Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/THY8VWXs27gnunBLj48-437MjI0.roa
File: THY8VWXs27gnunBLj48-437MjI0.roa (raw, json)
Hash identifier: ABOV1MH2zKjdn/8HSVsYaRLImCQeOwUNNQrVANXpv9I=
Subject key identifier: 4C:76:3C:55:65:EC:DB:B8:27:BA:70:4B:8F:8F:3E:E3:7E:CC:8C:8D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C8F0EAA331F8F0B361BF6981C28B4AC56
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/THY8VWXs27gnunBLj48-437MjI0.roa
Signing time: Tue 24 Feb 2026 09:50:28 +0000
ROA not before: Tue 24 Feb 2026 09:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41095
IP address blocks: 2a06:1180:10::/48 maxlen: 48
2a06:1184:55::/48 maxlen: 48
2a06:35c4:100::/48 maxlen: 48
2a06:dfc0::/29 maxlen: 32
2a07:bb40::/29 maxlen: 32
2a09:17c0:b19a::/48 maxlen: 48
2a09:17c1:11d::/48 maxlen: 48
2a0a:2d00:10::/48 maxlen: 48
2a0a:2d00:20::/48 maxlen: 48
2a0a:2d07:fc4c::/48 maxlen: 48
2a0c:7881:100::/48 maxlen: 48
2a0c:7882:11::/48 maxlen: 48
2a0d:e5c0::/29 maxlen: 32
2a0e:15c0:6::/48 maxlen: 48
2a0e:15c7:2d::/48 maxlen: 48
2a0e:1a83:1::/48 maxlen: 48
2a0e:f600:2::/48 maxlen: 48
2a0e:f600:14::/48 maxlen: 48
2a0e:f603:1312::/48 maxlen: 48
2a0f:1200:11::/48 maxlen: 48
2a0f:1200:100::/48 maxlen: 48
2a0f:1581:10::/48 maxlen: 48
2a0f:1f80::/29 maxlen: 32
2a0f:2d82:100::/48 maxlen: 48
2a0f:31c3:100::/48 maxlen: 48
2a0f:3d80:2::/48 maxlen: 48
2a0f:7d00:10::/48 maxlen: 48
2a0f:7d06:101::/48 maxlen: 48
2a0f:dd40::/29 maxlen: 32
2a0f:df46:100::/48 maxlen: 48
2a0f:e1c0:acab::/48 maxlen: 48
2a0f:e202:fc06::/48 maxlen: 48
2a0f:e6c2:100::/48 maxlen: 48
2a0f:e7c4:22::/48 maxlen: 48
2a0f:e7c7:95::/48 maxlen: 48
2a0f:e842:100::/48 maxlen: 48
2a0f:e844:8642::/48 maxlen: 48
2a0f:e940::/29 maxlen: 32
2a0f:ea00::/29 maxlen: 32
2a0f:ea43:10::/48 maxlen: 48
2a10:30c0::/29 maxlen: 32
2a10:6400::/29 maxlen: 32
2a10:67c2:1::/48 maxlen: 48
2a12:ac43:acab::/48 maxlen: 48
2a12:ecc4:2213::/48 maxlen: 48
2a13:18c6:99::/48 maxlen: 48
2a13:7400::/29 maxlen: 32
2a13:8c86:140::/48 maxlen: 48
2a13:9282:100::/48 maxlen: 48
2a13:9d00::/29 maxlen: 32
2a13:9f00::/29 maxlen: 32
2a13:c500::/29 maxlen: 32
2a13:c900:44::/48 maxlen: 48
2a13:c900:55::/48 maxlen: 48
2a13:e102:10::/48 maxlen: 48
2a13:fd00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:0e:aa:33:1f:8f:0b:36:1b:f6:98:1c:28:b4:ac:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 09:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c763c5565ecdbb827ba704b8f8f3ee37ecc8c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:57:42:4d:53:34:0c:a4:ba:1c:a1:11:39:
d3:96:92:b7:fe:f5:0a:db:9f:8e:fc:ba:1b:b1:db:
6e:4d:11:b6:f2:ff:44:87:3a:43:c0:c3:59:bf:80:
52:a8:d3:39:cb:dc:7c:20:26:e6:d2:c1:fe:3e:9c:
78:4a:a3:5e:b1:8f:cc:2a:19:de:4e:95:fe:27:b3:
a6:56:cc:4c:86:5c:ad:9d:d8:5b:ef:e4:67:c3:e8:
41:12:fd:37:58:6b:21:fb:d6:20:91:ab:38:6b:8e:
ca:3d:36:a9:09:ed:14:a0:9d:f1:01:06:35:c0:31:
82:ff:e2:f6:97:7d:11:e4:1a:10:97:cd:e6:21:c9:
df:06:62:62:58:57:06:02:5d:0c:2c:6b:72:f6:ea:
f0:c8:f1:10:ee:14:87:39:34:8e:2b:84:7e:6a:c4:
d0:b5:84:36:29:64:88:d0:24:f8:22:c9:f1:84:b9:
e7:f8:cc:6d:0b:ac:47:e2:3b:58:76:20:c1:72:4b:
13:c3:69:ee:cd:9e:66:cb:55:e9:00:a8:b4:68:1c:
0d:77:4a:e2:59:bd:d0:0a:31:ee:c0:87:2d:68:79:
9c:4f:95:b7:f7:90:75:2a:43:a6:7d:54:a5:fc:27:
71:02:a3:74:41:e4:70:c9:fb:2a:33:49:a2:b0:4b:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:3C:55:65:EC:DB:B8:27:BA:70:4B:8F:8F:3E:E3:7E:CC:8C:8D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/THY8VWXs27gnunBLj48-437MjI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:10::/48
2a06:1184:55::/48
2a06:35c4:100::/48
2a06:dfc0::/29
2a07:bb40::/29
2a09:17c0:b19a::/48
2a09:17c1:11d::/48
2a0a:2d00:10::/48
2a0a:2d00:20::/48
2a0a:2d07:fc4c::/48
2a0c:7881:100::/48
2a0c:7882:11::/48
2a0d:e5c0::/29
2a0e:15c0:6::/48
2a0e:15c7:2d::/48
2a0e:1a83:1::/48
2a0e:f600:2::/48
2a0e:f600:14::/48
2a0e:f603:1312::/48
2a0f:1200:11::/48
2a0f:1200:100::/48
2a0f:1581:10::/48
2a0f:1f80::/29
2a0f:2d82:100::/48
2a0f:31c3:100::/48
2a0f:3d80:2::/48
2a0f:7d00:10::/48
2a0f:7d06:101::/48
2a0f:dd40::/29
2a0f:df46:100::/48
2a0f:e1c0:acab::/48
2a0f:e202:fc06::/48
2a0f:e6c2:100::/48
2a0f:e7c4:22::/48
2a0f:e7c7:95::/48
2a0f:e842:100::/48
2a0f:e844:8642::/48
2a0f:e940::/29
2a0f:ea00::/29
2a0f:ea43:10::/48
2a10:30c0::/29
2a10:6400::/29
2a10:67c2:1::/48
2a12:ac43:acab::/48
2a12:ecc4:2213::/48
2a13:18c6:99::/48
2a13:7400::/29
2a13:8c86:140::/48
2a13:9282:100::/48
2a13:9d00::/29
2a13:9f00::/29
2a13:c500::/29
2a13:c900:44::/48
2a13:c900:55::/48
2a13:e102:10::/48
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:3d:6e:8c:77:51:6c:d3:f3:03:96:4f:03:b1:35:58:cf:b3:
23:ad:cc:bf:4f:2f:6e:06:c4:13:a0:10:0f:07:3a:08:bd:41:
16:96:de:06:10:17:d3:a4:e4:c3:6e:8c:a7:70:83:53:31:1a:
92:72:29:55:da:e9:7b:aa:d9:e0:38:58:c0:d5:1f:c6:e5:a0:
56:99:21:8a:24:37:b0:8a:48:74:31:66:df:42:7b:95:b0:59:
36:1a:65:fd:32:54:0c:28:7d:d9:11:95:10:81:25:17:09:d0:
8f:5f:03:c8:ac:73:60:da:54:d5:f8:12:fe:ac:bb:ef:6b:98:
8f:09:99:ad:8c:39:9e:95:a2:da:4a:48:c2:a2:8c:e7:85:23:
9c:d0:e1:fb:3d:cc:55:ba:ee:77:7d:86:e8:2d:26:16:eb:85:
75:2e:cf:15:04:7d:a6:0e:f7:14:9b:9d:ac:11:d5:ba:27:57:
a9:4a:53:f0:ec:f2:22:89:43:dc:f7:ad:e4:e9:07:42:1e:08:
b1:f5:57:90:2b:33:3d:05:e4:3c:19:9d:74:36:b6:90:45:7b:
0c:7c:f7:7e:8e:21:f9:84:1d:35:89:9d:8b:d2:bc:e5:7d:b4:
7f:bc:55:d4:d7:b4:74:4a:ae:c8:39:c9:cd:2f:80:36:1a:30:
60:99:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:21 2026 by rpki-client