Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AMtkBf13lRdJP4iJNoD0ziFZ2N0.roa
File: AMtkBf13lRdJP4iJNoD0ziFZ2N0.roa (raw, json)
Hash identifier: ypudU0SjkpDlELq07muXES7hIIpeMz2DmLbTz3kcldA=
Subject key identifier: 00:CB:64:05:FD:77:95:17:49:3F:88:89:36:80:F4:CE:21:59:D8:DD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D952D32E6409E38A0FAB610D33395186B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AMtkBf13lRdJP4iJNoD0ziFZ2N0.roa
Signing time: Thu 16 Apr 2026 07:24:20 +0000
ROA not before: Thu 16 Apr 2026 07:24:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 2a06:a600::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a09:17c3::/32 maxlen: 32
2a0c:d380::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0e:f207::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d86:11::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a0f:ee00::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:2d:32:e6:40:9e:38:a0:fa:b6:10:d3:33:95:18:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 16 07:24:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00cb6405fd779517493f88893680f4ce2159d8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:52:5e:c3:1d:dd:20:26:fe:32:44:16:62:
58:0e:3c:9f:9f:19:f1:63:34:72:d1:e1:27:6e:a0:
8e:8b:10:8c:60:d3:09:e9:cf:8c:89:a7:b2:f2:49:
90:60:a6:c3:49:8c:55:b6:5b:8f:7f:72:0d:17:44:
93:8f:5e:d2:ca:88:9b:c5:54:18:0a:ec:0b:4c:f5:
16:18:24:80:71:1e:a4:88:ff:b1:8e:7a:a9:0b:5b:
5d:3c:a6:0e:93:52:2b:b0:01:72:e0:1e:66:3e:b2:
46:96:de:89:24:70:43:4f:a1:c2:f4:b9:24:9a:53:
c2:fa:83:06:f7:24:40:0e:6e:1d:31:39:a1:e8:d2:
a1:d4:f6:dc:53:e8:34:5c:63:43:d4:f8:bc:8b:40:
df:e4:94:bf:92:05:64:e6:66:6b:ff:79:52:96:da:
6f:35:0d:51:ff:18:ac:7e:89:f1:cf:4f:27:67:f4:
13:66:cd:12:0f:4e:dd:f8:a4:34:99:cf:e3:57:52:
5d:13:ff:ad:bc:f3:5b:1c:b5:17:49:b9:cb:a1:c3:
d1:64:32:35:21:5d:ef:f1:e1:fa:18:68:63:6e:ea:
b6:56:be:08:66:38:b3:35:40:3c:15:72:ef:22:40:
e3:90:cc:5e:c7:22:94:e6:cf:1b:f0:7c:8f:3b:71:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:64:05:FD:77:95:17:49:3F:88:89:36:80:F4:CE:21:59:D8:DD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AMtkBf13lRdJP4iJNoD0ziFZ2N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a600::/29
2a06:bf40::/29
2a07:95c0::/29
2a09:17c3::/32
2a0c:d380::/29
2a0d:8f80::/29
2a0e:2440::/29
2a0e:f207::/32
2a0f:3d83::/32
2a0f:3d86:11::/48
2a0f:7d01::/32
2a0f:ee00::/29
2a10:3140::/29
2a11:4e80::/29
2a12:d100::/29
2a13:2bc0::/29
2a13:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
19:e1:e6:00:8b:d5:f4:d2:cf:b4:e3:c8:6f:e6:df:5f:bb:da:
92:f8:ee:52:a8:b5:99:cb:c3:aa:a7:93:c0:e6:cd:38:be:b0:
f8:79:f0:1f:df:f4:81:a2:53:46:7b:ec:c4:b9:48:b0:96:2d:
54:5d:c3:0b:80:5c:e0:c5:85:3f:3c:04:ad:0b:5a:99:5e:65:
89:6f:4e:63:2d:aa:2e:d1:6c:46:8d:6b:76:be:52:7a:60:84:
7c:ef:d9:4b:80:2e:08:ec:1a:7f:87:67:39:80:be:a3:ae:2c:
a6:c9:47:fa:fd:2c:ca:aa:e3:59:ba:85:dd:2e:fa:9a:ef:17:
d2:7f:3c:71:8f:5f:d7:a9:41:cf:cc:de:62:ca:ce:4c:03:68:
fe:a5:9c:c4:f9:e4:07:b0:66:ff:71:a4:6c:5c:c2:bc:2a:c5:
2e:bf:f7:5f:75:73:0c:dd:d6:d4:47:06:2b:4a:50:ec:64:a3:
5c:6a:22:38:d9:83:60:cd:2e:5a:78:08:84:82:e3:1e:7d:d9:
65:b9:f1:55:41:5d:f1:72:cc:cd:c4:7d:a3:fa:cc:47:19:88:
9e:37:08:ac:64:96:bf:e8:cd:f1:e2:a7:ea:cc:b1:15:93:28:
d2:35:61:05:a0:ed:60:e6:be:4e:f2:da:2b:1f:8b:34:96:00:
8f:be:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:07 2026 by rpki-client