Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/v7M2hUCqapcq9A7wAn2dIYSy_3k.roa
File: v7M2hUCqapcq9A7wAn2dIYSy_3k.roa (raw, json)
Hash identifier: 8lrzBlxIkdiKBIvpA2CLb33d8S7DY91cUEi+IZVVpC0=
Subject key identifier: BF:B3:36:85:40:AA:6A:97:2A:F4:0E:F0:02:7D:9D:21:84:B2:FF:79
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C8B0D8DFCA0D8AE2FE4FA94D530AAA48
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/v7M2hUCqapcq9A7wAn2dIYSy_3k.roa
Signing time: Tue 22 Sep 2026 10:37:08 +0000
ROA not before: Tue 22 Sep 2026 10:37:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a11:5a00::/29 maxlen: 29
2a11:a4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d8:df:ca:0d:8a:e2:fe:4f:a9:4d:53:0a:aa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:37:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfb3368540aa6a972af40ef0027d9d2184b2ff79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:79:a9:8e:c4:f2:ce:9e:89:6c:e8:98:40:
62:9b:03:d0:36:b3:b0:5e:fe:1e:eb:ab:95:e0:2c:
ad:79:87:4d:59:b5:c4:e3:23:14:0a:7b:51:13:86:
69:36:30:c0:87:85:f6:d9:69:5a:a5:a3:0a:de:b4:
98:f2:ca:81:f9:5f:cc:bf:81:74:c0:f4:8d:67:c5:
3c:85:30:fa:f4:db:db:2a:28:8c:a0:c9:50:01:40:
9a:bf:44:ea:c9:68:5a:99:7c:56:16:ff:6e:87:6e:
9a:1b:05:0c:77:1f:39:93:62:e5:8e:ae:10:f2:5e:
01:77:46:89:e6:7d:e3:b9:65:a1:92:44:65:26:58:
5b:56:33:b1:79:3c:db:f9:a5:27:99:49:8f:c5:39:
c7:ad:12:dd:e8:2b:44:a6:38:94:ba:b6:43:6a:6f:
44:d1:8c:d7:67:da:1d:a3:5b:da:d3:8e:b0:88:74:
1f:dd:d3:e9:a4:33:37:25:0d:bf:65:06:4b:f0:db:
3c:20:c3:0a:f3:62:7b:f7:e8:c8:f6:20:07:07:91:
aa:be:ed:be:14:3e:6d:9d:28:ca:7e:44:61:4c:64:
22:5a:f3:a0:85:d4:7c:bd:c7:61:5e:f3:14:fa:c9:
76:56:a3:13:c3:13:d8:66:bc:3e:2f:57:e8:cf:14:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:36:85:40:AA:6A:97:2A:F4:0E:F0:02:7D:9D:21:84:B2:FF:79
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/v7M2hUCqapcq9A7wAn2dIYSy_3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5a00::/29
2a11:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:9b:ac:ae:56:6f:a3:3b:61:55:26:f9:e2:6a:c9:07:dd:0c:
3e:1a:43:19:f7:d7:5c:f7:f9:63:13:33:9a:83:04:cd:a1:4a:
c9:12:05:cc:39:05:15:53:77:d9:71:ad:2d:3e:c4:c5:bb:83:
e1:03:6f:cf:12:52:71:b0:39:d0:f4:1d:2d:6a:17:de:99:ac:
12:b1:2c:53:39:8f:70:2e:fd:ae:b3:b4:43:78:12:0d:95:b9:
65:6a:d8:5a:21:27:59:1e:94:20:9c:bb:9d:1c:90:f6:40:84:
72:78:03:f8:0a:54:7d:4b:79:6a:65:db:55:66:06:79:72:c9:
be:af:e1:d0:c1:73:f0:a6:73:b8:c1:3a:4d:bc:14:96:57:a8:
a8:ec:45:1a:62:7a:d6:87:e1:ee:e1:ea:30:1b:e8:fa:c0:c1:
6a:39:31:79:4c:20:35:51:51:43:10:ca:f7:0f:64:62:e3:62:
89:c5:8e:56:c0:b0:63:43:e0:6c:82:d6:8b:b0:45:79:89:6f:
44:d2:b1:75:9d:7c:1c:7e:38:4d:a2:f3:6f:6c:c3:08:f5:98:
c2:b3:ea:b4:e1:55:bc:d4:fb:f7:30:73:53:3f:c9:ab:3a:d5:
18:da:e8:7f:a6:a0:44:f7:a9:91:76:85:da:57:ea:3e:89:15:
ed:77:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:17:37 2026 by rpki-client