Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/25eTgoqH1lVKyEyJJUj9AWc5XzE.roa
File: 25eTgoqH1lVKyEyJJUj9AWc5XzE.roa (raw, json)
Hash identifier: sJjPfCxMSnmA3DyX0cEMfZ5N4gmz9JCY4vhI6Rg+yjk=
Subject key identifier: DB:97:93:82:8A:87:D6:55:4A:C8:4C:89:25:48:FD:01:67:39:5F:31
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D2488340FC873047604A88ECEBC03BB95
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/25eTgoqH1lVKyEyJJUj9AWc5XzE.roa
Signing time: Wed 25 Mar 2026 10:26:39 +0000
ROA not before: Wed 25 Mar 2026 10:26:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 2a0f:1580::/32 maxlen: 32
2a0f:bc05::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:88:34:0f:c8:73:04:76:04:a8:8e:ce:bc:03:bb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 25 10:26:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db9793828a87d6554ac84c892548fd0167395f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:3d:98:fd:65:f9:38:5f:53:95:60:98:b3:
74:2a:7f:0a:3d:36:47:22:cd:49:b5:e1:28:3a:5f:
c3:ee:67:53:98:57:26:af:96:3e:32:13:44:e6:b6:
64:c9:56:bf:61:fc:15:39:f1:22:5c:76:82:82:1b:
d7:7c:6e:a9:9a:06:96:04:e8:8f:80:c2:ca:97:41:
57:e1:97:f7:17:90:e0:28:78:33:3e:d3:06:60:0e:
42:98:da:d2:70:ea:94:6b:9f:21:2b:a3:3f:50:6a:
d7:40:af:67:03:01:c5:a7:1e:20:d2:9b:f4:e2:c4:
fb:bf:68:8d:8e:b4:e3:52:d1:fb:4f:7d:99:45:13:
d5:53:e8:40:29:85:f3:ef:4f:90:90:f5:73:47:e0:
b9:5b:dc:3d:b7:da:30:05:2f:2f:f3:24:cd:1c:52:
1b:ed:6f:ff:50:40:73:fe:0a:ba:58:61:30:e8:1f:
40:f9:f0:e1:63:c3:8f:73:f1:fb:bc:19:a1:2d:95:
92:f4:84:62:c7:54:77:f1:63:c4:d8:95:22:ee:ce:
60:d6:47:a5:97:a6:82:42:2b:b8:e6:c5:1c:33:45:
4e:77:d5:95:d8:d0:48:96:9d:dc:16:72:1a:91:9f:
80:04:59:67:21:e5:70:66:af:7b:ea:8f:e5:c3:1a:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:97:93:82:8A:87:D6:55:4A:C8:4C:89:25:48:FD:01:67:39:5F:31
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/25eTgoqH1lVKyEyJJUj9AWc5XzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1580::/32
2a0f:bc05::/32
Signature Algorithm: sha256WithRSAEncryption
68:18:13:f8:43:23:75:ff:6f:60:80:8d:23:2d:1d:3b:82:46:
d4:7f:7c:2f:4c:81:c9:ca:2b:b3:6f:4e:ea:57:1d:88:47:8e:
db:7b:91:2c:30:1f:8a:54:07:7a:55:28:ac:ab:a6:f5:1c:10:
9b:5e:89:d3:e1:e4:63:48:fc:e3:6f:d1:60:fa:f3:11:56:3a:
91:29:83:c2:f9:54:e5:80:d9:a6:c9:0a:fc:f2:db:d5:56:d5:
71:e4:68:31:f1:1f:fe:26:b4:59:ad:98:7d:a5:63:de:e8:42:
4e:7c:0d:d9:38:7f:5b:c7:f1:71:9d:63:ae:68:ca:7a:ba:54:
78:aa:52:a1:04:c9:63:5c:8c:3f:5d:59:f4:e2:03:96:bd:a7:
d8:dd:11:a5:a8:41:7b:40:ff:9c:f3:f6:86:3e:1e:c9:b1:fa:
38:09:41:b8:4b:87:b0:4e:92:61:35:cb:2f:56:18:91:7e:1f:
1d:5a:29:0f:01:17:f5:fb:b4:61:64:cd:86:76:8f:d8:d7:b0:
8d:35:05:36:cc:fb:9f:14:24:16:ae:85:68:fb:88:71:ec:df:
a2:7e:a0:24:bc:c0:80:43:32:c0:49:a6:f4:3b:78:a3:7e:13:
ee:b6:42:0e:23:25:f0:fb:ae:c1:36:ca:2d:b1:3e:52:3a:8e:
1d:d3:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:48 2026 by rpki-client