Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pKP5j69BcGuBSduSrCjCi7bHO_c.roa
File: pKP5j69BcGuBSduSrCjCi7bHO_c.roa (raw, json)
Hash identifier: qwB4eZkEuzogONgSywxswfY0Iqq2VE4xtO7Pr3X6pC8=
Subject key identifier: A4:A3:F9:8F:AF:41:70:6B:81:49:DB:92:AC:28:C2:8B:B6:C7:3B:F7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EB67DCC2D9A768C44FB7E273A0D9BC734
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pKP5j69BcGuBSduSrCjCi7bHO_c.roa
Signing time: Thu 11 Jun 2026 11:42:38 +0000
ROA not before: Thu 11 Jun 2026 11:42:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a0f:b400::/29 maxlen: 29
2a10:3340::/29 maxlen: 29
2a12:ef00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:7d:cc:2d:9a:76:8c:44:fb:7e:27:3a:0d:9b:c7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 11 11:42:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4a3f98faf41706b8149db92ac28c28bb6c73bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:86:80:23:ce:4e:ff:b8:5e:d2:f1:83:14:
d5:d2:6e:13:fe:df:0f:2c:19:f7:74:88:23:b8:94:
4f:a2:8e:1a:7d:a9:3f:38:27:bd:73:16:ef:69:1f:
03:13:09:f5:3b:b4:a5:75:c4:c6:9f:2f:1c:ff:89:
35:9c:53:7e:eb:03:b2:75:44:52:97:75:c3:3b:41:
df:8b:96:51:70:b1:5d:09:93:35:55:45:f2:3b:76:
68:0a:a8:44:eb:37:5c:b9:91:75:60:74:8e:1c:66:
fe:56:3b:93:01:7e:c0:e1:43:4f:95:6d:12:60:cb:
5e:17:65:d7:79:67:f0:41:0f:b6:53:a7:2b:8e:f7:
53:7c:3f:73:00:6b:ce:58:d0:53:3a:81:2b:38:c4:
37:5f:00:20:c2:81:57:a4:dc:b0:51:b6:71:3b:0a:
06:3a:97:9e:bb:da:d4:a1:98:7c:50:24:ef:d6:ce:
83:a6:bc:db:b1:8c:61:b9:53:9e:b6:7c:af:9e:93:
13:67:87:fa:9c:fa:e4:44:14:d8:89:05:33:85:3b:
a1:15:c5:6c:dc:58:00:a1:8d:86:df:f9:13:80:72:
d5:ef:5d:28:09:34:60:34:25:8e:93:f3:e1:2d:28:
bb:f3:21:41:95:eb:9f:ad:75:df:c9:9c:2e:17:c2:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A3:F9:8F:AF:41:70:6B:81:49:DB:92:AC:28:C2:8B:B6:C7:3B:F7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pKP5j69BcGuBSduSrCjCi7bHO_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b400::/29
2a10:3340::/29
2a12:ef00::/29
Signature Algorithm: sha256WithRSAEncryption
42:cc:b8:e9:15:e6:80:63:a2:f0:13:22:52:ed:e0:fa:87:3e:
15:e0:61:81:df:3a:2e:b1:58:0a:15:d3:f3:22:b0:7a:12:ce:
da:d2:2b:65:94:e9:be:ea:a0:a9:e0:f7:e5:9a:0c:99:89:03:
f0:33:fb:ae:0b:65:f7:23:4d:51:ed:5c:19:d6:a5:9a:8a:43:
a7:85:b0:02:b7:1e:03:60:03:ec:47:6a:47:5c:74:2d:79:77:
55:5a:45:71:97:e7:72:81:6c:65:4f:a4:50:6d:23:8e:0e:a3:
30:c0:83:03:76:aa:bb:7a:45:00:0b:2b:23:ed:76:00:14:0e:
81:3a:44:48:a0:06:ee:d4:ee:f0:e9:06:13:b7:bc:6a:2d:a0:
a3:34:13:8f:f9:53:91:0e:8f:54:aa:b6:88:fa:75:56:a6:4a:
94:6c:e0:c1:8c:8c:27:67:74:62:03:68:11:e2:cb:6d:33:b2:
09:19:c7:be:44:67:56:73:55:47:3c:36:b0:1b:24:8d:ea:6f:
5b:6c:4e:17:54:50:3b:68:2c:c2:14:00:2c:0e:dd:37:d8:24:
65:12:32:39:b4:67:0a:a4:a8:0d:e3:e2:0a:36:b3:a6:b7:ba:
be:25:8f:e9:a6:59:e6:e3:68:d4:e1:57:e0:93:35:75:86:05:
11:c5:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:42 2026 by rpki-client