Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sILv1Z4J-a4PWaAyCTsL4cNmRlc.roa
File: sILv1Z4J-a4PWaAyCTsL4cNmRlc.roa (raw, json)
Hash identifier: cvxnJVErfQuyxSRBvTyqW7EDVO0g3ardlqkFGo/cs2s=
Subject key identifier: B0:82:EF:D5:9E:09:F9:AE:0F:59:A0:32:09:3B:0B:E1:C3:66:46:57
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C995B5DE9F105F92D835CA91162BF1627
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sILv1Z4J-a4PWaAyCTsL4cNmRlc.roa
Signing time: Thu 26 Feb 2026 09:50:27 +0000
ROA not before: Thu 26 Feb 2026 09:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:1180:36af::/48 maxlen: 48
2a09:17c2::/32 maxlen: 32
2a0a:2d07:24::/48 maxlen: 48
2a0a:2d07:cc::/48 maxlen: 48
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:df45:25b::/48 maxlen: 48
2a12:ecc0:22::/48 maxlen: 48
2a13:18c6:c9a1::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:5b:5d:e9:f1:05:f9:2d:83:5c:a9:11:62:bf:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 26 09:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b082efd59e09f9ae0f59a032093b0be1c3664657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:cb:46:43:05:4c:89:34:76:02:66:58:47:
01:29:12:73:9a:dd:f4:53:8c:c5:fb:d9:3c:c7:1e:
c1:94:62:64:fd:6b:45:24:40:ed:1b:0d:93:ad:13:
da:f3:4a:a7:4e:98:5e:35:1a:3c:23:b5:2f:2a:6a:
84:6d:5b:4a:40:40:b1:c9:bd:b2:c7:fe:70:11:f8:
49:26:ed:1e:da:b2:0b:04:4a:6d:db:00:62:a7:1f:
66:9b:09:26:4d:a6:03:2e:e7:44:48:7e:8c:cd:d3:
7a:ad:65:99:7a:6f:5b:a1:b2:43:18:06:5d:d7:c9:
08:e5:51:7a:c1:fc:5f:ae:b8:14:2c:cb:ce:7b:23:
bf:d5:ef:d2:53:ae:a0:d7:a8:6b:ed:7c:6a:df:ae:
4f:df:61:5c:69:b7:b0:65:cb:17:18:ef:52:3d:dd:
5f:61:5d:f2:63:48:6f:30:d3:8e:44:de:6a:f4:d3:
e0:58:19:8d:db:6c:6b:9f:d2:7a:51:55:6f:dc:67:
2f:f3:5f:c5:2d:5a:7e:73:4c:58:95:cd:34:49:2a:
a4:9a:9a:d2:18:36:aa:d7:84:71:cc:16:f8:ae:f7:
09:fb:60:3f:a0:0c:29:2f:6d:01:49:37:73:55:11:
ce:71:86:44:c6:63:82:6c:cf:0d:4b:5d:d2:e6:0d:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:EF:D5:9E:09:F9:AE:0F:59:A0:32:09:3B:0B:E1:C3:66:46:57
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sILv1Z4J-a4PWaAyCTsL4cNmRlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:36af::/48
2a09:17c2::/32
2a0a:2d07:24::/48
2a0a:2d07:cc::/48
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:df45:25b::/48
2a12:ecc0:22::/48
2a13:18c6:c9a1::/48
2a13:c900:66::/48
Signature Algorithm: sha256WithRSAEncryption
4d:3c:db:3f:60:18:f7:49:37:b5:5e:7d:fe:89:5c:4c:1c:9e:
2c:56:3c:02:47:c1:0d:ed:82:af:b7:ea:e6:4a:3c:17:30:b5:
bc:0d:c3:43:b3:49:83:1d:84:ba:71:93:c1:b8:27:fc:f0:89:
e6:ce:77:88:bd:90:01:15:a4:63:a6:12:6c:26:6c:43:4c:9d:
dd:4e:7e:2b:8e:79:06:dc:a1:72:aa:4f:55:51:0c:63:71:7d:
be:81:e3:ba:15:f7:70:e6:ed:78:92:fb:f2:ba:6e:da:71:7a:
24:f8:08:82:a8:dd:4a:b2:be:e4:23:9e:a7:6d:b6:06:f0:f2:
67:f8:7a:51:78:67:4c:57:5c:be:fc:d5:41:d6:d1:96:b0:56:
4d:3b:94:21:49:6c:46:9e:59:2d:e8:c3:82:f0:bd:ed:53:19:
5d:84:24:9d:9c:36:c6:81:70:75:80:f6:12:ad:2d:f9:a1:27:
68:d7:c3:da:56:73:78:51:1b:30:a0:5c:04:74:d8:64:ec:1f:
b2:73:58:60:80:00:a4:d5:ca:61:d3:de:2d:33:38:7e:f4:75:
c0:a6:f7:8d:f6:7d:a3:d0:71:5a:a6:d0:52:19:11:7e:f5:3a:
91:e8:4b:73:18:3f:75:ea:ff:4c:ae:0e:48:ed:0c:98:3e:3b:
dd:75:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:51 2026 by rpki-client