Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yq12QJb2MvrTz3Vwo6d3vB2EAzM.roa
File: yq12QJb2MvrTz3Vwo6d3vB2EAzM.roa (raw, json)
Hash identifier: vhfpPSL9oWHoi1NEhbqLR0g5EVLzzyhSCQf0udPqFS4=
Subject key identifier: CA:AD:76:40:96:F6:32:FA:D3:CF:75:70:A3:A7:77:BC:1D:84:03:33
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E50730B3E06FC9EE149CA38242672742C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yq12QJb2MvrTz3Vwo6d3vB2EAzM.roa
Signing time: Fri 22 May 2026 16:09:37 +0000
ROA not before: Fri 22 May 2026 16:09:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 2a06:a600::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a09:17c3::/32 maxlen: 32
2a0c:d380::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0e:f207::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d86:11::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a0f:ee00::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:73:0b:3e:06:fc:9e:e1:49:ca:38:24:26:72:74:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 22 16:09:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caad764096f632fad3cf7570a3a777bc1d840333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:54:27:f9:bd:b5:8b:d1:52:15:0b:79:fa:
5f:00:a1:d2:3e:af:5b:7d:50:27:1f:cd:78:db:fe:
18:36:54:68:34:28:93:fc:f8:e6:61:ce:bb:cb:fb:
07:db:de:7c:b4:ee:a7:aa:83:b8:92:23:cf:51:ec:
5f:6a:6b:ee:39:c4:e1:d3:13:84:00:8b:09:f2:11:
1e:7d:8b:3d:a6:53:9d:e1:5d:db:3d:3a:78:3e:28:
bc:57:a6:75:4c:83:06:09:a5:5f:41:01:48:8d:5e:
e0:ff:e5:9f:3c:d4:a1:c3:cd:de:55:d6:c9:a7:07:
ad:b8:67:c3:93:ed:cb:c8:94:4b:41:12:98:46:e5:
71:80:66:b1:d5:5b:5f:f5:f9:52:90:59:5a:9b:85:
fc:5d:cc:a9:6c:11:43:f7:dc:fc:19:a7:c6:5a:98:
11:8c:cb:2e:8f:90:55:73:ae:be:60:56:28:15:46:
4f:ce:ee:e4:97:36:32:fd:77:1a:6b:8b:de:37:39:
df:6a:77:c1:2d:4f:2a:5d:12:bf:36:35:6e:38:40:
8d:d7:34:51:24:90:d2:21:ce:c3:2b:6c:0c:f1:e4:
0d:2b:64:a2:2c:40:99:9a:1d:0e:fd:b8:6b:63:d4:
4a:41:e5:d3:07:11:26:b4:92:c2:78:fd:9f:fb:1f:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AD:76:40:96:F6:32:FA:D3:CF:75:70:A3:A7:77:BC:1D:84:03:33
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yq12QJb2MvrTz3Vwo6d3vB2EAzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a600::/29
2a06:bf40::/29
2a07:95c0::/29
2a09:17c3::/32
2a0c:d380::/29
2a0d:8f80::/29
2a0e:2440::/29
2a0e:f207::/32
2a0f:3d83::/32
2a0f:3d86:11::/48
2a0f:7d01::/32
2a0f:ee00::/29
2a10:3140::/29
2a11:4e80::/29
2a12:d100::/29
2a13:2bc0::/29
2a13:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
48:ab:9a:05:03:0a:65:36:66:ee:b6:09:52:bf:b1:36:f0:7a:
df:79:59:72:b2:19:46:29:0b:c8:2e:99:4f:ad:54:8f:d8:58:
60:f3:75:9b:0e:7a:77:e3:cc:b6:09:eb:a0:56:52:9f:4b:78:
d4:55:f5:ad:5a:05:2e:f4:22:3e:20:b6:c7:94:d4:0e:d1:f5:
6c:3b:24:8c:5a:0f:da:99:15:ce:9a:a4:08:46:ee:6f:0f:c7:
bc:24:20:8d:1d:58:ba:84:48:30:a5:35:6e:be:1c:8a:c0:0f:
43:9a:72:67:5c:f3:fe:eb:e4:39:f7:0f:4c:15:af:89:06:ba:
62:17:25:a6:b2:9e:87:dc:b9:df:73:a8:ce:5c:63:42:b0:cc:
99:ab:00:f1:d8:36:af:af:f7:25:af:8a:76:2a:fe:f6:7c:4f:
34:cc:79:01:ef:12:fd:9f:8c:e9:5d:22:90:bc:9b:fc:c2:ba:
39:0f:56:9c:e8:58:95:69:64:61:7c:b6:5b:f6:3a:23:c3:32:
66:55:c5:96:76:70:e8:ef:11:e0:20:41:df:9d:fb:ae:78:c6:
4d:a1:51:c0:30:16:e7:9e:8e:41:6c:8e:7b:15:49:65:58:ae:
8d:d6:ba:53:7a:ed:29:99:ea:d9:31:7d:8b:11:dd:46:5e:5e:
f0:54:c5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:11 2026 by rpki-client