Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p5aBCNC1fRQdezbKFnp2cneAU2M.roa
File: p5aBCNC1fRQdezbKFnp2cneAU2M.roa (raw, json)
Hash identifier: t/x/viZbc6DAkF01e0arv+Fz9QQ2d7b8GhivGP4IYMY=
Subject key identifier: A7:96:81:08:D0:B5:7D:14:1D:7B:36:CA:16:7A:76:72:77:80:53:63
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A086B61EB4F9B1F56311820EA6F68689B6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p5aBCNC1fRQdezbKFnp2cneAU2M.roa
Signing time: Wed 09 Sep 2026 15:07:57 +0000
ROA not before: Wed 09 Sep 2026 15:07:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35810
IP address blocks: 2a0f:1203::/32 maxlen: 32
2a13:18c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:b6:1e:b4:f9:b1:f5:63:11:82:0e:a6:f6:86:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 9 15:07:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7968108d0b57d141d7b36ca167a767277805363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:1b:c6:ee:0b:1a:e6:ac:ea:9a:af:1c:ac:
e1:5b:9d:2c:99:ff:50:8a:1a:13:78:ef:26:45:95:
89:60:77:4d:a6:fb:3e:62:a6:f8:d7:61:60:01:82:
8d:26:23:85:ea:f9:1e:84:de:68:a7:52:70:25:e5:
90:13:37:99:94:d4:1e:8e:3b:4a:b7:6d:06:0c:af:
7c:02:3a:b0:88:eb:1f:15:22:37:c9:fa:cc:1a:e8:
c5:7a:d4:0a:5e:53:67:8f:95:5b:78:8e:cb:15:1d:
f2:56:85:03:a0:25:59:64:b1:ed:05:c5:37:00:d9:
dc:97:30:b4:3c:e1:c0:f5:fd:fc:b7:88:bf:5e:fe:
6a:57:5d:99:97:62:58:cd:75:ae:fe:ae:04:34:d2:
3f:f1:f6:fe:f4:c3:31:09:be:18:a2:54:e4:e5:e9:
00:8b:bb:53:a4:8d:5f:8c:e0:45:b4:78:c3:d7:5f:
f4:84:97:fd:32:c9:a4:e9:50:16:71:1d:12:95:e4:
39:25:26:a6:1f:c6:d5:07:e3:64:f2:d9:af:ef:fc:
d2:73:70:03:78:05:e8:03:63:10:31:43:b3:bc:d4:
11:36:60:c4:02:3b:a0:44:06:56:33:fc:1b:4f:8c:
b3:5f:24:41:5b:6a:05:0c:91:0d:0d:a9:8d:f3:95:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:96:81:08:D0:B5:7D:14:1D:7B:36:CA:16:7A:76:72:77:80:53:63
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p5aBCNC1fRQdezbKFnp2cneAU2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1203::/32
2a13:18c2::/32
Signature Algorithm: sha256WithRSAEncryption
70:65:23:98:c2:04:66:8f:b6:ac:75:56:57:43:58:76:96:f7:
35:01:9c:f9:58:0c:ca:87:06:04:f9:fd:8e:d6:d3:18:08:c8:
56:a0:18:2d:fe:45:11:ef:68:7a:52:24:26:b6:58:cf:d3:fc:
64:a3:e5:67:8a:03:62:61:ed:fa:eb:13:79:e4:c3:6d:41:6c:
72:ec:35:d7:6f:f4:e2:4a:8b:b6:02:ec:cb:e6:63:5f:d8:7d:
56:49:3a:0a:28:03:63:90:b3:ee:86:47:6a:f5:95:3a:32:e7:
04:a2:59:37:79:b1:cc:34:5d:9a:19:76:03:7d:1b:71:84:76:
46:1e:1c:27:ed:29:2a:0f:6b:2b:17:97:b8:2a:b4:2f:f5:a0:
48:79:0a:b3:1f:00:8d:2e:0c:24:3a:58:ed:60:eb:02:97:e0:
8a:1a:d9:5e:55:5f:1c:b4:39:04:9f:97:a6:e1:97:c0:93:5b:
98:e6:b2:48:25:dc:87:22:44:2f:0e:d4:0b:9a:e8:b4:fc:5e:
58:6f:58:0c:9f:6f:d9:30:ec:0e:4f:fe:7f:5f:68:5a:ad:b5:
6c:9e:ae:18:16:d0:91:70:84:41:de:53:09:c8:2b:ee:83:0c:
07:6c:8e:9a:b4:fd:ed:f8:a5:c5:d3:37:bf:c9:0a:db:93:09:
da:6a:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:04 2026 by rpki-client