Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ewOeESUtUtfErpwGZ1pfxDl3hzU.roa
File: ewOeESUtUtfErpwGZ1pfxDl3hzU.roa (raw, json)
Hash identifier: OaPP0P6V8I39dItZJQxecY9sWCaMnybEzND7nVSdSwE=
Subject key identifier: 7B:03:9E:11:25:2D:52:D7:C4:AE:9C:06:67:5A:5F:C4:39:77:87:35
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0C44471D7BE0ECC0EA1C24DE52F21F361
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ewOeESUtUtfErpwGZ1pfxDl3hzU.roa
Signing time: Mon 21 Sep 2026 14:00:14 +0000
ROA not before: Mon 21 Sep 2026 14:00:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207449
IP address blocks: 2a13:8c85::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:71:d7:be:0e:cc:0e:a1:c2:4d:e5:2f:21:f3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 21 14:00:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b039e11252d52d7c4ae9c06675a5fc439778735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:72:1c:9f:9d:ce:17:0c:24:3d:40:dd:0b:
21:ac:83:12:00:47:85:c3:49:63:a6:14:45:66:6b:
60:40:99:d5:42:ed:ec:d5:bd:a5:1c:68:e8:2b:30:
e3:06:bd:a0:9c:7b:11:1b:3d:87:12:cd:c2:8d:f4:
9f:8b:4c:ad:9f:f4:8f:1f:13:77:9c:c6:db:5a:9f:
ec:05:dd:4e:f2:b5:12:7f:eb:8b:f6:69:a2:6d:8f:
3c:71:f5:f5:7a:9f:6e:b1:9c:e9:ff:9e:ed:61:c9:
f1:d8:ab:7d:02:34:b4:ef:01:7b:ea:93:1b:33:ad:
28:d8:c3:f6:d2:83:9b:4f:ff:3c:9f:54:f1:e2:f2:
16:2b:94:30:e5:87:b9:aa:1c:b8:66:5a:dd:65:8b:
9b:56:47:4a:17:fc:71:b2:3f:1c:41:e3:bb:fd:d8:
31:f4:66:ce:1e:81:2c:75:fd:f2:be:9a:46:15:1b:
64:67:3e:d1:ea:59:2b:63:fd:c7:89:b4:3f:3c:2f:
35:84:4e:d3:e8:a0:04:8a:6d:27:08:5d:fe:f2:99:
54:f3:4b:f6:09:e8:be:ab:db:71:bb:68:64:a3:35:
d1:77:26:81:fc:96:55:ef:fb:49:5c:26:fc:ad:55:
04:ee:af:01:d1:0d:41:05:7f:24:48:38:91:d0:8b:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:03:9E:11:25:2D:52:D7:C4:AE:9C:06:67:5A:5F:C4:39:77:87:35
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ewOeESUtUtfErpwGZ1pfxDl3hzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8c85::/32
Signature Algorithm: sha256WithRSAEncryption
00:b2:fd:64:1d:ca:7e:79:34:26:e1:34:5b:6b:50:e9:3b:ae:
7e:0c:7a:e3:ec:9d:4c:c3:33:ab:3f:b0:96:d5:93:01:e9:9e:
9c:59:83:4d:de:0e:55:21:44:13:06:29:a5:bd:f2:72:bb:fc:
2a:f4:c5:ed:91:95:6b:e6:cb:af:a3:88:f8:99:29:68:f3:0b:
cc:4f:48:18:14:bc:fb:65:c3:62:d0:26:8b:72:f0:fb:7b:65:
52:5a:e9:92:f1:a2:07:10:76:52:27:39:f2:e6:ac:05:a4:6f:
f4:bf:53:f5:ad:93:0d:e8:3d:54:47:b3:9c:aa:21:4d:15:79:
11:30:e6:e1:0b:0c:6a:44:58:f9:ec:16:ac:0e:16:9f:bf:08:
e4:58:52:83:c2:1f:43:f7:2b:16:b7:0e:21:94:3a:64:ce:b3:
48:b4:5a:b3:92:59:e5:11:84:f3:d1:a8:50:7e:a0:11:f1:f6:
e4:c7:07:da:e6:d4:d0:a0:fb:96:1f:ba:c6:ed:c1:2a:c1:98:
1a:ab:71:5d:15:79:2c:c2:9a:55:f4:6c:b0:e4:56:ac:32:19:
d4:b7:34:88:5f:24:f8:df:6f:36:ae:c2:42:31:64:43:66:5e:
a4:e7:15:25:fe:cb:f4:f8:d5:7e:73:d8:57:22:c7:3a:eb:75:
16:2b:0c:ce
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDERHHXvg7MDqHCTeUvIfNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwOTIxMTQwMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjAzOWUxMTI1MmQ1MmQ3YzRhZTljMDY2NzVhNWZjNDM5Nzc4NzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1epyHJ+dzhcMJD1A3QshrIMSAEeF
w0ljphRFZmtgQJnVQu3s1b2lHGjoKzDjBr2gnHsRGz2HEs3CjfSfi0ytn/SPHxN3
nMbbWp/sBd1O8rUSf+uL9mmibY88cfX1ep9usZzp/57tYcnx2Kt9AjS07wF76pMb
M60o2MP20oObT/88n1Tx4vIWK5Qw5Ye5qhy4ZlrdZYubVkdKF/xxsj8cQeO7/dgx
9GbOHoEsdf3yvppGFRtkZz7R6lkrY/3HibQ/PC81hE7T6KAEim0nCF3+8plU80v2
Cei+q9txu2hkozXRdyaB/JZV7/tJXCb8rVUE7q8B0Q1BBX8kSDiR0Iu7swIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHsDnhElLVLXxK6cBmdaX8Q5d4c1MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZXdPZUVTVXRVdGZFcnB3R1oxcGZ4RGwzaHpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOMhTAN
BgkqhkiG9w0BAQsFAAOCAQEAALL9ZB3Kfnk0JuE0W2tQ6Tuufgx64+ydTMMzqz+w
ltWTAemenFmDTd4OVSFEEwYppb3ycrv8KvTF7ZGVa+bLr6OI+JkpaPMLzE9IGBS8
+2XDYtAmi3Lw+3tlUlrpkvGiBxB2Uic58uasBaRv9L9T9a2TDeg9VEeznKohTRV5
ETDm4QsMakRY+ewWrA4Wn78I5FhSg8IfQ/crFrcOIZQ6ZM6zSLRas5JZ5RGE89Go
UH6gEfH25McH2ubU0KD7lh+6xu3BKsGYGqtxXRV5LMKaVfRssORWrDIZ1Lc0iF8k
+N9vNq7CQjFkQ2ZepOcVJf7L9PjVfnPYVyLHOut1FisMzg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:58 2026 by rpki-client