Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tkIxfWG0aIF_ce5Q0IH-uVeqwYI.roa
File: tkIxfWG0aIF_ce5Q0IH-uVeqwYI.roa (raw, json)
Hash identifier: N+KmYExu2kpoqiQ9IZ5H2nWFVanBG2B9ChjA07su3aM=
Subject key identifier: B6:42:31:7D:61:B4:68:81:7F:71:EE:50:D0:81:FE:B9:57:AA:C1:82
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A063231DB2657E5A5060500CD31F44A5F4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tkIxfWG0aIF_ce5Q0IH-uVeqwYI.roa
Signing time: Wed 02 Sep 2026 17:20:40 +0000
ROA not before: Wed 02 Sep 2026 17:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7203
IP address blocks: 2a0a:2d07:b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:23:1d:b2:65:7e:5a:50:60:50:0c:d3:1f:44:a5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 2 17:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b642317d61b468817f71ee50d081feb957aac182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:50:9a:67:4f:08:17:de:9b:9c:13:c1:fb:
c8:08:74:2b:cf:4c:60:b9:84:6e:3f:03:9d:d8:56:
ed:ea:3d:ad:e0:fb:3f:d0:f0:7a:bd:ef:b8:92:3e:
26:f6:22:0a:6a:64:52:4c:d4:96:16:8b:d6:02:7c:
48:28:a8:32:84:cf:65:a3:15:14:a8:48:d6:07:61:
cf:7a:ed:2e:18:f2:48:d4:81:54:2a:07:3e:f5:0e:
d7:54:5e:49:c8:e5:24:eb:b9:95:74:95:1f:90:cb:
7a:8b:86:56:f9:e0:7c:8f:de:b5:f2:de:16:2c:da:
96:e8:c9:bd:de:0d:6b:08:d0:9c:98:b0:d2:a6:f3:
83:80:5a:4f:e0:2d:4e:1e:d0:e4:e9:c6:02:ce:06:
d5:09:34:59:cc:3f:60:86:0c:43:10:e5:74:a4:98:
85:c7:a8:34:3c:a5:b9:ee:7a:75:3b:80:7a:9a:4a:
e1:3e:e9:6a:21:a2:48:ec:5c:97:21:30:76:40:06:
69:b4:77:06:2f:16:04:6a:a3:6e:42:2a:d7:cb:1e:
1c:b7:88:5c:6c:83:9a:7b:fc:db:7c:30:c3:60:6c:
cc:16:31:e6:31:0a:c9:70:ca:10:7b:3a:41:b4:e4:
62:e6:72:ea:38:27:da:8d:a3:9b:aa:1b:53:6f:61:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:31:7D:61:B4:68:81:7F:71:EE:50:D0:81:FE:B9:57:AA:C1:82
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tkIxfWG0aIF_ce5Q0IH-uVeqwYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d07:b3::/48
Signature Algorithm: sha256WithRSAEncryption
7a:0e:a6:52:fb:65:42:86:42:75:40:7a:ff:17:e1:ad:db:ca:
65:53:bb:f9:55:1c:e2:fd:e6:dd:49:32:ea:4a:68:71:13:b3:
92:b7:16:0f:47:71:e2:74:11:48:f5:f5:35:e8:7c:33:53:4e:
a3:64:3d:c8:fa:2f:2f:65:f6:fb:9a:bb:c8:84:b7:10:f8:42:
f7:b8:ce:cb:8f:eb:7e:69:e0:0d:4c:2a:1f:e0:63:e2:ea:25:
40:2a:67:bc:cf:02:c9:7a:79:59:1b:0e:53:06:2e:8d:cd:97:
9e:87:7f:14:63:41:8b:00:4c:a4:ea:63:65:e8:3b:45:ce:ed:
64:13:88:f6:1c:77:e1:6f:34:48:36:4d:9f:ff:7a:f5:c9:57:
e0:7b:7d:b2:85:46:21:12:58:c4:80:85:a0:2f:67:e8:d9:c5:
fc:dc:b8:7e:de:76:0f:d2:d6:d8:ff:8f:c0:c5:3d:9f:45:92:
b0:bb:87:49:49:72:e9:77:ae:44:16:55:62:8e:d0:d5:fa:8b:
71:79:9d:85:77:5f:d8:f7:3a:b8:ce:a4:09:15:22:21:34:0c:
0d:95:47:55:c5:72:da:0e:09:5c:47:7d:e4:07:4b:40:80:d1:
44:29:de:18:1b:78:a5:8e:23:99:38:fc:bf:24:37:12:82:ca:
83:42:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:25 2026 by rpki-client