Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rPkNtx9sXd-Rd8oCgmYfCmVYZtk.roa
File: rPkNtx9sXd-Rd8oCgmYfCmVYZtk.roa (raw, json)
Hash identifier: fZj/9FNDPDgNMenJ0u2ieDZaKGulLXSCTyMCShQ2h1A=
Subject key identifier: AC:F9:0D:B7:1F:6C:5D:DF:91:77:CA:02:82:66:1F:0A:65:58:66:D9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D1A799A2CCE08230192534B887300D271
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rPkNtx9sXd-Rd8oCgmYfCmVYZtk.roa
Signing time: Mon 23 Mar 2026 11:34:30 +0000
ROA not before: Mon 23 Mar 2026 11:34:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 2a07:a300::/29 maxlen: 29
2a13:d44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:79:9a:2c:ce:08:23:01:92:53:4b:88:73:00:d2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 23 11:34:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acf90db71f6c5ddf9177ca0282661f0a655866d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:4b:f7:9c:7a:33:48:80:ed:69:ba:45:b7:
80:d7:26:ac:35:f4:43:35:83:c5:5d:fc:a2:aa:0d:
c6:c1:5a:b4:ad:01:b0:bc:34:2e:01:5e:89:4a:f9:
e8:5d:26:85:5f:fd:51:77:42:de:71:60:b1:b3:d1:
dd:e4:3d:cc:1a:bb:c7:60:b9:75:f5:4a:e0:e3:c1:
9e:53:82:90:4b:ba:d8:85:a7:d3:bb:f5:21:0d:bf:
a4:f9:f1:3b:cd:54:48:09:48:e3:3f:9b:f3:0c:6d:
50:e1:70:69:42:f4:ba:4e:5a:ba:b7:3d:dc:5e:81:
f6:6e:66:96:2e:94:b2:50:aa:e9:d1:ba:8a:fc:fc:
6d:5e:95:ea:7e:7e:1e:be:54:61:18:38:22:f9:df:
88:d6:a6:49:91:93:1a:72:d5:3b:2c:f8:73:da:5f:
cc:9e:ac:39:4f:1a:03:1f:72:b0:52:e5:c1:73:76:
75:62:c8:46:64:23:29:84:be:1f:0f:0a:3a:24:40:
64:b1:ac:5f:db:05:07:13:bb:3b:20:9b:30:1c:74:
0a:a8:fc:c0:f0:7d:92:f6:9b:33:ce:89:8f:d5:41:
ef:22:51:63:cb:fb:16:6f:2a:83:ba:58:eb:5c:5d:
74:e6:76:ff:6f:60:a9:fe:63:f6:02:15:69:8a:40:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:0D:B7:1F:6C:5D:DF:91:77:CA:02:82:66:1F:0A:65:58:66:D9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rPkNtx9sXd-Rd8oCgmYfCmVYZtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a300::/29
2a13:d44::/32
Signature Algorithm: sha256WithRSAEncryption
13:9d:75:f4:ce:b6:61:cf:c6:47:9e:e4:31:25:5a:66:35:4b:
ee:ab:87:d6:2b:f1:ec:ad:30:77:f4:cf:f3:25:fc:ec:33:84:
df:a3:fb:0c:bb:7a:5e:00:aa:79:c1:27:a3:a6:66:84:ec:bf:
95:fe:f7:71:bf:82:92:bd:7f:ea:92:ab:dc:7a:60:1b:f1:a0:
3d:68:2f:20:84:a2:3c:a4:5c:b6:6b:13:44:43:0f:bd:74:d0:
1e:9b:8f:a6:99:af:b9:99:5f:31:ae:6b:98:99:54:a4:4a:24:
2d:09:9d:e9:9e:85:53:ec:aa:cf:22:77:ae:05:e2:c4:bd:8a:
1c:e0:3a:67:90:11:1e:9c:f9:ab:7c:1c:0c:8f:bf:1c:33:6a:
2d:c5:3d:7b:28:fd:7f:87:f4:6d:a0:f7:8c:37:d8:4e:d3:0c:
f3:99:e8:09:33:6b:0f:b3:ae:55:42:a0:74:5f:eb:b6:10:4e:
d4:d1:fc:ad:bf:51:5c:62:1a:8b:23:93:cb:13:d5:5e:f6:29:
3c:bd:2d:2d:77:01:ad:32:31:b9:15:4f:ed:22:70:0d:bd:64:
ee:f7:5a:6f:2d:6d:7e:ff:f3:26:87:2e:6d:07:f5:88:bd:66:
46:ca:a7:0c:ca:f2:de:9a:76:07:00:05:07:f2:de:a2:2f:92:
b7:88:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 17:18:26 2026 by rpki-client