Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5SKms6JCErDPkGr3jfWB5f4Z8b0.roa
File: 5SKms6JCErDPkGr3jfWB5f4Z8b0.roa (raw, json)
Hash identifier: ++yvyqAk82xlEW1IaKy5xp50R2Zez32jDkPKzqJbXS8=
Subject key identifier: E5:22:A6:B3:A2:42:12:B0:CF:90:6A:F7:8D:F5:81:E5:FE:19:F1:BD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C76372C93A0FFD00A98731C83030636AF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5SKms6JCErDPkGr3jfWB5f4Z8b0.roa
Signing time: Thu 19 Feb 2026 14:04:13 +0000
ROA not before: Thu 19 Feb 2026 14:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a05:b300::/29 maxlen: 32
2a06:1184:11::/48 maxlen: 48
2a06:35c3:100::/48 maxlen: 48
2a09:17c1:4a::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0c:7882:2::/48 maxlen: 48
2a0e:15c7:101::/48 maxlen: 48
2a0e:1a83:99::/48 maxlen: 48
2a0e:c786:122::/48 maxlen: 48
2a0e:c787:1000::/48 maxlen: 48
2a0e:f600:2a::/48 maxlen: 48
2a0f:1200:10::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:6::/48 maxlen: 48
2a0f:18c0::/29 maxlen: 32
2a0f:1e07::/32 maxlen: 32
2a0f:1e80:1986::/48 maxlen: 48
2a0f:1fc0::/29 maxlen: 32
2a0f:3046:85::/48 maxlen: 48
2a0f:3047:fe48::/48 maxlen: 48
2a0f:31c7::/32 maxlen: 32
2a0f:3d80:1312::/48 maxlen: 48
2a0f:7d00:100::/48 maxlen: 48
2a0f:bc04:1004::/48 maxlen: 48
2a0f:da40::/29 maxlen: 32
2a0f:de40::/29 maxlen: 32
2a0f:e1c0:1312::/48 maxlen: 48
2a0f:e1c7:77::/48 maxlen: 48
2a0f:e202:33::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e740::/29 maxlen: 32
2a0f:e7c7:b4::/48 maxlen: 48
2a0f:ea44:55::/48 maxlen: 48
2a0f:ea44:acab::/48 maxlen: 48
2a0f:ec00::/29 maxlen: 29
2a10:4e00::/29 maxlen: 32
2a10:67c2:d6::/48 maxlen: 48
2a10:67c5:2::/48 maxlen: 48
2a10:6f00::/29 maxlen: 32
2a10:7700::/29 maxlen: 32
2a12:ac46:77::/48 maxlen: 48
2a12:ac46:99::/48 maxlen: 48
2a12:ecc0:11::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a13:18c5:11::/48 maxlen: 48
2a13:18c6:101::/48 maxlen: 48
2a13:18c6:8512::/48 maxlen: 48
2a13:2c40::/29 maxlen: 32
2a13:8100::/29 maxlen: 32
2a13:8c86:88::/48 maxlen: 48
2a13:8c86:10a::/48 maxlen: 48
2a13:9180::/29 maxlen: 32
2a13:9285:100::/48 maxlen: 48
2a13:c900:120::/48 maxlen: 48
2a13:e100:323::/48 maxlen: 48
2a13:e102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:37:2c:93:a0:ff:d0:0a:98:73:1c:83:03:06:36:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 19 14:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e522a6b3a24212b0cf906af78df581e5fe19f1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:f0:7b:e9:0d:ca:85:ac:10:a9:ff:cf:89:
4c:36:de:a9:5a:b0:f6:e3:50:c6:8e:87:25:c0:5c:
32:f0:39:b1:06:09:97:84:9e:1b:1a:22:38:51:54:
91:33:95:e7:e7:3c:e3:1e:e9:38:d6:96:c6:1a:7e:
8e:4d:d2:bb:52:3a:c5:fc:a1:1a:a5:dc:61:db:6f:
80:78:2a:8b:28:2d:0e:a2:9d:76:17:37:52:23:0f:
92:fe:27:b8:ee:06:d0:03:85:eb:ec:28:23:08:94:
fd:8b:9e:2b:c6:60:10:6c:05:b2:02:d6:69:9f:6c:
a1:83:8a:2d:60:9c:2c:5c:50:4c:2f:4b:0c:85:13:
2f:95:47:19:6c:b2:54:18:1d:54:ab:a1:12:12:de:
86:e6:56:d4:dd:10:7e:72:82:cd:fc:b3:5a:fe:99:
1b:22:0a:75:47:b0:bc:4e:1a:cd:d8:0d:0f:2e:0d:
fb:87:21:94:2c:91:59:cc:3a:41:ef:df:10:63:8c:
c1:8c:c7:74:ec:a2:13:21:cf:fd:fe:a7:f9:62:3c:
e3:15:c9:4d:32:5e:a9:d9:ae:f9:c5:e5:f4:15:46:
81:a2:26:3a:f7:55:2f:8a:0c:06:68:10:e5:74:08:
fb:b2:30:7c:16:d0:40:30:d4:0f:5e:10:76:17:d0:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:22:A6:B3:A2:42:12:B0:CF:90:6A:F7:8D:F5:81:E5:FE:19:F1:BD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5SKms6JCErDPkGr3jfWB5f4Z8b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:1184:11::/48
2a06:35c3:100::/48
2a09:17c1:4a::/48
2a0a:2d06:66::/48
2a0c:7882:2::/48
2a0e:15c7:101::/48
2a0e:1a83:99::/48
2a0e:c786:122::/48
2a0e:c787:1000::/48
2a0e:f600:2a::/48
2a0f:1200:10::/48
2a0f:1206:66::/48
2a0f:1584:6::/48
2a0f:18c0::/29
2a0f:1e07::/32
2a0f:1e80:1986::/48
2a0f:1fc0::/29
2a0f:3046:85::/48
2a0f:3047:fe48::/48
2a0f:31c7::/32
2a0f:3d80:1312::/48
2a0f:7d00:100::/48
2a0f:bc04:1004::/48
2a0f:da40::/29
2a0f:de40::/29
2a0f:e1c0:1312::/48
2a0f:e1c7:77::/48
2a0f:e202:33::/48
2a0f:e207:fd38::/48
2a0f:e740::/29
2a0f:e7c7:b4::/48
2a0f:ea44:55::/48
2a0f:ea44:acab::/48
2a0f:ec00::/29
2a10:4e00::/29
2a10:67c2:d6::/48
2a10:67c5:2::/48
2a10:6f00::/29
2a10:7700::/29
2a12:ac46:77::/48
2a12:ac46:99::/48
2a12:ecc0:11::/48
2a12:ecc0:3e2::/48
2a13:18c5:11::/48
2a13:18c6:101::/48
2a13:18c6:8512::/48
2a13:2c40::/29
2a13:8100::/29
2a13:8c86:88::/48
2a13:8c86:10a::/48
2a13:9180::/29
2a13:9285:100::/48
2a13:c900:120::/48
2a13:e100:323::/48
2a13:e102:1::/48
Signature Algorithm: sha256WithRSAEncryption
6d:e0:b6:75:dd:ff:5c:0c:39:eb:33:79:98:0c:25:36:a9:3a:
c1:90:83:3e:11:04:df:c6:22:99:cf:25:b6:68:2c:a8:20:42:
86:98:dd:51:9b:87:95:20:55:d4:6e:d6:90:16:ad:0b:79:dd:
14:b3:1e:28:5b:26:21:3a:66:34:d5:a1:8d:d1:a7:14:35:5d:
83:d3:1c:90:57:8b:99:ca:c2:a3:43:4d:dd:95:c3:84:23:67:
45:73:e1:c3:52:d9:df:48:20:b1:ba:9f:27:46:03:98:73:97:
f9:55:db:03:fd:0d:21:cf:8d:af:ff:14:29:32:50:ab:e3:99:
6b:51:21:27:4f:0c:e8:a6:73:5c:89:6d:9f:e2:c9:40:21:b1:
20:b0:2f:5d:9c:bd:7c:32:e9:2b:e9:5d:d8:ed:ff:67:bd:d0:
2d:dd:0e:7e:85:b1:61:4a:f5:74:15:9f:a7:6f:1c:0a:83:ad:
4e:27:42:25:2b:14:40:0d:8d:94:dc:0d:8b:08:0f:6f:7c:35:
6f:54:67:b7:b2:d3:4c:c7:c4:e0:04:7e:c8:1f:07:35:58:ef:
ba:35:1b:bb:d6:8c:55:58:d9:13:3d:25:59:e1:28:10:3c:7b:
28:a8:93:7d:75:ed:5b:d3:2d:43:31:0b:08:45:66:eb:37:f0:
00:76:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:23:19 2026 by rpki-client