Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SxhIdhbwa7IwDJmldp6cltHdm6w.roa
File: SxhIdhbwa7IwDJmldp6cltHdm6w.roa (raw, json)
Hash identifier: IDUgUhFExUPU/ZGwl5HbsQsA/T7s88snnqD6luDnYv4=
Subject key identifier: 4B:18:48:76:16:F0:6B:B2:30:0C:99:A5:76:9E:9C:96:D1:DD:9B:AC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EB1518C91D939C2CFA31A0EE6FFB40605
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SxhIdhbwa7IwDJmldp6cltHdm6w.roa
Signing time: Wed 10 Jun 2026 11:36:12 +0000
ROA not before: Wed 10 Jun 2026 11:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400328
IP address blocks: 2a0a:2d02::/32 maxlen: 32
2a0f:1e06::/32 maxlen: 32
2a0f:e841::/32 maxlen: 32
2a10:7b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:51:8c:91:d9:39:c2:cf:a3:1a:0e:e6:ff:b4:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 10 11:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b18487616f06bb2300c99a5769e9c96d1dd9bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:24:ff:d9:13:c6:43:04:c4:ab:a8:c1:d4:4e:
0c:89:0b:ef:8c:fb:f7:94:38:53:60:e8:a7:54:af:
65:dd:63:c7:93:75:83:8c:ea:f8:49:6a:d7:9b:7e:
95:ac:b3:ac:c6:74:bc:03:6e:2a:11:c3:88:3b:d1:
62:08:d2:4b:39:f9:e7:ee:8b:f8:a3:d9:8d:43:70:
ba:81:0d:37:6f:c3:89:db:ca:84:95:bf:fc:f7:93:
5b:94:5d:58:bc:de:88:70:a2:e7:1d:ab:51:55:97:
9a:83:53:e6:e5:91:a3:9d:bb:87:c8:48:e8:a0:d7:
3f:88:ad:19:77:21:52:11:74:0d:99:dd:6e:d8:41:
85:73:83:1d:e5:f0:c4:69:4c:e6:fe:05:6e:6a:76:
c0:0d:25:11:2c:c4:fa:ce:9a:29:2b:b4:be:5f:a4:
1c:fe:13:8a:93:6c:1e:d9:5d:cc:99:61:8d:92:e6:
bc:75:04:3a:71:49:69:f4:6e:b5:aa:c1:2d:fe:56:
e4:0b:99:ab:ba:45:66:72:85:16:bb:d1:19:d7:e9:
0d:06:cf:c7:22:ac:89:20:70:3e:49:4d:53:3f:42:
26:3d:66:6c:57:86:57:e9:60:49:b6:59:51:8a:34:
56:62:15:3d:70:2f:1d:3e:6f:e9:10:89:d6:99:94:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:18:48:76:16:F0:6B:B2:30:0C:99:A5:76:9E:9C:96:D1:DD:9B:AC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SxhIdhbwa7IwDJmldp6cltHdm6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
2a0f:1e06::/32
2a0f:e841::/32
2a10:7b00::/29
Signature Algorithm: sha256WithRSAEncryption
22:58:a0:df:ed:11:2c:ad:96:a7:b9:bf:43:46:ae:31:32:05:
36:56:6d:08:89:97:bc:14:0a:ec:52:e0:fc:35:11:c6:c1:82:
35:88:dc:3a:93:f9:19:52:e6:ff:e8:d2:b6:82:5f:c2:a9:20:
9a:2e:2c:92:d0:02:f1:1b:6a:47:d0:e1:77:3d:a1:4b:a4:ce:
16:da:77:47:e6:9f:ed:dc:59:50:00:2c:3f:b8:33:80:f6:73:
10:53:bd:fc:dd:a7:ba:d1:29:4b:fe:04:66:c6:20:5b:e3:b3:
2f:d6:43:51:0d:d2:0b:83:1d:53:56:54:9f:00:d1:74:f7:64:
bb:dc:fe:b5:13:8e:88:a6:5a:00:fb:32:97:08:8f:be:87:d4:
fe:b3:1a:b8:2c:04:7a:e9:02:40:0e:24:77:1b:66:d5:ab:61:
71:3c:f6:3a:29:96:23:11:01:12:c5:da:de:d9:ad:78:ee:98:
fc:99:4e:1e:19:f8:cf:a1:2f:0c:db:c9:be:d5:db:59:c9:75:
d9:e9:34:8a:4b:61:9e:59:fd:87:54:9b:15:f7:0d:48:3c:64:
1b:0b:1d:cf:30:fa:af:ee:37:7b:21:94:6e:fa:25:59:96:02:
7b:4c:1e:59:3c:14:6c:2b:17:46:7e:ca:ef:09:75:2f:b0:b6:
78:65:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:07:45 2026 by rpki-client