Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/72WI8yQCOB9GqtQUXNS3X1SotfY.roa
File: 72WI8yQCOB9GqtQUXNS3X1SotfY.roa (raw, json)
Hash identifier: ykbgknubGXBQPONPgIBGo3uZscysWLXaqR+to4GA19o=
Subject key identifier: EF:65:88:F3:24:02:38:1F:46:AA:D4:14:5C:D4:B7:5F:54:A8:B5:F6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FADE10D59B00883E695765D0AE7489FE4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/72WI8yQCOB9GqtQUXNS3X1SotfY.roa
Signing time: Wed 29 Jul 2026 12:37:15 +0000
ROA not before: Wed 29 Jul 2026 12:37:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197462
IP address blocks: 2a0f:e7c7:14e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:e1:0d:59:b0:08:83:e6:95:76:5d:0a:e7:48:9f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 29 12:37:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef6588f32402381f46aad4145cd4b75f54a8b5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:29:14:43:f3:ca:35:6b:a5:02:5b:97:ac:3f:
9e:6c:a7:de:15:df:f3:93:da:71:c1:7f:80:75:2e:
5f:72:d5:12:55:37:52:6f:8a:54:b3:07:89:dd:f2:
c1:8a:a6:2b:a6:f9:c8:d0:84:3d:64:65:7b:e8:69:
a6:a9:a8:c3:7b:09:41:95:fc:e1:42:31:e1:95:90:
78:b6:4f:c9:9d:ae:4f:c2:f3:85:66:2a:f3:3f:f7:
a5:d9:ca:c3:87:ed:d0:82:b9:3e:52:5a:89:9f:69:
06:e4:33:97:59:ac:60:00:3c:83:87:60:02:1e:40:
c7:1d:82:82:78:6e:47:60:67:ea:4e:f7:0c:c7:af:
c2:07:1c:54:b2:94:74:3f:23:b1:c0:51:70:fa:b5:
86:c2:60:4c:7b:d6:a4:74:ad:9a:f0:b7:89:b4:9d:
13:8c:5d:ab:96:2e:b3:d2:ae:d6:59:7b:cd:dc:11:
7c:c7:4e:5d:8c:04:18:50:3b:df:c3:79:71:9f:a5:
d9:79:16:2c:a6:87:e6:d6:a4:2a:dd:2e:89:02:b9:
70:b3:24:84:30:9d:d8:e4:5b:13:cd:31:09:e2:64:
26:4d:b3:8c:77:ab:88:63:9f:9f:84:93:cd:f0:e6:
31:67:0f:2e:02:3f:5c:e8:d1:b8:8d:09:88:0c:57:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:65:88:F3:24:02:38:1F:46:AA:D4:14:5C:D4:B7:5F:54:A8:B5:F6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/72WI8yQCOB9GqtQUXNS3X1SotfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e7c7:14e::/48
Signature Algorithm: sha256WithRSAEncryption
67:1b:33:3f:c3:76:f5:d8:2a:9c:5e:82:95:5c:5d:4c:a1:93:
0b:a0:0a:dd:d3:fe:5c:1f:3a:c7:71:19:0b:e8:2e:ba:e8:f6:
de:b5:21:3c:b5:2a:be:8a:85:45:88:1f:22:b2:e2:d0:80:c1:
3f:4f:ee:33:13:10:39:2d:ff:4f:4a:64:fe:9b:f8:35:72:8b:
92:88:87:da:f6:68:15:17:82:80:b0:04:11:d9:f9:7d:5c:74:
00:35:16:1f:d6:5b:ec:f5:3c:79:ad:4c:35:d3:79:d1:b7:7e:
ba:6d:b1:ee:78:97:0f:30:3d:f3:83:91:7d:da:68:01:1d:93:
bf:7d:93:9a:86:41:18:a0:b0:66:0c:23:82:67:3f:a1:95:33:
72:b7:fb:7c:c5:dc:d3:75:10:2b:ff:cb:19:b6:c6:e1:03:e5:
d5:39:12:5c:cb:38:5b:47:5b:41:5c:84:e8:c1:6f:5b:25:b2:
bc:59:9b:2a:a7:e8:42:56:42:d9:ab:9a:2e:e5:a5:2b:3a:5d:
bd:cb:7b:54:0f:64:ff:2b:cc:0d:e5:c8:0f:c9:dd:d4:34:54:
d9:78:d8:6f:6e:6b:0f:1b:0c:8e:1c:e3:d1:39:c6:8b:6f:a7:
70:9c:a0:15:55:e7:b8:f3:77:09:dd:6e:0b:1b:6d:29:86:b7:
a7:d6:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:42:40 2026 by rpki-client