Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/a5M2pc_u63k9wFmEsJFcpGnQ2_s.roa
File: a5M2pc_u63k9wFmEsJFcpGnQ2_s.roa (raw, json)
Hash identifier: u8ybaAo2eWjwpNxngAI8UICr1AAuroFOav6puJUHuF8=
Subject key identifier: 6B:93:36:A5:CF:EE:EB:79:3D:C0:59:84:B0:91:5C:A4:69:D0:DB:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C908D5563B49A60CF18CD49EFCAE7CB24
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/a5M2pc_u63k9wFmEsJFcpGnQ2_s.roa
Signing time: Tue 24 Feb 2026 16:48:27 +0000
ROA not before: Tue 24 Feb 2026 16:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 2a10:3240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:8d:55:63:b4:9a:60:cf:18:cd:49:ef:ca:e7:cb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 16:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b9336a5cfeeeb793dc05984b0915ca469d0dbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f8:ed:32:8e:20:49:57:ad:60:c1:3c:b2:b7:
9a:3b:ab:89:18:df:09:6e:6a:f0:d0:94:ed:d3:3e:
40:74:f8:31:ad:b0:e6:7f:ba:c1:68:a6:be:14:1b:
0b:1a:d0:56:f7:5e:b1:9b:99:cc:a5:8b:ce:6e:67:
e5:af:ef:06:cb:83:35:51:ea:75:da:27:ac:6f:75:
9f:87:46:53:4a:de:1f:5d:e4:cf:df:2c:37:be:a1:
c4:e1:9d:3c:44:a5:e4:8d:6a:df:85:96:e7:1f:7e:
44:15:26:37:77:06:90:b2:18:82:da:f1:9e:a5:56:
63:5f:f4:24:21:67:09:91:d9:90:00:10:54:a5:09:
d0:bb:e6:32:9c:6e:2f:4b:39:f5:54:80:96:f0:1e:
0f:71:d2:1a:35:4f:22:0a:c6:fc:21:c8:6b:03:f4:
5f:f9:78:81:61:38:f3:c9:aa:8d:dd:3e:cd:75:30:
be:80:75:c3:c5:e2:dc:bf:37:ef:91:49:3c:fc:55:
e9:9c:fc:98:31:29:bb:04:9d:8e:aa:6c:6e:49:10:
43:b8:11:31:39:6a:97:8a:f4:47:36:08:10:9f:83:
01:fe:7d:9e:b4:d3:fb:6b:76:2d:df:dc:b5:e4:b7:
8c:a3:51:db:78:60:0a:21:ae:55:6f:32:a7:3f:82:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:93:36:A5:CF:EE:EB:79:3D:C0:59:84:B0:91:5C:A4:69:D0:DB:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/a5M2pc_u63k9wFmEsJFcpGnQ2_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3240::/29
Signature Algorithm: sha256WithRSAEncryption
6a:2f:1d:26:65:21:5d:d8:06:1f:5c:80:be:dd:64:dc:b0:37:
28:5a:e2:1c:58:c4:be:9b:b2:26:16:f4:18:ce:4b:60:a4:d3:
4a:9e:d2:cf:f7:14:55:6f:2d:94:b3:5a:60:4a:0f:29:8d:87:
c1:42:7d:c0:5f:6e:b0:6d:c7:8f:e5:fb:b1:ff:05:3c:64:95:
ef:ec:d8:01:a1:9b:a8:87:85:63:b9:35:aa:91:da:1a:ce:a0:
7f:3c:03:91:3f:3d:bc:64:14:61:9f:0c:81:59:dc:20:8b:23:
e8:c7:a3:37:3f:6a:b0:80:95:3b:e9:c9:6a:c1:34:76:e5:31:
b1:db:75:77:94:62:22:9f:90:ca:a6:0b:38:ef:b3:bb:fa:2b:
4e:cf:d3:fe:f8:69:79:89:70:a6:79:f4:6a:25:43:f3:af:7b:
38:6b:e3:12:02:9f:5d:05:78:38:f6:bf:a7:c7:00:9b:47:af:
6d:8c:a4:73:11:6d:e0:17:fc:ef:01:76:57:81:bd:2f:34:44:
13:87:9c:c5:81:1f:6c:a1:93:a3:fd:d1:9a:b1:24:33:68:37:
db:da:5a:79:b5:ad:e8:9b:0b:8c:b2:90:7e:aa:d6:7d:35:0f:
33:ce:72:f5:48:ac:7b:22:df:91:da:bd:a9:b2:ca:e1:42:6b:
65:85:17:fd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZyQjVVjtJpgzxjNSe/K58skMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMjI0MTY0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjkzMzZhNWNmZWVlYjc5M2RjMDU5ODRiMDkxNWNhNDY5ZDBkYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/jtMo4gSVetYME8sreaO6uJGN8J
bmrw0JTt0z5AdPgxrbDmf7rBaKa+FBsLGtBW916xm5nMpYvObmflr+8Gy4M1Uep1
2iesb3Wfh0ZTSt4fXeTP3yw3vqHE4Z08RKXkjWrfhZbnH35EFSY3dwaQshiC2vGe
pVZjX/QkIWcJkdmQABBUpQnQu+YynG4vSzn1VICW8B4PcdIaNU8iCsb8IchrA/Rf
+XiBYTjzyaqN3T7NdTC+gHXDxeLcvzfvkUk8/FXpnPyYMSm7BJ2OqmxuSRBDuBEx
OWqXivRHNggQn4MB/n2etNP7a3Yt39y15LeMo1HbeGAKIa5VbzKnP4IF3QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGuTNqXP7ut5PcBZhLCRXKRp0Nv7MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvYTVNMnBjX3U2M2s5d0ZtRXNKRmNwR25RMl9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhAyQDAN
BgkqhkiG9w0BAQsFAAOCAQEAai8dJmUhXdgGH1yAvt1k3LA3KFriHFjEvpuyJhb0
GM5LYKTTSp7Sz/cUVW8tlLNaYEoPKY2HwUJ9wF9usG3Hj+X7sf8FPGSV7+zYAaGb
qIeFY7k1qpHaGs6gfzwDkT89vGQUYZ8MgVncIIsj6MejNz9qsICVO+nJasE0duUx
sdt1d5RiIp+QyqYLOO+zu/orTs/T/vhpeYlwpnn0aiVD8697OGvjEgKfXQV4OPa/
p8cAm0evbYykcxFt4Bf87wF2V4G9LzREE4ecxYEfbKGTo/3RmrEkM2g329paebWt
6JsLjLKQfqrWfTUPM85y9UiseyLfkdq9qbLK4UJrZYUX/Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:50 2026 by rpki-client