Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fNhAHreWJc9o-MsyJb47AZZ66as.roa
File: fNhAHreWJc9o-MsyJb47AZZ66as.roa (raw, json)
Hash identifier: LGDasRep8zrCxmsTok8QzUpESu/0aLVQ8yNLwJARCQ0=
Subject key identifier: 7C:D8:40:1E:B7:96:25:CF:68:F8:CB:32:25:BE:3B:01:96:7A:E9:AB
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019C703C6A6B3F905E5DB68D7241BA563485
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fNhAHreWJc9o-MsyJb47AZZ66as.roa
Signing time: Wed 18 Feb 2026 10:12:13 +0000
ROA not before: Wed 18 Feb 2026 10:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:8cc0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b4c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e2c0::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:640::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2800::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:cf80::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:3c:6a:6b:3f:90:5e:5d:b6:8d:72:41:ba:56:34:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Feb 18 10:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cd8401eb79625cf68f8cb3225be3b01967ae9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:38:fc:4e:ef:f2:47:86:83:c5:ba:c4:7e:ea:
29:49:c8:1c:f7:15:68:95:bf:e3:7c:d4:61:c8:57:
00:83:fe:33:f8:52:f0:98:45:dc:c1:22:94:42:b7:
ad:a8:78:39:a8:42:54:89:7b:df:3b:e4:96:87:cf:
11:59:01:3e:72:3b:09:22:aa:bf:d4:95:87:7d:3e:
76:d1:ca:87:5f:92:7a:d9:2e:cc:96:2c:bf:11:da:
d3:c1:b1:ec:c2:e3:00:28:ff:9b:2b:a5:57:7e:5c:
26:8b:25:4c:aa:63:40:92:f8:22:39:af:a2:19:a3:
81:31:a3:a0:63:7d:bb:5f:7e:8d:0c:7c:73:17:9d:
cf:3c:6d:82:84:a4:a5:1c:74:8f:0c:b1:da:d1:c2:
75:9e:e7:57:f1:a8:90:96:fc:73:80:fa:2d:77:1c:
f1:d4:53:a5:9a:72:0c:62:0f:d4:5d:31:ae:6b:07:
b0:10:91:5b:cf:72:97:f1:0f:05:08:b9:38:fe:f8:
5d:ec:d8:fa:f9:26:eb:0f:58:04:e3:29:5f:8f:49:
be:de:9d:f1:86:6c:a9:e0:5a:fe:10:05:72:b8:22:
c6:96:33:18:3c:4b:ab:89:cf:9c:b0:03:09:94:2f:
52:60:73:7d:41:7f:ca:df:5f:cc:f3:3b:ba:07:a8:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D8:40:1E:B7:96:25:CF:68:F8:CB:32:25:BE:3B:01:96:7A:E9:AB
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fNhAHreWJc9o-MsyJb47AZZ66as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8cc0::/29
2a0d:ad40::/29
2a0d:b840::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:e180::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:2d00::/29
2a11:4540::/29
2a11:4f00::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:b0c0::/29
2a11:b4c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e2c0::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:640::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2800::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8a00::/29
2a12:9200::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:cf80::/29
2a12:d080::/29
2a12:d200::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
92:be:25:da:84:30:06:9f:a1:96:f5:70:13:9a:33:56:26:26:
55:3d:99:04:d0:6f:ba:e5:a1:63:90:2f:8d:be:1f:f2:dc:fd:
68:67:65:8c:93:f5:ef:09:a7:c8:f3:72:e2:45:f2:9f:4d:b9:
74:9d:2c:4c:8a:7a:7a:ce:40:b2:b1:60:06:18:76:98:97:8d:
f4:cd:fe:d2:de:dd:e8:f9:08:f3:8d:87:ae:81:7e:fb:b6:f9:
b1:77:f1:7b:6a:70:4b:b4:79:01:0f:0d:83:2c:b2:b8:ef:f7:
22:f5:b7:7d:d8:6d:69:4e:19:71:96:05:4c:aa:e7:96:7c:1c:
80:02:f5:a3:fb:ad:ea:c8:4f:79:94:d9:00:13:c5:8b:62:cc:
eb:76:13:c0:34:78:fc:41:9c:5c:98:5a:36:00:99:1f:bd:00:
81:92:d4:d3:aa:4d:f3:9d:27:52:8e:6a:d3:27:e9:f2:b5:97:
16:f2:3e:df:e9:f4:7f:14:46:13:77:97:c8:e0:f1:b4:bc:22:
3e:9a:64:d0:85:36:b3:25:b6:da:4a:77:f7:2f:c2:41:aa:f2:
9a:fd:98:99:14:a8:0b:83:44:57:70:94:25:64:30:38:ad:25:
c7:2a:3a:b3:dd:c7:14:bc:6e:aa:63:67:4a:ff:af:26:d8:db:
df:71:b1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:10 2026 by rpki-client