Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0qYrB7C8_W5dfeRhYfbjGU4sBK4.roa
File: 0qYrB7C8_W5dfeRhYfbjGU4sBK4.roa (raw, json)
Hash identifier: kSBFxQH42P4BloNv/0vbJb6IlXbkwdEFNLJzuxBqqTI=
Subject key identifier: D2:A6:2B:07:B0:BC:FD:6E:5D:7D:E4:61:61:F6:E3:19:4E:2C:04:AE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A19B75B233C3560AC137951A6BF6743E35
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0qYrB7C8_W5dfeRhYfbjGU4sBK4.roa
Signing time: Mon 02 Nov 2026 08:52:24 +0000
ROA not before: Mon 02 Nov 2026 08:52:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13449
IP address blocks: 2a0f:31c1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:75:b2:33:c3:56:0a:c1:37:95:1a:6b:f6:74:3e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 2 08:52:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2a62b07b0bcfd6e5d7de46161f6e3194e2c04ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:16:af:8a:fe:96:26:32:f5:c0:49:93:1c:
51:50:c1:1b:2c:98:03:c0:0a:32:92:7d:63:5c:5c:
ca:48:81:ff:71:ce:b8:da:c1:34:0c:19:42:cc:0f:
4b:ca:4d:93:61:96:22:70:f2:84:54:68:ce:01:5d:
49:1a:0b:1f:de:7f:c6:33:18:c7:9b:b3:03:93:c0:
71:46:3c:79:fa:46:8a:b0:9e:8b:f0:e9:ba:92:23:
fc:a8:d4:f3:29:05:8a:fc:e2:2e:7c:cd:32:49:91:
e7:da:20:75:d8:24:c2:1c:d0:29:30:d2:58:08:90:
f6:8c:75:e4:7a:03:09:dd:14:06:32:60:76:15:81:
94:cc:1b:b2:00:0e:7b:0d:76:29:2a:00:3a:3f:36:
b4:61:9d:14:c0:bf:89:e5:cc:c4:eb:67:83:64:41:
bd:89:2f:a6:ff:19:1b:e5:e7:d2:33:e3:ed:8b:71:
d5:4b:ae:39:94:a1:8a:f7:16:95:51:22:de:53:93:
96:d5:ca:e5:e2:94:14:a2:da:7b:61:57:5e:bb:81:
20:7a:e5:93:3c:33:50:c1:5b:aa:90:7b:11:52:da:
de:1c:01:3f:4b:60:4c:88:97:e6:b4:e8:44:37:63:
fa:da:fc:6c:61:99:04:bb:2f:99:08:a4:f7:ff:4c:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A6:2B:07:B0:BC:FD:6E:5D:7D:E4:61:61:F6:E3:19:4E:2C:04:AE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0qYrB7C8_W5dfeRhYfbjGU4sBK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:31c1::/32
Signature Algorithm: sha256WithRSAEncryption
03:93:a3:68:c6:22:25:41:ca:e8:1f:e0:d8:e6:3e:a8:78:df:
be:ba:c8:37:d4:09:32:71:38:76:50:3d:e9:ca:32:26:14:3b:
9a:c2:1a:6c:77:25:a2:8d:d9:c8:fb:4a:b4:be:bd:3f:f7:87:
56:97:cf:da:58:41:41:80:62:6f:1c:ff:2d:b7:9a:a3:b9:fb:
f1:95:0e:44:d3:92:47:3e:0f:ca:e9:e6:85:b8:ec:56:b4:91:
9b:16:84:5f:34:52:6d:59:5e:fe:5f:8d:c0:6f:5e:3c:ab:64:
7f:5d:c0:72:77:c4:5d:63:c9:0e:a3:8c:58:cb:2c:92:80:53:
46:8c:d3:75:0a:f2:bf:1e:e0:81:5a:72:06:b9:ac:4c:c2:7a:
d6:3c:3e:cb:db:84:2b:fc:2d:ba:05:db:fa:1e:9e:16:59:c2:
ad:fd:ff:52:13:41:30:d6:6c:37:11:2f:7f:34:b3:1c:cd:63:
61:1c:64:f4:af:06:30:dc:23:51:f0:a1:13:97:22:49:56:fa:
8c:ee:b9:89:45:e6:06:d8:84:09:9c:cc:19:77:8a:55:c3:c3:
b2:dc:49:65:40:e2:77:34:2f:54:9b:8a:ee:77:3c:2d:f3:9b:
d5:5a:f1:05:b0:e6:db:73:23:1a:e6:9b:2b:db:46:79:5d:97:
ef:e9:2e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:28 2026 by rpki-client