Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sUyvWw1AD2pu1v0Mx6O_CGZf0uc.roa
File: sUyvWw1AD2pu1v0Mx6O_CGZf0uc.roa (raw, json)
Hash identifier: Danfw4/28HyyTDX5PWjT8TKZooG+HqdmfzX8WU7GfYo=
Subject key identifier: B1:4C:AF:5B:0D:40:0F:6A:6E:D6:FD:0C:C7:A3:BF:08:66:5F:D2:E7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C70049071E13F82B52F6E0D1AF24F1733
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sUyvWw1AD2pu1v0Mx6O_CGZf0uc.roa
Signing time: Wed 18 Feb 2026 09:11:13 +0000
ROA not before: Wed 18 Feb 2026 09:11:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152920
IP address blocks: 2a0f:2706::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:04:90:71:e1:3f:82:b5:2f:6e:0d:1a:f2:4f:17:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 18 09:11:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b14caf5b0d400f6a6ed6fd0cc7a3bf08665fd2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:66:3c:5f:f8:15:82:b0:f2:63:bc:e1:76:
9b:d4:62:36:8c:b0:1a:31:0e:a0:ac:f0:af:8a:b9:
a8:6c:d8:06:60:37:43:99:03:12:eb:3d:de:e5:ad:
2f:65:97:10:43:8d:59:4c:1e:a0:86:68:79:8d:8d:
ca:db:db:88:f7:05:12:11:d3:b2:0b:8a:b3:2d:4f:
86:8e:97:cf:95:7f:1f:ec:52:df:e5:24:0a:77:91:
e0:27:23:01:d6:b8:8a:b1:bd:8b:9e:60:71:39:80:
ed:7a:e8:09:b3:03:37:15:e1:19:b8:d8:a3:0f:2d:
c1:a3:bf:bf:3f:bc:e5:b2:0b:68:3b:39:52:57:3d:
59:6f:72:30:b6:b5:9d:a2:98:fb:f1:3b:be:7b:33:
1e:eb:c7:e8:a8:83:6c:d0:de:e0:52:13:df:6a:50:
ea:a5:5e:ca:ff:6f:b8:bd:15:8a:e3:01:12:1e:67:
80:8c:40:c8:17:8e:8e:aa:05:2f:0a:2c:a8:28:c3:
af:dd:11:f4:3a:77:1c:de:71:29:69:81:b9:0e:ff:
56:d7:25:e8:27:60:10:01:3b:c4:e8:21:11:ed:5c:
8d:0b:dc:20:11:39:52:69:1b:c8:59:c7:e0:ac:0e:
83:89:14:f1:c4:87:9f:f8:d0:a2:df:12:4a:c6:52:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4C:AF:5B:0D:40:0F:6A:6E:D6:FD:0C:C7:A3:BF:08:66:5F:D2:E7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sUyvWw1AD2pu1v0Mx6O_CGZf0uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2706::/32
Signature Algorithm: sha256WithRSAEncryption
73:9c:c4:fa:66:f4:75:2e:4a:38:b4:1f:55:de:9b:16:5d:1f:
e9:6e:10:9d:79:18:51:0b:2b:d3:06:81:ea:ba:7a:1d:e7:7d:
b4:78:e0:86:66:e3:b0:6b:f7:d6:e1:71:64:6d:e3:d2:e3:3e:
e2:4f:55:2b:c1:17:1d:0b:ba:14:26:dc:2e:a1:1e:e4:d3:98:
b4:bb:bb:e2:5b:0a:c1:26:8a:38:a3:c9:36:66:eb:06:25:de:
62:e5:72:98:eb:a8:de:3c:9c:ca:59:ba:64:bf:72:4e:18:21:
c6:dd:45:bf:bb:2d:8f:3d:42:6f:e1:88:4a:53:15:92:57:d7:
f4:1c:16:fd:ac:75:1f:e4:3d:17:df:67:9a:4e:ed:7b:42:39:
85:3f:84:1d:6d:49:b4:36:d6:b2:f4:1c:7a:4d:52:8d:c4:69:
09:ed:4b:04:3c:01:33:57:d1:50:d6:8b:a5:9e:b2:c8:e0:17:
cb:98:d6:95:93:fa:bd:17:d2:85:4b:79:b2:8c:3a:52:6c:fe:
3b:69:97:d8:bd:f7:a9:f7:06:65:d8:af:4e:a1:fb:9a:ab:ed:
3f:69:6f:38:71:f0:31:76:42:dc:92:6b:e7:29:2a:b4:69:d5:
7c:75:f4:0d:ca:23:41:f5:cc:3d:ef:83:79:df:d8:fc:6e:05:
b0:30:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:04 2026 by rpki-client