Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pEaLhY_GTWHkIb120eKvVONuWOc.roa
File: pEaLhY_GTWHkIb120eKvVONuWOc.roa (raw, json)
Hash identifier: lFOy4+opWk/o2dvVri+FX5cu8cFU5cR9lnrHLcoi0H4=
Subject key identifier: A4:46:8B:85:8F:C6:4D:61:E4:21:BD:76:D1:E2:AF:54:E3:6E:58:E7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EF4EEDF7104DAB20B8B8ED92545987EC9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pEaLhY_GTWHkIb120eKvVONuWOc.roa
Signing time: Tue 23 Jun 2026 14:42:35 +0000
ROA not before: Tue 23 Jun 2026 14:42:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a05:b300::/29 maxlen: 32
2a06:1184:11::/48 maxlen: 48
2a06:35c3:100::/48 maxlen: 48
2a09:17c1:4a::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0c:7882:2::/48 maxlen: 48
2a0e:15c7:101::/48 maxlen: 48
2a0e:1a83:99::/48 maxlen: 48
2a0e:c786:122::/48 maxlen: 48
2a0e:c787:1000::/48 maxlen: 48
2a0e:f600:2a::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:6::/48 maxlen: 48
2a0f:18c0::/29 maxlen: 32
2a0f:1e07::/32 maxlen: 32
2a0f:1e80:1986::/48 maxlen: 48
2a0f:1fc0::/29 maxlen: 32
2a0f:3046:85::/48 maxlen: 48
2a0f:3047:fe48::/48 maxlen: 48
2a0f:31c7::/32 maxlen: 32
2a0f:3d80:1312::/48 maxlen: 48
2a0f:3e80::/29 maxlen: 29
2a0f:7d00:100::/48 maxlen: 48
2a0f:bc04:1004::/48 maxlen: 48
2a0f:da40::/29 maxlen: 32
2a0f:de40::/29 maxlen: 32
2a0f:e1c0:1312::/48 maxlen: 48
2a0f:e1c7:77::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e740::/29 maxlen: 32
2a0f:e7c7:b4::/48 maxlen: 48
2a0f:ea44:55::/48 maxlen: 48
2a0f:ea44:acab::/48 maxlen: 48
2a0f:ec00::/29 maxlen: 29
2a10:4e00::/29 maxlen: 32
2a10:5400::/29 maxlen: 29
2a10:67c2:d6::/48 maxlen: 48
2a10:67c5:2::/48 maxlen: 48
2a10:6f00::/29 maxlen: 32
2a10:7700::/29 maxlen: 32
2a12:ac46:77::/48 maxlen: 48
2a12:ac46:99::/48 maxlen: 48
2a12:ecc0:11::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a13:18c5:11::/48 maxlen: 48
2a13:18c6:101::/48 maxlen: 48
2a13:18c6:8512::/48 maxlen: 48
2a13:2c40::/29 maxlen: 32
2a13:3080::/29 maxlen: 29
2a13:8100::/29 maxlen: 32
2a13:8c86:88::/48 maxlen: 48
2a13:8c86:10a::/48 maxlen: 48
2a13:9180::/29 maxlen: 32
2a13:9285:100::/48 maxlen: 48
2a13:c900:120::/48 maxlen: 48
2a13:e100:323::/48 maxlen: 48
2a13:e102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:ee:df:71:04:da:b2:0b:8b:8e:d9:25:45:98:7e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 23 14:42:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4468b858fc64d61e421bd76d1e2af54e36e58e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:2d:b4:8b:1c:18:f6:ed:8f:86:f0:dc:29:
16:c1:bb:24:c6:99:09:a1:ce:2c:fc:bc:c6:21:cf:
4b:46:40:bf:41:5a:ae:7f:a6:be:ff:9d:0f:b7:f5:
74:7f:a5:66:c4:5f:69:6c:c3:53:2e:00:41:6a:b2:
42:67:66:c7:d8:c5:3a:b5:77:c4:33:20:35:d3:f9:
2e:ff:2b:4a:75:3d:ba:3a:c3:68:44:13:6b:4b:c4:
db:3c:ec:9a:a4:80:e9:31:59:ff:4b:36:fc:f3:4e:
eb:e1:a1:1b:d2:72:e8:02:4d:e8:71:d1:50:c3:c2:
86:e4:77:17:44:92:af:31:5e:d0:05:32:e2:a9:2d:
0f:f4:ea:6f:1c:5b:5b:e2:bb:9d:69:79:44:78:2c:
e9:d3:bc:99:e7:66:8e:43:79:0c:11:a7:ac:b8:c6:
6f:d8:f3:c6:26:4a:64:ba:8c:b2:a7:11:74:52:66:
cb:cb:0f:b1:9d:44:14:bb:29:a5:66:ce:83:6c:0a:
70:e0:29:cf:14:fa:ec:45:36:ab:b2:b2:09:10:07:
96:ea:d5:b3:2b:0f:32:e8:08:15:bc:1a:1b:42:04:
77:f1:d0:e6:ec:9e:d1:65:a1:e9:d2:1a:be:f2:8c:
8e:5b:e7:55:83:e2:58:49:92:17:63:e3:57:e2:71:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:46:8B:85:8F:C6:4D:61:E4:21:BD:76:D1:E2:AF:54:E3:6E:58:E7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pEaLhY_GTWHkIb120eKvVONuWOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:1184:11::/48
2a06:35c3:100::/48
2a09:17c1:4a::/48
2a0a:2d06:66::/48
2a0c:7882:2::/48
2a0e:15c7:101::/48
2a0e:1a83:99::/48
2a0e:c786:122::/48
2a0e:c787:1000::/48
2a0e:f600:2a::/48
2a0f:1206:66::/48
2a0f:1584:6::/48
2a0f:18c0::/29
2a0f:1e07::/32
2a0f:1e80:1986::/48
2a0f:1fc0::/29
2a0f:3046:85::/48
2a0f:3047:fe48::/48
2a0f:31c7::/32
2a0f:3d80:1312::/48
2a0f:3e80::/29
2a0f:7d00:100::/48
2a0f:bc04:1004::/48
2a0f:da40::/29
2a0f:de40::/29
2a0f:e1c0:1312::/48
2a0f:e1c7:77::/48
2a0f:e207:fd38::/48
2a0f:e740::/29
2a0f:e7c7:b4::/48
2a0f:ea44:55::/48
2a0f:ea44:acab::/48
2a0f:ec00::/29
2a10:4e00::/29
2a10:5400::/29
2a10:67c2:d6::/48
2a10:67c5:2::/48
2a10:6f00::/29
2a10:7700::/29
2a12:ac46:77::/48
2a12:ac46:99::/48
2a12:ecc0:11::/48
2a12:ecc0:3e2::/48
2a13:18c5:11::/48
2a13:18c6:101::/48
2a13:18c6:8512::/48
2a13:2c40::/29
2a13:3080::/29
2a13:8100::/29
2a13:8c86:88::/48
2a13:8c86:10a::/48
2a13:9180::/29
2a13:9285:100::/48
2a13:c900:120::/48
2a13:e100:323::/48
2a13:e102:1::/48
Signature Algorithm: sha256WithRSAEncryption
4a:f4:12:99:1e:25:f7:fe:13:99:fe:ce:c6:93:09:41:2e:8b:
0a:aa:00:63:a9:51:ed:3d:4b:a3:88:55:bb:e9:aa:3f:7e:bc:
53:12:bf:10:de:1a:12:8b:84:fd:a3:40:5e:dc:3d:50:fa:27:
bb:e2:d3:eb:34:3b:3f:a0:d4:bd:37:91:fe:06:f0:7d:e2:1f:
9d:89:f8:ce:00:e0:83:31:6b:3c:53:cf:0f:37:5a:53:8c:69:
3a:f2:f4:dd:1f:e1:a5:79:40:0c:af:ff:54:35:85:33:c5:da:
f6:db:2d:ff:fc:7e:68:95:60:09:a5:7f:e4:6b:55:78:ec:a3:
a5:ab:d4:d9:c1:c5:23:46:0b:da:05:49:68:b4:d6:ed:38:e1:
ed:20:c1:e7:b2:7a:ff:a1:01:bf:42:f5:aa:4b:c5:fe:a3:e0:
17:f6:89:43:d9:ac:55:06:1d:96:6f:43:f3:23:19:42:1d:fa:
86:fd:f8:e6:42:59:b9:a6:0d:42:ce:fe:5c:dc:07:1e:4a:ba:
68:b2:2a:2a:dd:0d:7b:e5:62:78:76:09:31:a7:4f:9a:a9:f6:
eb:92:0e:e7:81:e0:33:37:2d:e2:e3:70:f9:f2:52:86:85:6c:
53:31:6a:08:59:25:61:9f:63:41:c4:67:59:36:04:f8:09:49:
07:e0:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:54 2026 by rpki-client