4:19:d6:08:b5:10:ca:17:6e:32:aa:15:f3:b9:b5:c6:f6:89:
a7:45:5c:34:25:39:b4:27:9c:a0:e0:d5:b2:4a:2c:67:c8:21:
ce:0a:9d:5c:4c:77:42:1e:f2:49:d7:99:a9:1a:cc:49:1a:0a:
30:eb:d9:f7:55:4f:9e:a5:d6:1c:0f:42:a2:f8:60:01:ae:34:
56:a2:08:26:27:e1:4e:df:c9:e2:78:69:74:a9:f2:63:a3:cd:
cc:2a:00:7d:09:09:c1:64:ca:f4:e2:4e:ce:23:87:8c:ed:8d:
94:14:b6:c1:9b:bc:c5:46:dd:5f:0a:0c:02:34:a3:f4:b1:f2:
a6:56:af:ea:dd:31:45:fb:b6:92:e1:48:bc:e7:b6:4d:ed:df:
ce:0e:f3:aa:6e:8d:b4:f1:fe:42:b3:c2:ec:7a:17:c4:33:ee:
8a:5d:79:28:51:fe:49:66:92:f7:35:c6:64:84:4b:5e:3b:f2:
69:5c:5d:f1:19:7d:46:f4:2d:b8:ea:5f:ae:60:54:84:44:ef:
02:63:18:7b:b9:ca:61:9c:57:35:f0:69:ca:e4:ed:35:cf:28:
c5:34:1b:0f
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAZ2qRz0p8dv9JEfT9AISyyhXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNDIwMDk0NDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTdiNzNkOWZkNmU5NGRmZTcxN2MwZWJjNmU3ZWYzYTFhYzQzNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwjDr4z1g69TMr3/19GQiGVI5KkC
aPVV6Ez/jWI1fz2UUKiCNQ0c6OcVeriR2XGyqYm0shKEl6zppP/ZW+Qtg+dCI2na
70i7Sv0jVkRvyLtFNrwq3cJvGMS8mft/G9OPMjMJYNJ+PXcO0Kqu7QKA/V5+AWoy
MG3bNmPIkSVbLBrbrdUnCnqrX2ghYJH8U5wVZSEzVBSFyGNbxcozNq7V35HH7oKM
eOSP0jxO7lnkKSw+rP8aAnUGWfVXSFpFjd950Z2ZDEvVjgtfi+vsUvN4fQny+j6M
+jDmb3g53QuRE7aJYCZgzXiY8w25OyUwaZsoZDDlOZtD1HLbzib4YKzavwIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFJ57c9n9bpTf5xfA68bn7zoaxDRNMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbm50ejJmMXVsTl9uRjhEcnh1ZnZPaHJFTkUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTBDBAIAAjA9AwcAKgYRgAEA
AwcAKgotBwBEAwcAKgotBwDMAwUAKg4ahAMHACoPfQAAAQMHACoPvAChxAMHACoT
yQAAZjANBgkqhkiG9w0BAQsFAAOCAQEAdUStfnnh0I4PtfwNbIBV+hm4JFcHmaoq
oV9M0/BVWx7UbehltBnWCLUQyhduMqoV87m1xvaJp0VcNCU5tCecoODVskosZ8gh
zgqdXEx3Qh7ySdeZqRrMSRoKMOvZ91VPnqXWHA9CovhgAa40VqIIJifhTt/J4nhp
dKnyY6PNzCoAfQkJwWTK9OJOziOHjO2NlBS2wZu8xUbdXwoMAjSj9LHyplav6t0x
Rfu2kuFIvOe2Te3fzg7zqm6NtPH+QrPC7HoXxDPuil15KFH+SWaS9zXGZIRLXjvy
aVxd8Rl9RvQtuOpfrmBUhETvAmMYe7nKYZxXNfBpyuTtNc8oxTQbDw==
-----END CERTIFICATE-----
Generated at Tue Apr 21 09:25:34 2026 by rpki-client