Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sk5YXsc7Q80-TpZlX4uIM-sPFDw.roa
File: sk5YXsc7Q80-TpZlX4uIM-sPFDw.roa (raw, json)
Hash identifier: W8+fsnsF8jPvckWM+2bqon0DDhVhVSdeOTVE5ytOlOU=
Subject key identifier: B2:4E:58:5E:C7:3B:43:CD:3E:4E:96:65:5F:8B:88:33:EB:0F:14:3C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A062A2078F582E9EA8FB6FD6AECECAEDCD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sk5YXsc7Q80-TpZlX4uIM-sPFDw.roa
Signing time: Wed 02 Sep 2026 14:59:40 +0000
ROA not before: Wed 02 Sep 2026 14:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402899
IP address blocks: 2a10:3240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:a2:07:8f:58:2e:9e:a8:fb:6f:d6:ae:ce:ca:ed:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 2 14:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b24e585ec73b43cd3e4e96655f8b8833eb0f143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:8b:ae:35:54:96:97:6b:c7:1b:4b:28:30:
7c:fa:22:dc:4c:63:95:e3:ad:62:d5:28:fa:0c:78:
4c:39:9d:40:2a:ee:9f:c2:63:58:4b:2c:5e:f7:c3:
97:c4:47:ea:c9:76:7a:aa:1b:65:3e:5e:d6:01:95:
0d:1e:48:b9:0f:91:12:72:21:a8:2f:9e:cf:cb:06:
77:57:36:ad:ad:3d:fc:6c:c4:ff:09:12:af:bc:2c:
ea:30:9c:00:79:79:76:d2:6c:49:41:7e:40:52:ca:
81:3e:73:6d:99:3e:42:a1:e3:16:34:ed:04:5d:76:
60:b0:88:b1:e6:47:5d:b7:9b:fb:3b:4a:30:18:b1:
50:d5:f6:e1:6a:6a:3a:79:a6:12:f9:8a:91:ae:2b:
3d:45:7f:07:68:c7:24:66:80:5a:4a:84:85:4a:34:
33:f5:c8:8f:b3:63:e3:25:f2:fd:10:03:ca:86:06:
63:c9:5e:8a:f1:29:30:b0:b1:73:e0:f6:c8:4e:7f:
c1:f8:96:e8:b4:aa:03:a4:eb:4e:dc:b9:fe:e3:a8:
44:35:be:fe:00:04:7c:22:29:fb:67:bc:13:8f:9a:
82:17:25:1a:da:a8:92:58:be:64:a1:1c:b8:85:2c:
bc:8b:fd:1d:f5:17:4d:94:be:da:42:2e:a7:6e:c0:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4E:58:5E:C7:3B:43:CD:3E:4E:96:65:5F:8B:88:33:EB:0F:14:3C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sk5YXsc7Q80-TpZlX4uIM-sPFDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3240::/29
Signature Algorithm: sha256WithRSAEncryption
09:50:fe:64:d7:c0:93:34:aa:a9:b1:9a:72:d2:2e:ce:7a:7a:
fc:b4:fb:04:65:1e:f3:cc:b5:d6:40:b1:a6:8f:e1:5a:8a:f3:
74:de:98:41:f2:08:66:8e:a9:cc:84:45:07:78:25:9a:03:89:
2a:87:02:fd:99:51:1e:0b:71:19:ea:28:2e:e2:13:66:70:4e:
1e:14:fc:42:8e:d3:65:53:9b:35:02:a3:b5:e4:eb:15:1e:bd:
f6:2d:0d:ca:4c:ff:6e:5c:c1:c2:4f:c2:ed:2d:b5:57:4d:0c:
56:69:06:95:3e:76:83:2d:d3:87:23:da:8a:12:08:98:31:5e:
71:9d:18:9e:75:69:55:6e:a7:31:d2:ed:41:fb:ee:f1:df:f6:
4c:d1:ab:6e:64:ac:b1:5e:23:a7:9f:60:4d:cd:85:eb:d1:70:
64:0c:eb:cb:a9:e3:b3:a9:e9:d2:63:e3:b3:17:0d:69:3e:5e:
33:6f:e6:63:bb:a6:09:93:51:61:2b:20:cc:3c:2a:d6:a9:b6:
9c:36:5c:c1:34:bf:a9:3f:81:a7:3a:bc:5d:b1:c2:42:26:6c:
90:d1:7f:5a:21:bb:cf:0a:7c:cd:6b:05:e1:b5:57:59:e5:2a:
e6:25:0f:c0:6f:2c:15:38:23:4d:55:ef:ac:36:70:f1:82:b9:
c3:77:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:30 2026 by rpki-client