Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xNn4ONJR314IrcV7JD5z-20cKDM.roa
File: xNn4ONJR314IrcV7JD5z-20cKDM.roa (raw, json)
Hash identifier: hMVinuBMD22ZOUKXYEbNZatLG8Ce7AbDlCa5Da39h84=
Subject key identifier: C4:D9:F8:38:D2:51:DF:5E:08:AD:C5:7B:24:3E:73:FB:6D:1C:28:33
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0A47506EC590D274E4BC8085ABF880E99
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xNn4ONJR314IrcV7JD5z-20cKDM.roa
Signing time: Tue 15 Sep 2026 09:45:27 +0000
ROA not before: Tue 15 Sep 2026 09:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7203
IP address blocks: 2a0a:2d07:b3::/48 maxlen: 48
2a0f:1e84::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:75:06:ec:59:0d:27:4e:4b:c8:08:5a:bf:88:0e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 15 09:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4d9f838d251df5e08adc57b243e73fb6d1c2833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:65:29:8c:e1:e9:2f:54:e8:b9:ce:cc:a8:
29:0f:4a:1d:62:36:3b:68:b4:8a:f8:c4:e6:39:3b:
a9:3b:66:fd:10:b6:1d:f9:1e:c9:4b:40:60:76:c7:
17:5d:ae:03:0b:0b:04:4b:42:1c:43:c2:61:0c:65:
03:cb:58:2e:ec:8d:f5:d1:41:1b:19:39:97:f2:ac:
70:c7:44:ac:49:f5:5a:bb:23:f1:f9:c6:fe:f4:57:
39:29:d9:09:60:87:8c:68:e2:77:54:3a:f6:2f:b0:
81:72:71:84:47:13:61:34:c0:50:ff:c3:70:d6:22:
82:a7:da:f9:0d:28:44:78:95:d8:5c:ea:02:28:66:
f1:9f:ff:38:99:bb:4e:ea:ca:a2:8a:3d:2f:94:93:
5a:17:ea:89:d7:00:f7:b7:7c:9f:32:0d:6d:f4:77:
1f:f6:ec:68:5d:2b:63:a4:0f:1d:29:f1:31:79:b6:
51:10:22:64:59:05:22:01:dc:1d:2f:68:58:76:ec:
22:7f:23:c3:24:2c:37:e6:ef:95:74:2e:e7:f5:7c:
e3:f4:c2:b5:9c:98:11:92:0f:c4:71:96:d8:4c:3d:
49:a7:79:b6:ac:bb:0a:e4:57:ea:f3:b6:eb:bb:27:
7a:30:ef:08:76:f7:36:b5:9a:e5:98:16:af:e7:dd:
4f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:F8:38:D2:51:DF:5E:08:AD:C5:7B:24:3E:73:FB:6D:1C:28:33
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xNn4ONJR314IrcV7JD5z-20cKDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d07:b3::/48
2a0f:1e84::/32
Signature Algorithm: sha256WithRSAEncryption
0d:b7:25:48:2f:d6:d0:64:89:a3:bf:e6:29:d3:83:cc:68:68:
c6:49:97:fc:3a:f4:39:67:83:79:03:d1:de:d9:ec:b8:26:7d:
ba:33:11:5e:0c:07:d9:b9:4d:eb:5c:dd:44:13:85:bb:25:f1:
05:e0:98:b8:5c:4e:5d:18:dc:55:bb:52:62:c5:f8:95:63:fa:
60:87:07:44:2d:df:05:a9:41:39:2b:37:ae:29:05:b3:09:ba:
0e:6b:bd:25:c9:a2:08:3a:43:f2:a1:f7:76:34:fd:ba:d8:17:
dc:89:cb:54:f8:ce:af:bb:9b:f3:d7:83:f8:c0:37:6d:dd:27:
91:82:e9:29:0e:70:24:92:3c:e4:97:fc:35:0f:31:e3:a3:09:
49:2e:ca:f9:36:10:14:2d:89:88:fc:18:81:78:1c:2b:d7:b5:
ac:fb:02:fe:de:1e:89:00:f3:26:98:70:97:e8:36:fe:2f:1d:
36:7d:14:ed:55:c5:3d:e6:1c:f8:50:08:62:b6:41:e2:1b:8e:
00:dd:94:a8:71:37:a1:6e:bf:88:c8:d2:82:0b:fc:b9:e2:e9:
52:23:1b:3c:a3:fa:db:db:1c:0b:f6:db:b5:0a:1c:45:ab:8f:
e7:40:db:2a:41:c1:9f:4f:f8:c5:f5:d5:e4:a1:38:b5:96:95:
a1:3b:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:06:57 2026 by rpki-client