Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iMZaffbQ4QmeQuhT525PajJw44M.roa
File: iMZaffbQ4QmeQuhT525PajJw44M.roa (raw, json)
Hash identifier: bPCKR5muJaz25Ol2WjP1nWQA4L2XbxZ7PguUNyU0niU=
Subject key identifier: 88:C6:5A:7D:F6:D0:E1:09:9E:42:E8:53:E7:6E:4F:6A:32:70:E3:83
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C75D70BEDE4BEA775885000C800C5A139
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iMZaffbQ4QmeQuhT525PajJw44M.roa
Signing time: Thu 19 Feb 2026 12:19:13 +0000
ROA not before: Thu 19 Feb 2026 12:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 2a07:a300::/29 maxlen: 29
2a0f:31c5::/32 maxlen: 32
2a13:d44::/32 maxlen: 32
2a13:1480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:d7:0b:ed:e4:be:a7:75:88:50:00:c8:00:c5:a1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 19 12:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88c65a7df6d0e1099e42e853e76e4f6a3270e383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:62:11:4e:dd:e0:b9:75:1a:74:52:56:30:
c9:08:9e:64:b0:cf:0d:69:9a:55:c9:7d:95:d4:14:
9d:3b:50:0d:f2:06:2a:5e:71:8a:f3:18:a5:3b:c6:
59:12:90:75:cf:39:bc:9f:1c:e5:d6:f1:ff:d4:2e:
b7:3e:dc:52:a0:b2:e3:02:84:80:28:d5:68:d6:02:
52:68:04:35:36:f3:22:e3:8f:9e:9b:69:13:95:b5:
5e:8c:f5:1a:91:d1:dc:94:7c:f8:49:b7:ea:01:b0:
c7:eb:fa:be:bc:74:5d:b2:35:50:84:b4:a4:6a:ef:
b5:30:ae:39:80:90:d6:a3:3b:fb:92:04:62:11:d3:
8b:cf:c4:46:84:55:4b:11:af:44:a6:8b:59:18:c2:
bd:4e:b1:4f:09:eb:14:14:cf:7c:ac:9e:02:f6:1e:
6b:a2:cf:26:21:f6:bb:eb:66:16:7c:f4:be:2f:1a:
b3:7b:4e:e5:70:41:79:e0:05:a6:10:79:26:d2:c3:
0b:16:ba:ba:07:64:17:2d:96:2b:38:a8:09:2a:8c:
33:5b:f0:7a:76:39:44:a0:e1:10:bd:0d:4f:da:3a:
b8:5a:7b:6d:61:6a:f0:7f:34:25:2c:09:c7:65:09:
90:73:3f:68:bf:a3:4a:ec:29:51:08:56:bd:e0:a8:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C6:5A:7D:F6:D0:E1:09:9E:42:E8:53:E7:6E:4F:6A:32:70:E3:83
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iMZaffbQ4QmeQuhT525PajJw44M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a300::/29
2a0f:31c5::/32
2a13:d44::/32
2a13:1480::/29
Signature Algorithm: sha256WithRSAEncryption
a3:24:49:bc:11:dd:9d:cd:8d:b6:4a:73:ea:af:aa:3d:20:64:
76:8b:26:2e:3e:d6:1f:60:bc:2c:37:b9:f2:b6:ab:33:10:b2:
58:be:3b:64:29:33:0f:0c:a8:d8:2c:79:e7:98:a1:f8:9a:11:
56:b7:24:19:d4:0c:c6:1a:91:d7:13:7d:db:29:a4:f9:e1:8e:
4d:9c:da:10:80:58:3d:9d:06:39:90:fb:50:a9:34:85:e2:a1:
48:6b:52:0c:90:63:2d:19:b7:20:36:65:22:6d:e9:06:93:58:
90:3b:b4:ec:15:24:e2:25:9b:af:d8:b6:91:9f:e0:f8:93:cd:
4c:d1:4a:ca:51:f9:0c:90:9f:bd:f7:e6:55:7b:4a:f0:2f:bb:
46:c3:61:84:66:dd:fe:27:23:e3:e2:ff:c9:2a:7d:3d:cc:76:
84:04:34:20:1a:c5:bc:7c:d7:58:08:25:1e:c6:e8:bb:24:e3:
91:60:99:d1:92:4e:98:9c:4b:7e:c2:18:21:76:ba:33:f1:42:
92:80:f2:b6:18:5f:2e:2c:2f:7e:e6:c5:67:9d:1f:77:cb:2b:
ed:f0:b9:7b:f0:fe:03:c1:da:2b:f7:ff:c0:9e:01:d0:80:ed:
db:88:ea:9c:2c:86:57:0a:41:ea:05:b7:06:22:c2:f2:1a:2b:
0b:71:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:42:03 2026 by rpki-client