Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/fUaZWG_IPZnqKDdAMhvv99c2mz0.roa
File: fUaZWG_IPZnqKDdAMhvv99c2mz0.roa (raw, json)
Hash identifier: RwmFqSWLrw9UABaecDwpgjoOqF5LfYrQuwlDYozBirU=
Subject key identifier: 7D:46:99:58:6F:C8:3D:99:EA:28:37:40:32:1B:EF:F7:D7:36:9B:3D
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 019CD49445DC12FF03B409C2F0F0C249B153
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/fUaZWG_IPZnqKDdAMhvv99c2mz0.roa
Signing time: Mon 09 Mar 2026 21:50:12 +0000
ROA not before: Mon 09 Mar 2026 21:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30788
IP address blocks: 2a07:d940::/29 maxlen: 29
2a0a:f8c0::/29 maxlen: 29
2a0c:7b80::/32 maxlen: 32
2a0c:7b81::/32 maxlen: 32
2a0c:7b82::/32 maxlen: 32
2a0c:7b83::/32 maxlen: 32
2a0c:c180::/32 maxlen: 32
2a0c:c182::/32 maxlen: 32
2a0c:c183::/32 maxlen: 32
2a0f:8440::/32 maxlen: 32
2a0f:8441::/32 maxlen: 32
2a0f:a380::/29 maxlen: 29
2a11:52c0::/29 maxlen: 29
2a11:8d80::/29 maxlen: 29
2a12:23c0::/29 maxlen: 29
2a12:2940::/29 maxlen: 29
2a12:3400::/29 maxlen: 29
2a12:5640::/29 maxlen: 29
2a12:e580::/29 maxlen: 29
2a13:5200::/32 maxlen: 32
2a13:5201::/32 maxlen: 32
2a13:5202::/32 maxlen: 32
2a13:5203::/32 maxlen: 32
2a13:5204::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d4:94:45:dc:12:ff:03:b4:09:c2:f0:f0:c2:49:b1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Mar 9 21:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d4699586fc83d99ea283740321beff7d7369b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:50:c2:77:43:ad:9f:2c:e4:7f:db:b8:a9:
dd:50:6c:26:4b:3c:ba:b0:60:57:eb:8c:ec:aa:bc:
80:30:df:36:36:7b:c7:86:4f:6e:a9:55:4f:99:89:
4c:0a:3d:7e:d3:4b:c4:4d:33:44:f1:28:8d:f0:9e:
27:f3:67:21:23:0a:4a:69:d9:f2:9a:cb:0e:cd:49:
f9:0d:76:b5:86:05:74:58:f2:58:3b:6b:34:ce:79:
3f:ef:0d:b5:0a:1d:52:4d:d1:39:a2:f3:14:f2:2a:
ab:7e:10:fb:b7:3f:69:32:9c:8d:6b:8f:6c:0a:e6:
6c:00:5f:48:00:ac:33:b6:b6:68:cd:83:61:4a:e6:
55:98:a5:31:6a:75:94:97:49:7e:d1:d0:b2:c1:5c:
f6:e7:e2:87:ed:9c:90:56:4f:a9:b3:91:df:17:a6:
01:8f:9c:29:83:22:43:33:79:66:f3:d2:89:a7:d7:
09:2f:5b:87:3f:e2:3b:c7:75:7c:ca:45:ad:90:81:
25:3d:ff:9c:47:b9:39:04:60:da:d7:0b:d7:9b:54:
12:21:0a:7e:16:de:66:a2:e6:b9:93:4e:25:d5:41:
22:84:83:3d:ea:b3:0e:16:88:d1:43:7a:e1:59:89:
33:1f:0e:c8:6d:e9:60:aa:18:3a:14:e5:5f:ed:04:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:99:58:6F:C8:3D:99:EA:28:37:40:32:1B:EF:F7:D7:36:9B:3D
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/fUaZWG_IPZnqKDdAMhvv99c2mz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d940::/29
2a0a:f8c0::/29
2a0c:7b80::/30
2a0c:c180::/32
2a0c:c182::/31
2a0f:8440::/31
2a0f:a380::/29
2a11:52c0::/29
2a11:8d80::/29
2a12:23c0::/29
2a12:2940::/29
2a12:3400::/29
2a12:5640::/29
2a12:e580::/29
2a13:5200::-2a13:5204:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:9e:0a:6a:e9:92:fc:bc:56:58:22:c4:a2:bd:39:60:1a:37:
fa:f4:a9:8f:d4:a6:b3:82:5c:b2:a9:a3:66:60:bb:4c:9b:32:
e5:e7:b4:c2:7d:7b:14:84:23:79:e2:b2:1e:82:1c:db:97:b0:
0f:58:92:34:ba:db:9c:aa:f6:bf:48:a7:be:ae:04:de:00:e6:
2a:22:fa:fa:07:b7:a1:a5:b1:17:7e:e7:f0:89:c0:8c:5b:f9:
29:e7:7d:41:96:19:7f:e5:4d:65:c1:b5:7c:2a:49:ce:fb:02:
73:e1:90:ae:f6:fc:b6:67:da:1c:d2:cb:3a:da:01:49:00:07:
ae:29:43:21:19:38:92:cf:5f:27:a0:48:a7:ae:34:51:7c:4d:
c8:2c:30:97:5d:7d:0a:0b:74:9c:fe:90:d3:32:8b:bf:97:c2:
a4:02:3b:4c:8a:03:ba:d4:b4:47:b2:14:27:d3:ab:62:97:17:
cd:a9:b3:d1:a3:e7:41:36:53:85:d3:04:dc:67:39:bb:66:11:
93:9e:38:80:24:ff:0c:e8:68:87:54:b8:46:68:37:d8:cb:18:
2c:92:92:6d:36:de:d2:c3:8c:d5:50:41:f1:45:3c:b0:95:a8:
20:e1:85:11:ae:f7:0a:12:4b:30:cd:0f:a3:3b:6f:83:2b:a6:
1f:da:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:03 2026 by rpki-client