Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vreci1Kh9LgOooMnjMsSvYxMGY0.roa
File: vreci1Kh9LgOooMnjMsSvYxMGY0.roa (raw, json)
Hash identifier: 2OaHZGQDWy8o0TGC+Bj0JWDnk8lTWUsSdfMNC+HOkZw=
Subject key identifier: BE:B7:9C:8B:52:A1:F4:B8:0E:A2:83:27:8C:CB:12:BD:8C:4C:19:8D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0C2CA39527FC88076AAEA38B3E3864F3E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vreci1Kh9LgOooMnjMsSvYxMGY0.roa
Signing time: Mon 21 Sep 2026 07:07:07 +0000
ROA not before: Mon 21 Sep 2026 07:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2a06:4d80::/29 maxlen: 29
2a07:a300::/29 maxlen: 29
2a0e:8880::/29 maxlen: 29
2a0f:16c0::/29 maxlen: 29
2a0f:29c0::/29 maxlen: 29
2a0f:2d40::/29 maxlen: 32
2a0f:2f40::/29 maxlen: 29
2a0f:3640::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:ac00::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a10:37c0::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5200::/29 maxlen: 29
2a10:6840::/29 maxlen: 29
2a11:4c40::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a12:ba00::/29 maxlen: 29
2a13:1480::/29 maxlen: 29
2a13:df00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:ca:39:52:7f:c8:80:76:aa:ea:38:b3:e3:86:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 21 07:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beb79c8b52a1f4b80ea283278ccb12bd8c4c198d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:53:aa:15:e4:0b:e6:35:99:88:d1:09:ba:cc:
5c:2d:a9:d0:65:95:41:44:0a:f1:25:5c:d9:92:33:
1d:1b:0e:a7:52:28:a4:5d:ed:d5:cd:87:4f:cf:b7:
c8:29:90:ad:fb:f8:38:00:69:c7:4a:c7:ce:76:4c:
f2:b8:16:25:44:c6:f6:71:b4:8b:74:4b:95:32:0c:
3b:47:7f:db:ba:b6:6f:4e:c8:bb:a4:5a:fb:30:bb:
8d:f9:61:83:2f:51:ca:5c:d6:c1:cd:2a:4b:be:92:
4a:d1:a1:97:54:44:1c:5a:1d:3f:48:16:c4:eb:7d:
78:9a:dc:e3:f4:11:92:58:10:11:80:0a:c9:5b:2a:
06:36:9f:06:f3:f2:50:0a:00:e7:9c:c9:29:3c:0e:
d2:76:a7:b5:7a:7d:a6:83:f0:94:ac:db:bb:cb:6f:
ef:c9:e4:7d:fe:50:82:32:a2:5d:05:b5:dc:44:8d:
61:00:73:44:9f:26:19:d8:ef:d9:df:36:b0:ab:65:
c3:7f:72:a6:42:7c:39:db:5f:92:2c:f6:e2:d7:03:
62:71:c4:10:0b:70:55:b1:e4:76:6b:6e:08:4c:68:
1e:33:f8:98:8f:f5:0f:33:51:90:2f:7a:25:03:2b:
56:ae:fa:ce:66:81:99:c7:41:d0:7f:21:8a:42:86:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:9C:8B:52:A1:F4:B8:0E:A2:83:27:8C:CB:12:BD:8C:4C:19:8D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vreci1Kh9LgOooMnjMsSvYxMGY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4d80::/29
2a07:a300::/29
2a0e:8880::/29
2a0f:16c0::/29
2a0f:29c0::/29
2a0f:2d40::/29
2a0f:2f40::/29
2a0f:3640::/29
2a0f:7280::/29
2a0f:9e00::/29
2a0f:ac00::/29
2a0f:dfc0::/29
2a0f:e4c0::/29
2a10:37c0::/29
2a10:3840::/29
2a10:5200::/29
2a10:6840::/29
2a11:4c40::/29
2a11:5c80::/29
2a12:ba00::/29
2a13:1480::/29
2a13:df00::/29
Signature Algorithm: sha256WithRSAEncryption
25:46:46:77:ea:00:22:ac:69:3b:c1:29:43:5a:9b:e6:95:e9:
3b:3b:cb:f2:05:b8:7f:ef:67:02:4c:fe:6a:a5:d9:93:0f:e3:
cb:11:02:2f:97:6e:32:a1:1c:04:a4:fe:64:6d:36:8b:08:08:
e4:7f:c2:d4:f5:7e:c7:a3:87:e8:7d:1b:a4:b4:7b:e4:6c:42:
ce:56:c3:38:1e:6b:c2:ed:12:39:ff:2e:fc:a2:74:35:12:dd:
67:2d:07:ef:23:98:13:57:e3:cc:98:e2:42:78:3c:3e:b2:6b:
33:59:6f:93:7e:29:51:b0:c2:c7:93:00:e9:80:40:d8:b2:4a:
74:9f:85:a9:fd:27:8d:e3:2a:57:c9:a7:d5:53:1d:b5:f1:3d:
c4:ad:28:fb:dc:2e:4c:2c:16:27:ae:31:8b:0c:bc:91:9f:f6:
b3:2d:1d:25:e3:6b:60:d1:1a:35:7f:72:c0:cd:38:7d:19:35:
3f:93:94:aa:47:7a:89:65:7b:23:87:0f:25:43:09:3a:02:a7:
7e:f1:1f:cd:2c:43:71:f9:13:71:21:02:32:68:03:ed:f1:81:
67:c3:25:41:32:9f:98:fa:6e:0c:91:34:79:8e:cd:41:24:c7:
c5:89:2b:d2:ca:c7:bc:1f:fc:10:e6:ef:85:49:1b:0c:16:1a:
3e:2e:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:18 2026 by rpki-client