Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TIqhQMndPIHCNqPjVIrLUqpMqfs.roa
File: TIqhQMndPIHCNqPjVIrLUqpMqfs.roa (raw, json)
Hash identifier: NYvogX2svuFxV8b5qEVrfxPpKnslzUQZQRdafDhcgMg=
Subject key identifier: 4C:8A:A1:40:C9:DD:3C:81:C2:36:A3:E3:54:8A:CB:52:AA:4C:A9:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EB6EB4378139AA9ADF95E3CE28CFDA00C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TIqhQMndPIHCNqPjVIrLUqpMqfs.roa
Signing time: Thu 11 Jun 2026 13:42:11 +0000
ROA not before: Thu 11 Jun 2026 13:42:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a0a:2d07:cc::/48 maxlen: 48
2a0e:15c6::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a13:d47::/32 maxlen: 32
2a13:c900:66::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:eb:43:78:13:9a:a9:ad:f9:5e:3c:e2:8c:fd:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 11 13:42:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c8aa140c9dd3c81c236a3e3548acb52aa4ca9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:d8:26:0a:1e:2f:27:a1:7e:b7:36:aa:7b:
b8:94:f5:df:b1:23:c7:64:21:08:9b:c5:c3:1e:b4:
fb:d1:c4:36:2f:d8:4c:cd:2a:03:47:7c:7d:1c:17:
00:83:ad:c1:58:66:df:d7:f1:20:a8:82:c1:96:7c:
23:78:e2:4a:2d:3e:28:5f:3c:55:5e:5e:42:bb:4a:
13:1e:60:17:ac:ec:07:ed:be:88:73:cb:52:b7:9e:
f7:2f:bb:82:b7:0d:1a:f1:0f:b1:ec:90:6e:98:87:
27:50:dc:8d:08:59:64:0a:0d:c0:68:78:35:a9:73:
09:79:a9:08:a1:6e:32:1c:0a:3d:fe:ca:5e:a6:cf:
98:b1:fb:0e:52:e1:de:80:32:65:1f:72:96:7e:16:
a2:57:13:6a:87:9c:1a:95:99:1a:6a:cc:8f:61:9d:
11:26:5a:e7:25:56:c2:14:23:12:1b:e5:b1:de:6b:
5f:a2:f6:f0:2a:e3:6a:52:15:64:5f:b4:3d:14:13:
79:a5:72:b3:de:af:47:44:0a:50:df:c1:a4:9c:7b:
8d:24:bf:fc:68:70:61:ac:b3:ce:ac:47:a8:d3:fc:
09:9a:43:a6:23:a2:d4:db:39:e7:8e:89:d2:ec:05:
3c:96:da:07:5b:dd:0f:6f:25:ce:fe:00:cb:01:88:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:A1:40:C9:DD:3C:81:C2:36:A3:E3:54:8A:CB:52:AA:4C:A9:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TIqhQMndPIHCNqPjVIrLUqpMqfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d07:cc::/48
2a0e:15c6::/32
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a13:d47::/32
2a13:c900:66::/48
Signature Algorithm: sha256WithRSAEncryption
b7:18:a4:2b:6f:66:5a:2f:22:8f:25:6e:58:ee:d2:ae:2e:d4:
ad:80:fc:a6:e5:e9:86:cc:dd:72:09:04:a2:27:54:b6:68:5f:
05:19:c4:a8:b7:79:6b:fd:5e:dc:ea:91:90:2a:fc:d0:e9:55:
17:9d:80:cb:dc:de:9c:4e:2d:46:10:5c:dd:1f:fd:27:72:3f:
81:f8:0e:65:55:bf:98:78:d1:2e:8c:54:12:b6:0c:52:46:d8:
90:0d:4e:ce:a4:82:ed:40:15:53:82:80:80:c3:8b:34:a0:77:
1f:fb:82:06:61:45:3c:03:f0:30:9d:00:c2:5e:2c:40:0c:6d:
7c:15:15:8f:87:07:88:21:a7:49:35:ac:19:e8:6f:7b:1f:b5:
f2:34:e4:38:9c:a9:e7:49:d7:74:79:b2:f1:ad:a2:c1:50:d5:
c9:af:4a:72:84:3e:40:9a:fa:a4:7d:94:dd:47:f5:87:48:27:
6e:35:9d:76:b4:a1:ec:e5:ff:eb:29:91:d8:f9:be:cc:2f:68:
16:1b:fb:bd:af:58:0f:c0:e6:35:41:3b:97:e7:4e:d4:10:ae:
38:7a:d6:6b:48:86:13:63:bb:cc:09:7f:a9:0a:1d:13:ac:b1:
dd:79:d8:d3:0b:41:30:b4:3d:c5:78:90:eb:f9:90:94:2e:19:
82:a5:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:52 2026 by rpki-client