Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ceag8QHKLS_HAkvLf9WzaMOJCAc.roa
File: Ceag8QHKLS_HAkvLf9WzaMOJCAc.roa (raw, json)
Hash identifier: 4e9or3D3HvMFeJEag8qYojteuZ98E9PdONPgBSzWD1w=
Subject key identifier: 09:E6:A0:F1:01:CA:2D:2F:C7:02:4B:CB:7F:D5:B3:68:C3:89:08:07
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D26BB40C484298DC89449F4C08F7FCFDB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ceag8QHKLS_HAkvLf9WzaMOJCAc.roa
Signing time: Wed 25 Mar 2026 20:41:39 +0000
ROA not before: Wed 25 Mar 2026 20:41:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 2a0f:2707::/32 maxlen: 32
2a0f:3043::/32 maxlen: 32
2a0f:31c5::/32 maxlen: 32
2a13:c906::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:bb:40:c4:84:29:8d:c8:94:49:f4:c0:8f:7f:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 25 20:41:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09e6a0f101ca2d2fc7024bcb7fd5b368c3890807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:24:6b:a9:bc:d3:a7:a9:15:63:cc:5f:cd:
d8:53:92:1f:c1:b5:0a:2b:e8:14:64:75:6d:21:ec:
0d:30:8d:30:8a:7e:32:32:6a:29:f9:5f:92:fd:ce:
4a:e6:3e:45:63:49:5a:6f:d7:dc:c7:c0:ec:13:8f:
a8:ee:2a:5b:b2:35:ee:36:b7:e6:bb:70:21:8d:a7:
2a:79:8a:61:10:90:36:4f:a4:0e:85:a9:a4:23:e7:
82:d4:a3:4c:b8:61:8d:84:15:1b:1b:bd:0e:01:a2:
4d:23:f8:ca:92:92:7e:b4:04:f5:2c:2c:bc:45:cb:
7a:f8:ba:66:a8:0a:04:cc:03:ee:76:b1:6c:6c:aa:
f7:f4:3a:22:3d:96:e4:66:1a:27:f7:26:ef:ca:41:
bb:89:07:bb:b6:05:de:91:0a:b9:9e:3c:37:f6:75:
a8:94:7c:ab:10:b6:2a:af:9f:21:a9:ce:ad:70:3d:
6f:a3:51:49:e1:c5:b2:4c:86:ba:7e:51:40:d9:ad:
d1:8c:de:4e:7e:ab:14:1f:44:34:27:45:25:ec:f9:
05:10:6f:61:38:88:ce:a5:7f:01:0f:3d:0e:67:06:
37:9c:a5:b7:97:dd:34:c5:47:92:54:f5:a8:b4:fc:
bb:7b:3e:a4:04:a1:dd:17:6f:bf:bd:1d:f3:1d:4a:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:A0:F1:01:CA:2D:2F:C7:02:4B:CB:7F:D5:B3:68:C3:89:08:07
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ceag8QHKLS_HAkvLf9WzaMOJCAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2707::/32
2a0f:3043::/32
2a0f:31c5::/32
2a13:c906::/32
Signature Algorithm: sha256WithRSAEncryption
1b:de:f6:2a:ab:66:06:35:84:93:d7:c2:3e:7d:da:b7:dd:98:
a2:05:58:c1:a5:e8:91:dd:f2:3c:80:cd:6a:8d:4f:51:d6:ab:
32:e1:19:c1:e3:98:19:20:af:59:34:4a:f6:e5:47:4e:c4:5a:
c9:fa:51:bc:6f:96:88:b1:9e:70:c2:c6:12:4f:e0:c6:c2:78:
5a:0f:41:13:23:4c:4d:85:aa:36:e6:d8:39:05:78:07:bd:79:
5d:b2:11:c9:2d:3b:71:3f:41:87:d8:00:6e:e3:dc:c5:dd:24:
a9:50:bb:3f:02:b4:e7:6f:bb:3f:74:55:a8:f2:49:83:c9:2a:
a9:f6:09:c0:b8:ba:ed:b4:09:2b:57:69:18:96:3d:e2:84:50:
a0:a7:d1:d3:ca:81:49:39:6d:3e:03:bc:f3:e5:f9:d7:f9:b6:
e9:b8:6c:1a:3f:2b:d8:cd:84:6e:e0:44:5a:58:95:db:cb:da:
42:09:33:59:b1:62:ea:b1:b5:14:bb:cf:ed:5e:ea:43:92:00:
eb:8d:e2:70:91:4d:80:0d:03:0f:1c:4f:9c:a6:73:bf:d5:b5:
73:2b:d4:43:11:57:53:ec:2e:e5:d4:0c:6a:1b:4e:28:79:7d:
0f:2e:b7:c5:65:62:80:2b:66:76:38:97:3f:07:33:1a:ee:ba:
17:b4:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:30:57 2026 by rpki-client