Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6Pa67lIPBfkGqGG94EmLKHUmDoo.roa
File: 6Pa67lIPBfkGqGG94EmLKHUmDoo.roa (raw, json)
Hash identifier: oqhXpJTecLO3Z162CpY/LrXUUc1B2VGg9qi6MGX2AsQ=
Subject key identifier: E8:F6:BA:EE:52:0F:05:F9:06:A8:61:BD:E0:49:8B:28:75:26:0E:8A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D44D142DF24076E09DAE327C974247D22
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6Pa67lIPBfkGqGG94EmLKHUmDoo.roa
Signing time: Tue 31 Mar 2026 16:54:18 +0000
ROA not before: Tue 31 Mar 2026 16:54:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 2a0f:1580::/32 maxlen: 32
2a0f:7d05::/32 maxlen: 32
2a0f:bc05::/32 maxlen: 32
2a13:c905::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:d1:42:df:24:07:6e:09:da:e3:27:c9:74:24:7d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 31 16:54:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8f6baee520f05f906a861bde0498b2875260e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:f9:9c:81:fa:b5:3e:51:ab:e9:1f:43:a9:
86:18:bc:3b:6e:e3:d4:be:f9:c6:9f:e6:58:24:6d:
32:47:5c:88:f2:46:26:12:d1:30:53:8d:ca:f1:5d:
fc:8a:a7:80:d1:04:5e:a9:82:48:a9:a6:d2:b9:6d:
14:9f:9d:f3:06:01:5b:a9:0e:90:ea:34:8a:72:ab:
71:9d:74:56:5c:b8:28:94:0c:b1:fd:f6:ca:c2:54:
56:a5:83:5a:95:82:ca:de:52:37:2f:5a:02:cf:6a:
c4:4f:b6:3c:17:49:15:6b:37:04:70:07:96:7e:d4:
8d:32:01:73:59:9d:60:f4:64:54:1d:a9:11:0f:f2:
83:d3:d7:e6:34:52:7c:0c:83:0a:e6:6f:4e:70:43:
78:e1:48:e5:cc:12:fe:b3:55:d0:a6:94:3a:f2:65:
4f:06:74:26:ef:ff:39:fa:ef:8a:02:da:e6:ea:47:
39:a4:d9:8d:72:73:01:39:f1:c2:4a:79:3f:7a:4f:
3b:b6:4e:c5:3c:03:ea:b0:3c:70:30:e6:34:cc:6f:
37:df:d4:f0:05:9b:bb:45:d0:58:ec:3c:b5:29:70:
8b:0d:73:9c:bf:d5:0e:26:2b:56:47:fe:ab:13:fc:
23:cb:b6:fd:43:d7:36:bf:0b:ce:df:ca:54:b6:09:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:BA:EE:52:0F:05:F9:06:A8:61:BD:E0:49:8B:28:75:26:0E:8A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6Pa67lIPBfkGqGG94EmLKHUmDoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1580::/32
2a0f:7d05::/32
2a0f:bc05::/32
2a13:c905::/32
Signature Algorithm: sha256WithRSAEncryption
5c:40:a7:35:f7:4d:aa:75:24:09:d3:5f:18:e9:b5:9f:7b:a5:
54:c0:8d:f4:48:29:6b:2f:04:6c:64:08:9d:b4:0c:94:ba:b6:
44:c3:f3:9b:80:52:67:fe:75:ae:8d:c6:6f:ce:c5:b3:ca:55:
dc:3d:68:f8:f9:fd:6c:7c:96:e8:ac:ff:34:3c:55:bc:24:1c:
e9:31:03:6f:60:43:77:5b:d8:70:06:52:1b:9d:c1:7d:1e:51:
86:70:d3:60:18:09:24:b9:d4:f7:34:ab:7a:7d:f4:ca:a5:5b:
d5:4b:bb:9a:de:68:ac:0e:01:5f:70:57:4f:5c:0e:5e:f8:9b:
80:02:b8:d5:57:4a:68:a9:34:03:a8:ba:b5:5d:c5:c4:f4:fa:
0a:23:95:2c:7e:d4:e9:00:5b:18:d8:0a:01:cb:91:9b:32:33:
ab:10:ad:e4:47:e6:58:56:74:4b:95:33:f1:6b:c7:31:f5:4b:
a1:d4:53:51:b3:5d:7e:b3:1e:13:24:15:b7:15:4f:99:8d:35:
8b:7f:98:cd:22:9b:6a:1d:32:97:84:aa:17:e1:c8:a6:88:30:
5b:43:fa:90:05:cc:54:bd:75:56:67:73:9a:57:96:f1:b2:5c:
87:51:41:46:ec:54:6d:87:58:ac:2d:78:09:fe:fc:04:00:f0:
14:b0:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:03:43 2026 by rpki-client