Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Dm951KmLah2--XbrJ6wfC90HypQ.roa
File: Dm951KmLah2--XbrJ6wfC90HypQ.roa (raw, json)
Hash identifier: 9/8cy4rkqtDLq+eFJa3tGY7S/EyY1nWe/DySBdHToHw=
Subject key identifier: 0E:6F:79:D4:A9:8B:6A:1D:BE:F9:76:EB:27:AC:1F:0B:DD:07:CA:94
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C940206A857AB51B6F5A6BB83DBF2C7DC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Dm951KmLah2--XbrJ6wfC90HypQ.roa
Signing time: Wed 25 Feb 2026 08:54:46 +0000
ROA not before: Wed 25 Feb 2026 08:54:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400328
IP address blocks: 2a0a:2d02::/32 maxlen: 32
2a0f:1e06::/32 maxlen: 32
2a0f:df41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:02:06:a8:57:ab:51:b6:f5:a6:bb:83:db:f2:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 25 08:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e6f79d4a98b6a1dbef976eb27ac1f0bdd07ca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:b0:06:70:65:cd:06:32:f2:52:29:9e:0f:
50:00:8b:67:d2:df:ec:59:25:d7:ad:ab:45:26:1a:
d8:05:f2:9b:e3:11:7f:2a:be:e0:d8:1d:ce:98:32:
ef:9a:d5:97:e8:07:38:6a:d9:db:e5:a0:9c:bd:8b:
bf:71:f3:0e:83:40:ee:f4:96:a2:41:81:91:7d:c9:
1a:09:b4:9c:f5:84:73:bf:52:be:a9:5e:86:f8:90:
9e:63:37:ed:58:90:53:fb:bc:c8:12:8f:13:85:04:
a5:1a:fc:e0:cb:2a:30:f4:01:19:55:af:e3:57:e6:
39:64:6b:47:c6:53:9a:40:46:0e:a1:9f:fd:e7:f2:
4b:e1:41:99:9f:8a:d5:df:90:fc:50:2c:5d:02:80:
ed:a5:c4:95:1d:da:b8:1a:21:03:df:ae:7f:02:5c:
af:56:a3:55:f5:ee:b9:bd:c6:53:39:d5:b4:d6:1f:
0f:e7:a5:ec:f6:23:88:8a:90:6f:23:ac:d4:57:c5:
17:cd:25:3a:05:3a:89:5c:97:bd:f3:78:06:71:b6:
9e:50:58:52:1e:0f:8e:e1:ce:1d:96:28:ee:fb:99:
da:72:ba:4e:c3:60:a2:67:b7:89:b8:70:1c:ee:69:
6a:ea:43:32:c4:2f:58:de:bc:e1:4d:5a:f8:6c:16:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:79:D4:A9:8B:6A:1D:BE:F9:76:EB:27:AC:1F:0B:DD:07:CA:94
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Dm951KmLah2--XbrJ6wfC90HypQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
2a0f:1e06::/32
2a0f:df41::/32
Signature Algorithm: sha256WithRSAEncryption
54:b4:60:81:df:e0:27:f0:0d:e6:45:72:11:e7:7c:36:ee:16:
fb:aa:68:61:71:1f:de:df:50:e3:c6:5c:a3:21:e8:83:63:95:
33:ef:64:71:69:3e:e9:b6:16:9d:14:8e:85:7c:c2:e2:ad:8d:
73:4c:38:25:0b:9a:54:01:c9:4c:92:53:a5:c4:30:da:3b:6d:
7d:2d:97:07:88:63:96:4e:39:78:79:99:6b:c2:79:f3:76:7a:
48:f5:1f:75:99:4d:f2:e3:c6:65:53:59:cd:44:85:97:dd:7e:
35:64:da:a0:6b:9b:0b:28:ba:ca:2a:1b:c2:89:d1:86:c8:ec:
97:78:27:f1:9e:fb:88:b7:6d:9a:47:f7:85:50:ab:53:50:cd:
19:24:e4:61:04:16:8c:e0:c3:04:c2:d3:04:55:19:42:0d:37:
ec:0f:c8:51:4a:37:b1:3f:b8:2e:81:55:9c:cf:0b:ab:f4:d0:
50:82:5f:a8:55:b7:78:a8:46:a3:0e:a5:a5:d5:17:5e:08:3f:
81:11:d2:0f:73:37:f2:98:73:a9:5a:0b:b6:fc:9c:08:a8:2b:
b2:7d:db:ad:f9:d6:b1:b4:a5:34:bd:73:f4:35:5e:f4:f4:6f:
61:34:9e:48:ab:25:67:dc:bf:63:cc:f5:b3:e7:2d:08:79:0c:
89:02:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:49 2026 by rpki-client