Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/DYescTHawV5Bq8gJXe6becMtN3c.roa
File: DYescTHawV5Bq8gJXe6becMtN3c.roa (raw, json)
Hash identifier: 2nSaDquTqoLUpuQfjqWmHYU5croneaYB06N5bKofjFk=
Subject key identifier: 0D:87:AC:71:31:DA:C1:5E:41:AB:C8:09:5D:EE:9B:79:C3:2D:37:77
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C8B0D62D1BF8F2F03135C9E3105653AE
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/DYescTHawV5Bq8gJXe6becMtN3c.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a11:4840::/29 maxlen: 29
2a12:a680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d6:2d:1b:f8:f2:f0:31:35:c9:e3:10:56:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d87ac7131dac15e41abc8095dee9b79c32d3777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3e:9f:88:ea:84:c7:ff:69:bf:ab:21:17:6d:
08:af:b2:c6:88:67:52:8c:c6:11:cb:1b:78:93:67:
73:0d:13:99:0d:22:fb:93:43:05:04:36:fc:63:0a:
56:1c:95:7f:54:d6:75:e8:37:10:4d:8b:b2:74:b0:
c2:07:df:da:42:82:42:db:73:b5:cb:ef:5a:52:2a:
45:98:0f:a8:db:4b:08:ce:88:36:dd:5e:bb:d9:cf:
82:22:45:bc:97:11:99:fd:f8:ca:a9:51:3c:1d:1f:
76:5a:48:45:44:15:f7:1f:74:80:d4:91:33:ef:2b:
43:0f:25:9a:f7:18:4d:01:ff:d8:59:d4:7b:1e:39:
91:be:37:c1:0d:37:4b:17:22:6a:e2:83:a7:d6:03:
3d:7b:59:8b:90:9b:48:65:a4:56:8a:fa:24:95:12:
1d:de:84:ed:31:74:c0:b8:42:71:58:b2:cd:48:04:
b2:76:99:37:8f:b2:24:30:0c:75:7a:49:f3:65:e3:
d6:4e:fc:68:cc:af:1a:4b:9d:78:d4:7b:d3:83:bf:
5b:1d:db:3c:30:91:1a:68:92:ce:cf:d3:3a:4a:8a:
2b:40:94:15:a1:c5:3c:9b:3e:a9:83:7c:67:df:2b:
a0:2e:14:d0:63:9c:60:cb:0e:55:c0:5b:62:26:19:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:AC:71:31:DA:C1:5E:41:AB:C8:09:5D:EE:9B:79:C3:2D:37:77
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/DYescTHawV5Bq8gJXe6becMtN3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4840::/29
2a12:a680::/29
Signature Algorithm: sha256WithRSAEncryption
a0:79:4a:bf:08:6a:23:00:4d:a8:a0:65:58:1a:2b:2e:da:b2:
42:31:2a:d1:1d:ac:3b:12:43:b8:90:d4:27:59:b3:8c:68:3a:
ac:fa:57:22:88:4f:4c:a7:69:b6:a3:b0:c2:e4:7c:7f:ab:43:
26:f8:b2:d2:64:f4:db:ab:ac:4b:55:da:e0:85:1f:35:99:62:
ab:76:52:17:82:93:64:f1:a0:2f:26:cd:a5:a9:43:e5:3b:26:
88:5f:62:7d:ba:b3:83:bf:09:5a:90:58:76:89:0a:3e:b8:b4:
5f:9c:99:21:31:e5:e8:72:52:8c:69:fe:be:b8:62:02:cd:e5:
74:27:ab:a7:d9:64:6f:16:ac:a9:de:8f:2a:9d:9e:79:7e:24:
77:c6:c0:19:40:29:e2:ff:4d:46:10:6a:c9:71:64:31:b6:53:
8a:0d:e8:b0:47:63:75:c8:7a:9b:9d:11:c3:21:3f:2f:93:f0:
5d:f2:7d:5a:f3:db:81:60:22:be:dd:59:78:d8:25:7a:2d:9e:
55:d3:88:2d:4d:86:ad:d4:9e:0b:12:b6:ce:b2:a1:d2:b2:96:
82:cb:0a:dd:93:23:ee:04:f7:19:2f:b1:50:8a:96:32:f5:80:
e5:06:64:34:4a:f3:9f:55:3f:b8:6f:7e:c3:c1:b6:cc:72:56:
f8:78:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:32 2026 by rpki-client