Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/85oLt1zMmzoeZ8_Coj2Br0vxmAA.roa
File: 85oLt1zMmzoeZ8_Coj2Br0vxmAA.roa (raw, json)
Hash identifier: xK9JTsKBwatME3Z4CHojTJsWrHRokayL0GIu2m6FoYM=
Subject key identifier: F3:9A:0B:B7:5C:CC:9B:3A:1E:67:CF:C2:A2:3D:81:AF:4B:F1:98:00
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D067BCE639BE35D8DD27CF028D2E87477
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/85oLt1zMmzoeZ8_Coj2Br0vxmAA.roa
Signing time: Thu 19 Mar 2026 14:24:30 +0000
ROA not before: Thu 19 Mar 2026 14:24:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 2a0c:7886:b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:7b:ce:63:9b:e3:5d:8d:d2:7c:f0:28:d2:e8:74:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 19 14:24:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f39a0bb75ccc9b3a1e67cfc2a23d81af4bf19800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:ce:aa:fb:56:89:77:72:80:de:b1:97:ea:
e5:ad:cc:ae:31:5f:ee:71:41:ae:b5:4e:0b:f2:f4:
fa:1a:46:71:33:6f:4d:56:f2:bd:eb:82:8d:ff:61:
35:09:d7:59:ad:2a:2a:0c:c7:9b:f3:5c:a7:07:71:
59:3e:1a:b7:e5:2d:d9:0d:ea:ed:4e:44:9d:9d:bf:
d0:ec:30:0c:de:e9:2e:c9:19:3e:e2:ad:11:dc:a8:
f1:70:51:bd:d9:ec:f9:b6:01:a9:f7:77:ae:26:c9:
49:92:7d:44:90:65:15:66:f9:dc:0b:f1:94:b7:1b:
03:b9:7e:af:49:0a:09:40:0c:42:0f:77:72:7c:b1:
c7:78:f8:8b:f3:39:8d:f3:3d:8c:ef:b4:fc:09:e4:
ea:bf:25:c4:20:89:76:33:32:7e:c8:48:36:e2:9b:
e5:ce:03:f5:2b:15:3e:c8:75:56:b7:92:02:4b:7c:
ca:ca:33:fe:be:a5:db:92:5d:37:17:b7:2f:e5:7e:
f7:08:cb:88:03:88:4a:f2:c0:7a:6e:d1:a6:ac:3f:
1b:a3:5a:9c:c0:5a:f7:f9:a4:ae:2d:00:95:d6:56:
09:84:72:55:59:8a:ed:21:a8:f3:ef:c6:9a:cd:ac:
fc:81:72:f8:f4:a3:89:72:70:ce:14:6e:26:21:3c:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:0B:B7:5C:CC:9B:3A:1E:67:CF:C2:A2:3D:81:AF:4B:F1:98:00
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/85oLt1zMmzoeZ8_Coj2Br0vxmAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7886:b4::/48
Signature Algorithm: sha256WithRSAEncryption
4f:43:51:09:fb:75:3b:c4:00:88:f1:07:64:09:11:8b:3a:d5:
d4:29:7f:a1:8e:34:63:4b:23:a5:21:56:23:92:b2:38:c5:e3:
b1:fa:67:c3:91:e8:64:0f:64:49:07:d0:80:9d:36:03:2e:ff:
d6:20:0e:e5:12:1f:7f:17:b3:72:d7:c2:3b:e4:ba:c9:c4:dd:
fc:62:41:3d:24:26:f3:3c:34:54:29:23:68:de:d1:5b:0f:25:
66:1d:92:ad:b7:10:ab:ad:75:58:d1:75:c0:ac:8d:f4:9b:a6:
2f:2d:f8:87:88:7c:8a:bd:fc:f5:6b:ea:44:53:b9:7a:07:e6:
25:79:d5:21:e9:b6:4c:34:78:c7:12:3f:d4:a7:24:96:ba:60:
a0:4f:bc:77:41:84:5a:6e:3b:00:4b:28:e3:f1:4b:ff:3d:de:
b1:27:77:6a:ac:9a:58:04:74:19:9c:03:b0:28:9f:af:05:e8:
92:94:93:43:e2:58:bc:a9:93:9d:db:d0:ce:69:a1:f3:da:fb:
c1:4b:45:5e:a0:44:30:e1:7b:39:83:e1:88:35:c0:0a:57:39:
ca:01:2e:d7:ac:39:0d:c6:fc:47:d6:60:73:99:4e:3b:61:c6:
c8:16:e6:84:a6:ff:f2:87:19:08:6b:85:30:67:49:d1:fd:31:
8d:d7:91:c7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ0Ge85jm+NdjdJ88CjS6HR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMzE5MTQyNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzlhMGJiNzVjY2M5YjNhMWU2N2NmYzJhMjNkODFhZjRiZjE5ODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/HOqvtWiXdygN6xl+rlrcyuMV/u
cUGutU4L8vT6GkZxM29NVvK964KN/2E1CddZrSoqDMeb81ynB3FZPhq35S3ZDert
TkSdnb/Q7DAM3ukuyRk+4q0R3KjxcFG92ez5tgGp93euJslJkn1EkGUVZvncC/GU
txsDuX6vSQoJQAxCD3dyfLHHePiL8zmN8z2M77T8CeTqvyXEIIl2MzJ+yEg24pvl
zgP1KxU+yHVWt5ICS3zKyjP+vqXbkl03F7cv5X73CMuIA4hK8sB6btGmrD8bo1qc
wFr3+aSuLQCV1lYJhHJVWYrtIajz78aazaz8gXL49KOJcnDOFG4mITxVUwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPOaC7dczJs6HmfPwqI9ga9L8ZgAMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvODVvTHQxek1tem9lWjhfQ29qMkJyMHZ4bUFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgx4hgC0
MA0GCSqGSIb3DQEBCwUAA4IBAQBPQ1EJ+3U7xACI8QdkCRGLOtXUKX+hjjRjSyOl
IVYjkrI4xeOx+mfDkehkD2RJB9CAnTYDLv/WIA7lEh9/F7Ny18I75LrJxN38YkE9
JCbzPDRUKSNo3tFbDyVmHZKttxCrrXVY0XXArI30m6YvLfiHiHyKvfz1a+pEU7l6
B+YledUh6bZMNHjHEj/UpySWumCgT7x3QYRabjsASyjj8Uv/Pd6xJ3dqrJpYBHQZ
nAOwKJ+vBeiSlJND4li8qZOd29DOaaHz2vvBS0VeoEQw4Xs5g+GINcAKVznKAS7X
rDkNxvxH1mBzmU47YcbIFuaEpv/yhxkIa4UwZ0nR/TGN15HH
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:29 2026 by rpki-client