Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xnon8fcIF6q0NhsL3y9mijoDpVs.roa
File: xnon8fcIF6q0NhsL3y9mijoDpVs.roa (raw, json)
Hash identifier: /B0Hl+LDxSigqGkgWNEX9XBqCPMdAwAMi68hgV1i8pM=
Subject key identifier: C6:7A:27:F1:F7:08:17:AA:B4:36:1B:0B:DF:2F:66:8A:3A:03:A5:5B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CB7FA1AD13419C95E7B2A72D865DB93EA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xnon8fcIF6q0NhsL3y9mijoDpVs.roa
Signing time: Wed 04 Mar 2026 08:32:27 +0000
ROA not before: Wed 04 Mar 2026 08:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10111
IP address blocks: 2a06:4d80::/29 maxlen: 29
2a0e:8880::/29 maxlen: 29
2a0f:29c0::/29 maxlen: 29
2a0f:2f40::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:ac00::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a10:37c0::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5200::/29 maxlen: 29
2a10:6840::/29 maxlen: 29
2a11:4c40::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a12:ba00::/29 maxlen: 29
2a13:1480::/29 maxlen: 29
2a13:df00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:fa:1a:d1:34:19:c9:5e:7b:2a:72:d8:65:db:93:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 4 08:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c67a27f1f70817aab4361b0bdf2f668a3a03a55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:95:e0:8b:f0:47:1b:6f:6d:61:ad:81:0e:
15:a6:56:e1:42:b5:71:4c:74:b3:b0:1e:eb:8d:41:
0c:a2:1f:c7:f4:f3:9b:87:d6:3d:2a:e1:22:e2:70:
b1:7c:04:6a:aa:3d:6a:85:ff:b8:4c:7a:e1:e2:78:
4c:29:89:b0:17:80:4c:fd:59:b2:fa:ac:e4:7f:03:
50:c4:ca:7c:4a:07:dc:c0:b3:50:7f:31:28:52:e7:
76:5e:a7:e2:3d:9f:df:6a:4b:8a:37:f3:28:cb:14:
77:a6:0e:a0:3f:5e:08:e8:fc:74:09:67:66:97:99:
52:01:58:bd:fe:d5:a5:3c:f0:28:9e:c7:51:c9:0d:
25:f6:5a:6b:91:d6:2d:02:0d:83:1f:1b:27:73:ba:
de:da:7d:6c:33:12:a5:5c:72:84:ac:34:b7:f0:e2:
94:e0:3a:e7:c3:59:39:c8:3c:e5:03:88:e4:6b:fa:
29:98:12:f7:a8:ee:2c:b1:97:8f:ea:d2:f5:69:0b:
52:d6:d4:0c:17:0e:03:25:67:ea:4f:4c:ea:07:d4:
6d:af:15:b8:ec:f7:20:c7:a4:02:3b:0b:cd:a1:23:
75:dc:1b:ee:f0:a3:86:22:32:1f:dd:7c:63:2d:a3:
6a:21:08:0f:2a:dd:fb:6b:0c:e8:7c:83:19:7c:f3:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7A:27:F1:F7:08:17:AA:B4:36:1B:0B:DF:2F:66:8A:3A:03:A5:5B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xnon8fcIF6q0NhsL3y9mijoDpVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4d80::/29
2a0e:8880::/29
2a0f:29c0::/29
2a0f:2f40::/29
2a0f:7280::/29
2a0f:ac00::/29
2a0f:e4c0::/29
2a10:37c0::/29
2a10:3840::/29
2a10:5200::/29
2a10:6840::/29
2a11:4c40::/29
2a11:5c80::/29
2a12:ba00::/29
2a13:1480::/29
2a13:df00::/29
Signature Algorithm: sha256WithRSAEncryption
11:7c:e6:60:ef:de:34:d3:47:50:ee:09:a5:8f:dd:f0:13:1b:
60:96:79:de:65:4d:bc:9e:0b:c3:ed:66:79:f5:f1:b1:78:2a:
6e:0e:6d:33:b0:bf:44:a6:d8:e1:e9:e0:53:60:4a:35:c4:2b:
84:13:bb:1d:74:99:15:50:37:6b:b6:31:a2:73:0a:43:16:58:
e5:bd:06:7c:82:6d:54:f3:d8:67:0b:ea:89:7f:cd:7d:40:53:
18:2d:16:c5:ee:44:4d:6a:21:42:d2:4b:bf:bf:d6:86:0b:70:
b2:48:f6:fd:2e:9b:fe:40:f0:70:ec:d9:bf:56:7c:17:01:b3:
e5:52:31:e3:b4:57:e7:31:b4:94:d7:fa:94:32:9c:50:ec:dc:
20:b8:25:5f:b3:8c:aa:8c:8f:ec:74:54:01:4f:14:56:5b:ff:
75:8c:41:84:f4:dc:58:a5:2d:db:44:90:7f:98:49:30:a3:7b:
b3:b2:78:ff:c1:5e:be:b9:31:04:59:ee:1a:f3:a7:73:00:ea:
5e:78:7a:a0:aa:b6:61:f8:93:cd:12:e0:dc:e3:04:bc:c2:aa:
8b:c4:ab:57:ee:a4:e0:c4:50:49:88:f8:1f:05:90:1a:23:8e:
ab:08:40:28:98:ca:4f:4f:6b:df:1e:71:ea:0b:d0:85:d3:ef:
e6:9c:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 19:07:15 2026 by rpki-client