Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/d9p1t8KeXXzyhPVV8_39KmhNLRs.roa
File: d9p1t8KeXXzyhPVV8_39KmhNLRs.roa (raw, json)
Hash identifier: 5HkGhwsXe/CzTtfJRlOQx36g9PAgPfv0APILK3m6riI=
Subject key identifier: 77:DA:75:B7:C2:9E:5D:7C:F2:84:F5:55:F3:FD:FD:2A:68:4D:2D:1B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C2D9ABD568A5F8724D99000336264785C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/d9p1t8KeXXzyhPVV8_39KmhNLRs.roa
Signing time: Thu 05 Feb 2026 11:40:41 +0000
ROA not before: Thu 05 Feb 2026 11:40:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205486
IP address blocks: 2a0f:3640::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:9a:bd:56:8a:5f:87:24:d9:90:00:33:62:64:78:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 5 11:40:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77da75b7c29e5d7cf284f555f3fdfd2a684d2d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:5e:b7:64:3d:39:92:f8:e3:f7:72:49:8e:
6c:3c:29:84:e4:36:65:04:ae:9c:98:8a:16:3b:5e:
1f:27:19:4a:09:51:a5:08:6d:c8:d8:44:38:8e:10:
73:69:69:69:aa:4b:3e:19:88:7b:df:38:2a:dd:8d:
b2:33:e0:ac:ee:77:38:bc:59:7e:c3:de:fb:14:8a:
f7:a5:a3:7d:c6:1b:88:a7:44:3f:1b:4d:8e:2c:0d:
78:7a:ea:fc:05:ab:90:3b:b9:ea:29:44:ab:c0:a2:
11:cb:7e:e0:65:6b:93:ea:27:34:d8:08:77:27:a4:
96:cc:aa:30:7f:22:6e:e7:81:64:89:7b:07:da:61:
54:81:f4:ff:63:19:d9:e3:2b:2b:d1:f9:3a:e5:57:
e8:74:f9:f7:51:a1:0b:f2:ca:71:8d:01:f0:69:14:
aa:b5:2a:13:ec:92:b3:f2:f6:fb:3f:f4:d2:a8:e8:
bb:6d:e2:bc:3d:31:d4:d3:29:70:71:74:3b:68:99:
a7:2c:b1:f8:60:eb:2c:aa:e3:bb:b7:12:00:50:50:
09:d7:52:c2:1d:94:8d:db:23:f3:56:65:a9:3e:a0:
67:54:01:66:61:6f:27:91:fa:39:96:ed:22:c3:b3:
33:57:51:8b:c4:17:9e:09:d4:8d:d9:0c:92:2a:8c:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DA:75:B7:C2:9E:5D:7C:F2:84:F5:55:F3:FD:FD:2A:68:4D:2D:1B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/d9p1t8KeXXzyhPVV8_39KmhNLRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3640::/29
2a0f:9e00::/29
Signature Algorithm: sha256WithRSAEncryption
05:ab:b8:30:d7:35:0f:d7:8d:99:d6:9f:20:a3:7c:aa:55:f6:
1a:f2:bf:88:13:72:95:b6:b5:e0:cf:76:06:4a:49:81:35:e5:
38:c3:be:df:41:8b:46:85:df:f1:00:e8:4c:73:b1:8d:7e:05:
cc:2d:30:e1:ff:5f:14:ba:d8:5f:99:65:20:47:20:a8:6e:25:
2a:f1:00:79:11:e0:28:42:4f:ad:6c:b6:6d:78:03:3e:a8:af:
53:1f:4f:c1:9d:9f:e7:2d:0f:97:f4:3a:0f:0c:18:f8:79:97:
ac:82:ad:1a:e1:a1:f8:31:d8:97:e0:d7:c1:87:6f:9c:78:5b:
24:49:75:23:8a:2c:9d:e3:28:d1:73:82:5c:16:af:a0:e0:ef:
e0:5c:a4:5f:1e:36:9c:8b:65:bc:21:91:af:d0:0e:d5:96:6c:
1a:7c:7a:c9:e2:d6:94:f5:00:ef:b5:73:fe:74:b1:39:95:e1:
e5:85:2a:0e:b8:08:fd:e9:71:77:2e:58:a9:b3:62:3a:e1:bc:
d9:5b:8d:86:77:65:eb:14:3d:e7:6b:d7:68:f9:45:16:19:94:
b3:5c:06:6d:02:1f:42:06:26:8b:17:23:e7:71:be:b6:42:54:
07:09:7f:65:5e:e8:31:d0:00:20:27:41:95:20:39:e4:10:12:
81:5f:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:00 2026 by rpki-client