Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7mFq-nVIRqckj_bvCuKdZ00yavY.roa
File: 7mFq-nVIRqckj_bvCuKdZ00yavY.roa (raw, json)
Hash identifier: 97aJAVLpyIOTlOU5Ivb5DuZW4YvtbbDyCAPwQEGIziA=
Subject key identifier: EE:61:6A:FA:75:48:46:A7:24:8F:F6:EF:0A:E2:9D:67:4D:32:6A:F6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C8F0AFB3CE957DB83BCCC1933A02830E0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7mFq-nVIRqckj_bvCuKdZ00yavY.roa
Signing time: Tue 24 Feb 2026 09:46:27 +0000
ROA not before: Tue 24 Feb 2026 09:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11404
IP address blocks: 2a06:5280::/29 maxlen: 32
2a09:4900::/29 maxlen: 32
2a0f:14c0::/29 maxlen: 32
2a0f:1840::/29 maxlen: 32
2a0f:1a40::/29 maxlen: 32
2a0f:28c0::/29 maxlen: 32
2a0f:dac0::/29 maxlen: 32
2a10:33c0::/29 maxlen: 32
2a10:36c0::/29 maxlen: 32
2a10:6b00::/29 maxlen: 32
2a10:7f00::/29 maxlen: 32
2a11:89c0::/29 maxlen: 32
2a11:d240::/29 maxlen: 32
2a12:d6c0::/29 maxlen: 32
2a13:200::/29 maxlen: 32
2a13:9380::/29 maxlen: 32
2a13:9680::/29 maxlen: 32
2a13:cf00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:0a:fb:3c:e9:57:db:83:bc:cc:19:33:a0:28:30:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 09:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee616afa754846a7248ff6ef0ae29d674d326af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:9a:09:dd:e0:72:03:94:18:52:61:c0:62:
cf:34:c8:59:30:9b:f9:e0:cb:c9:1b:6c:08:24:05:
e4:a1:0b:37:0f:75:88:9c:93:a2:4d:b4:b2:d6:98:
57:48:11:82:58:7b:dd:d4:4a:6d:f1:6f:70:e5:41:
0e:3e:c7:de:eb:f7:eb:89:21:21:dd:81:6c:36:a6:
39:9d:3a:2c:38:5c:5b:93:ba:d0:fb:fa:cf:0d:bd:
70:82:f4:b8:15:13:cb:39:af:66:a7:8b:a6:99:2f:
7f:09:f5:4f:5f:54:fd:ae:1c:8e:c5:45:46:5f:cb:
9e:e9:f0:40:8d:c8:8d:68:12:1f:d2:79:3a:98:2f:
06:c2:58:74:1e:fc:86:73:0d:5c:9d:59:60:29:07:
b1:a6:44:f9:78:40:a5:25:c1:17:fe:48:57:ed:8b:
55:2b:a2:9b:ca:27:a9:89:f3:7b:a2:8c:57:7b:12:
89:3e:13:3a:60:dd:29:6e:77:23:50:ef:87:2b:e8:
62:7c:e5:02:cc:c3:5f:6a:05:f1:9e:ba:b7:a4:f1:
60:2b:00:19:8e:12:bd:8c:d2:7c:d1:d4:9f:ca:4b:
21:e0:7b:3b:7c:72:cb:58:55:8b:c5:75:51:3d:f1:
6f:f9:23:ce:db:4a:bb:4f:ce:cf:c9:d6:51:de:31:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:6A:FA:75:48:46:A7:24:8F:F6:EF:0A:E2:9D:67:4D:32:6A:F6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7mFq-nVIRqckj_bvCuKdZ00yavY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5280::/29
2a09:4900::/29
2a0f:14c0::/29
2a0f:1840::/29
2a0f:1a40::/29
2a0f:28c0::/29
2a0f:dac0::/29
2a10:33c0::/29
2a10:36c0::/29
2a10:6b00::/29
2a10:7f00::/29
2a11:89c0::/29
2a11:d240::/29
2a12:d6c0::/29
2a13:200::/29
2a13:9380::/29
2a13:9680::/29
2a13:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
85:ec:e6:bf:90:76:4e:e1:e2:80:c4:c0:60:e4:57:ef:70:10:
05:78:13:7b:e7:78:86:93:99:ec:b3:cf:12:8e:bb:cb:05:8d:
d4:07:c6:78:d7:a4:01:4f:94:1d:f6:1b:18:bd:64:b4:51:80:
11:08:b1:7c:d4:a1:a2:13:6b:42:24:b7:56:9f:d3:bf:72:f7:
68:3d:8b:ae:4a:0d:fc:81:27:43:0a:27:91:5d:63:f2:cc:c3:
13:8c:ce:d7:5d:0c:2c:44:61:ee:7e:d4:af:99:c2:fa:53:0e:
d4:b2:5f:cc:fa:c0:75:d7:82:13:dc:b1:e0:2a:bd:c9:c1:f0:
f8:97:dd:ce:e2:71:c3:12:6a:84:23:b4:f9:e3:5c:1b:ba:a9:
9f:ed:23:be:76:11:40:b2:7a:88:8d:3b:45:94:44:b7:d2:ef:
da:21:1d:65:81:9c:fd:e5:98:4f:26:a1:7c:ff:d1:e0:b0:87:
6a:cd:30:56:2a:19:1f:68:ef:0c:7c:15:72:4c:6b:d5:4e:4c:
48:c5:52:19:bf:9c:85:f3:62:2f:29:72:da:1c:d3:fa:42:27:
ba:5a:91:3b:0d:24:68:c8:1d:cd:41:3b:89:3c:28:64:c4:8d:
cb:a0:5a:0b:31:cf:32:31:61:90:8b:4a:bb:c7:a4:2d:77:3f:
71:a0:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:31:58 2026 by rpki-client