Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Cs7Brh6li2OOYTcLWoc4vhG1AjE.roa
File: Cs7Brh6li2OOYTcLWoc4vhG1AjE.roa (raw, json)
Hash identifier: 3ONCfRFO2mD6uGOUquFH7eny/rwFoiuiqd0Ft+wEQ+Q=
Subject key identifier: 0A:CE:C1:AE:1E:A5:8B:63:8E:61:37:0B:5A:87:38:BE:11:B5:02:31
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D249D46195276656E69CA6FF2C7930500
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Cs7Brh6li2OOYTcLWoc4vhG1AjE.roa
Signing time: Wed 25 Mar 2026 10:49:40 +0000
ROA not before: Wed 25 Mar 2026 10:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 2a06:b5c0::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:9d:46:19:52:76:65:6e:69:ca:6f:f2:c7:93:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 25 10:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0acec1ae1ea58b638e61370b5a8738be11b50231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:18:00:95:dd:99:c5:5c:71:e5:16:2d:7a:
50:a4:53:57:bd:92:ed:f0:55:cf:a6:1a:2c:39:d8:
f3:e5:e6:3c:01:f6:53:14:1e:87:d0:99:83:df:36:
fd:63:4a:c5:a5:e2:ea:c2:53:f4:28:6e:53:a0:3c:
fd:b8:70:8e:55:5b:cc:b9:86:4b:02:b6:4b:f8:35:
af:5b:89:62:c8:9b:ad:0c:ff:df:fa:9c:a0:93:be:
d9:c7:4e:72:0e:42:5f:7d:f2:0a:e5:05:5b:37:75:
f5:b0:26:3c:b1:da:16:83:67:60:48:ae:60:9a:49:
d0:79:e0:fb:50:25:ca:2c:d5:d4:9a:51:c7:df:ce:
22:9f:6c:21:30:fb:96:be:04:66:5e:80:2e:91:c7:
16:05:82:06:e7:82:80:82:38:16:e6:f5:24:39:3b:
c9:1f:08:4a:9c:17:78:b8:8e:ed:64:bd:35:20:79:
91:88:f3:2d:6c:e8:c5:fc:d0:39:5d:55:f9:43:c2:
66:3b:b6:3e:5a:3a:6c:53:a3:64:4c:8e:04:f8:6d:
50:5a:41:8a:5c:03:e6:8a:9b:16:67:8f:f3:e7:f4:
90:e1:70:8d:e4:f0:e3:98:4b:be:d5:2c:c8:e3:ee:
43:b3:ec:8c:84:13:dd:cf:54:c8:d7:c5:3d:56:92:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:C1:AE:1E:A5:8B:63:8E:61:37:0B:5A:87:38:BE:11:B5:02:31
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Cs7Brh6li2OOYTcLWoc4vhG1AjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b5c0::/29
2a0e:5a80::/29
2a0f:e00::/29
Signature Algorithm: sha256WithRSAEncryption
18:f3:10:03:45:06:ca:b1:20:73:6d:5a:a6:42:3e:13:87:4d:
4d:66:c6:34:fd:34:a7:23:40:61:e6:b3:a2:27:66:be:fa:33:
a2:94:01:78:28:19:a9:e7:0f:02:33:19:2d:78:30:79:4b:b7:
90:88:ff:13:77:46:d1:02:1d:33:66:e0:89:55:27:cf:fb:f8:
99:1a:5d:75:3b:55:b5:54:4b:25:89:92:8d:b3:65:7b:c9:40:
88:26:82:7c:d7:ea:20:f2:f8:38:6f:9e:bd:4a:ae:37:59:c3:
11:3c:26:3d:f3:6f:53:75:fb:3d:c2:32:7b:79:42:c4:1e:7d:
1a:c0:11:80:36:c5:94:8c:ff:c1:7d:39:83:42:ab:98:41:6a:
05:8c:7c:81:9e:bf:d7:39:b3:b5:94:ed:e9:98:3d:07:00:76:
6d:2b:c3:12:58:c2:d3:5a:ee:1d:63:21:ee:d2:93:9d:43:f2:
35:00:72:f1:b9:48:9c:d4:e1:62:15:dd:b9:b0:62:96:4e:cd:
77:ef:5d:cd:ed:d5:07:74:07:16:19:9f:e7:a3:1b:b5:2a:61:
c4:82:30:1a:6c:ec:d0:2b:18:2b:37:24:24:c3:c4:47:bf:d0:
12:f6:bc:cc:ae:36:5c:e0:84:62:09:26:01:d0:97:aa:f0:e4:
a8:4f:5f:88
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ0knUYZUnZlbmnKb/LHkwUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMzI1MTA0OTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWNlYzFhZTFlYTU4YjYzOGU2MTM3MGI1YTg3MzhiZTExYjUwMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fUYAJXdmcVcceUWLXpQpFNXvZLt
8FXPphosOdjz5eY8AfZTFB6H0JmD3zb9Y0rFpeLqwlP0KG5ToDz9uHCOVVvMuYZL
ArZL+DWvW4liyJutDP/f+pygk77Zx05yDkJfffIK5QVbN3X1sCY8sdoWg2dgSK5g
mknQeeD7UCXKLNXUmlHH384in2whMPuWvgRmXoAukccWBYIG54KAgjgW5vUkOTvJ
HwhKnBd4uI7tZL01IHmRiPMtbOjF/NA5XVX5Q8JmO7Y+WjpsU6NkTI4E+G1QWkGK
XAPmipsWZ4/z5/SQ4XCN5PDjmEu+1SzI4+5Ds+yMhBPdz1TI18U9VpLlkQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFArOwa4epYtjjmE3C1qHOL4RtQIxMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQ3M3QnJoNmxpMk9PWVRjTFdvYzR2aEcxQWpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKga1wAMF
AyoOWoADBQMqDw4AMA0GCSqGSIb3DQEBCwUAA4IBAQAY8xADRQbKsSBzbVqmQj4T
h01NZsY0/TSnI0Bh5rOiJ2a++jOilAF4KBmp5w8CMxkteDB5S7eQiP8Td0bRAh0z
ZuCJVSfP+/iZGl11O1W1VEsliZKNs2V7yUCIJoJ81+og8vg4b569Sq43WcMRPCY9
829Tdfs9wjJ7eULEHn0awBGANsWUjP/BfTmDQquYQWoFjHyBnr/XObO1lO3pmD0H
AHZtK8MSWMLTWu4dYyHu0pOdQ/I1AHLxuUic1OFiFd25sGKWTs13713N7dUHdAcW
GZ/noxu1KmHEgjAabOzQKxgrNyQkw8RHv9AS9rzMrjZc4IRiCSYB0Jeq8OSoT1+I
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:38 2026 by rpki-client