Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yFQ7mDB5mAaUOPfqIE1CUhm956k.roa
File: yFQ7mDB5mAaUOPfqIE1CUhm956k.roa (raw, json)
Hash identifier: e6o+4sf88iZqb5nnMdA4vrxaU4mqozq0goRJr6JNTHQ=
Subject key identifier: C8:54:3B:98:30:79:98:06:94:38:F7:EA:20:4D:42:52:19:BD:E7:A9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A013891D8CA6CE22D58CEB306C87127735
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yFQ7mDB5mAaUOPfqIE1CUhm956k.roa
Signing time: Tue 18 Aug 2026 06:22:28 +0000
ROA not before: Tue 18 Aug 2026 06:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396362
IP address blocks: 2a0f:1e80:1::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:e6c5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:89:1d:8c:a6:ce:22:d5:8c:eb:30:6c:87:12:77:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 18 06:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8543b98307998069438f7ea204d425219bde7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:70:be:aa:c7:3c:4a:91:3b:26:0d:58:6e:
02:4b:33:cb:ea:d4:58:ce:b0:3f:63:17:db:c2:24:
e2:b2:35:3c:ad:0d:dd:4e:99:b2:ec:40:df:d1:50:
e0:af:81:f8:50:22:d1:b6:d1:56:3d:46:af:15:07:
95:a6:1a:92:c2:d8:c5:e4:17:c4:31:17:e7:1b:ee:
86:9b:18:71:5e:18:4c:e1:e4:48:c4:9f:0d:07:f2:
00:7a:9f:e3:1a:c0:2d:4f:73:1a:1c:28:90:c7:0f:
f1:b8:04:bb:cb:01:1d:8d:68:bb:da:04:e8:0b:49:
ae:f9:3a:dc:07:3a:9d:8f:4f:f7:04:ca:56:5a:65:
85:84:37:9d:0f:26:c1:9c:85:c5:dd:5e:02:72:7d:
f2:ab:d8:ac:1a:22:b2:6a:30:a0:10:ee:20:17:16:
e5:0c:fc:4e:64:e6:be:8c:bd:60:b4:fe:32:2c:13:
3b:85:21:8f:94:a6:a2:88:de:8a:7d:4b:a2:97:b6:
71:61:98:a6:8e:00:23:1a:36:be:af:96:17:7b:e4:
8a:5e:cb:27:25:c1:a2:d2:16:86:b3:09:33:fe:93:
21:a5:9b:e0:85:ab:0d:09:40:ee:36:51:ae:38:0a:
4f:5c:5b:36:0c:86:e2:46:1f:71:1d:a4:72:c4:c3:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:3B:98:30:79:98:06:94:38:F7:EA:20:4D:42:52:19:BD:E7:A9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yFQ7mDB5mAaUOPfqIE1CUhm956k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1e80:1::/48
2a0f:3d87::/32
2a0f:e6c5::/32
Signature Algorithm: sha256WithRSAEncryption
4a:16:c4:1b:47:13:80:16:ea:fb:79:b5:9b:13:df:eb:05:6c:
62:4f:db:d0:e7:a5:ae:93:4d:92:f8:03:d1:d2:18:77:af:4f:
2d:49:c4:69:be:d9:2c:92:09:3f:f3:06:5a:a3:0c:07:24:64:
c5:b4:e1:86:7a:55:bc:0c:a4:3f:cc:96:a3:86:91:6d:30:0e:
44:55:a0:71:d6:f5:0e:78:98:57:0f:62:fd:da:cd:31:31:32:
46:46:e7:dc:40:41:e9:8d:ed:74:41:9d:f1:fd:92:11:68:51:
c0:de:38:51:8a:39:cf:26:b4:79:bf:6f:32:a7:4b:bf:fb:21:
85:d1:ad:71:7d:93:b9:c7:1e:d0:1c:0a:af:be:ed:47:bd:0b:
11:42:d4:9e:ea:68:a8:29:07:61:2c:9c:47:37:8b:40:97:92:
86:fc:c9:ab:b2:83:f4:ef:50:c0:3e:cd:2f:1b:25:19:cf:f6:
d2:f7:18:ae:0f:75:fa:a4:bb:d3:c0:d9:bf:5c:fc:59:83:74:
af:9f:70:27:9a:64:db:95:c5:68:a8:78:24:2b:05:36:81:0e:
db:2e:5e:7a:02:83:0a:19:6d:c3:ba:6a:ec:71:a9:2b:b6:b4:
e1:65:3a:f3:51:61:09:82:06:4b:11:ee:80:46:6a:fd:72:c5:
89:82:0e:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaATiR2Mps4i1YzrMGyHEnc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODE4MDYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODU0M2I5ODMwNzk5ODA2OTQzOGY3ZWEyMDRkNDI1MjE5YmRlN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R1wvqrHPEqROyYNWG4CSzPL6tRY
zrA/YxfbwiTisjU8rQ3dTpmy7EDf0VDgr4H4UCLRttFWPUavFQeVphqSwtjF5BfE
MRfnG+6GmxhxXhhM4eRIxJ8NB/IAep/jGsAtT3MaHCiQxw/xuAS7ywEdjWi72gTo
C0mu+TrcBzqdj0/3BMpWWmWFhDedDybBnIXF3V4Ccn3yq9isGiKyajCgEO4gFxbl
DPxOZOa+jL1gtP4yLBM7hSGPlKaiiN6KfUuil7ZxYZimjgAjGja+r5YXe+SKXssn
JcGi0haGswkz/pMhpZvghasNCUDuNlGuOApPXFs2DIbiRh9xHaRyxMOY0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMhUO5gweZgGlDj36iBNQlIZveepMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEveUZRN21EQjVtQWFVT1BmcUlFMUNVaG05NTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXAwcAKg8egAAB
AwUAKg89hwMFACoP5sUwDQYJKoZIhvcNAQELBQADggEBAEoWxBtHE4AW6vt5tZsT
3+sFbGJP29Dnpa6TTZL4A9HSGHevTy1JxGm+2SySCT/zBlqjDAckZMW04YZ6VbwM
pD/MlqOGkW0wDkRVoHHW9Q54mFcPYv3azTExMkZG59xAQemN7XRBnfH9khFoUcDe
OFGKOc8mtHm/bzKnS7/7IYXRrXF9k7nHHtAcCq++7Ue9CxFC1J7qaKgpB2EsnEc3
i0CXkob8yauyg/TvUMA+zS8bJRnP9tL3GK4Pdfqku9PA2b9c/FmDdK+fcCeaZNuV
xWioeCQrBTaBDtsuXnoCgwoZbcO6auxxqSu2tOFlOvNRYQmCBksR7oBGav1yxYmC
Dn8=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:46 2026 by rpki-client