Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MB0DbosjbX54azXYXxcB04XJC9w.roa
File: MB0DbosjbX54azXYXxcB04XJC9w.roa (raw, json)
Hash identifier: LBh/eR4Ea/cy+sm4eM6inFsvMTQNzEzqUmNnzPZmYKg=
Subject key identifier: 30:1D:03:6E:8B:23:6D:7E:78:6B:35:D8:5F:17:01:D3:85:C9:0B:DC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DDE3023E3A4B50E48539769CBF23405CA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MB0DbosjbX54azXYXxcB04XJC9w.roa
Signing time: Thu 30 Apr 2026 11:39:49 +0000
ROA not before: Thu 30 Apr 2026 11:39:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a05:b300::/29 maxlen: 32
2a06:1184:11::/48 maxlen: 48
2a06:35c3:100::/48 maxlen: 48
2a09:17c1:4a::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0c:7882:2::/48 maxlen: 48
2a0e:15c7:101::/48 maxlen: 48
2a0e:1a83:99::/48 maxlen: 48
2a0e:c786:122::/48 maxlen: 48
2a0e:c787:1000::/48 maxlen: 48
2a0e:f600:2a::/48 maxlen: 48
2a0f:1200:10::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:6::/48 maxlen: 48
2a0f:1740::/29 maxlen: 29
2a0f:18c0::/29 maxlen: 32
2a0f:1e07::/32 maxlen: 32
2a0f:1e80:1986::/48 maxlen: 48
2a0f:1fc0::/29 maxlen: 32
2a0f:3046:85::/48 maxlen: 48
2a0f:3047:fe48::/48 maxlen: 48
2a0f:31c7::/32 maxlen: 32
2a0f:3d80:1312::/48 maxlen: 48
2a0f:3e80::/29 maxlen: 29
2a0f:7d00:100::/48 maxlen: 48
2a0f:7d06:11::/48 maxlen: 48
2a0f:bc04:1004::/48 maxlen: 48
2a0f:da40::/29 maxlen: 32
2a0f:de40::/29 maxlen: 32
2a0f:e1c0:1312::/48 maxlen: 48
2a0f:e1c7:77::/48 maxlen: 48
2a0f:e202:33::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e740::/29 maxlen: 32
2a0f:e7c7:b4::/48 maxlen: 48
2a0f:ea44:55::/48 maxlen: 48
2a0f:ea44:acab::/48 maxlen: 48
2a0f:ec00::/29 maxlen: 29
2a10:4e00::/29 maxlen: 32
2a10:5400::/29 maxlen: 29
2a10:67c2:d6::/48 maxlen: 48
2a10:67c5:2::/48 maxlen: 48
2a10:6f00::/29 maxlen: 32
2a10:7700::/29 maxlen: 32
2a12:ac46:77::/48 maxlen: 48
2a12:ac46:99::/48 maxlen: 48
2a12:ecc0:11::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a13:18c5:11::/48 maxlen: 48
2a13:18c6:101::/48 maxlen: 48
2a13:18c6:8512::/48 maxlen: 48
2a13:2c40::/29 maxlen: 32
2a13:3080::/29 maxlen: 29
2a13:8100::/29 maxlen: 32
2a13:8c86:88::/48 maxlen: 48
2a13:8c86:10a::/48 maxlen: 48
2a13:9180::/29 maxlen: 32
2a13:9285:100::/48 maxlen: 48
2a13:c900:120::/48 maxlen: 48
2a13:e100:323::/48 maxlen: 48
2a13:e102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:30:23:e3:a4:b5:0e:48:53:97:69:cb:f2:34:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 30 11:39:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=301d036e8b236d7e786b35d85f1701d385c90bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:ab:14:fa:8a:20:7d:5d:ab:ca:35:6f:42:
cc:64:b7:77:88:a2:ec:81:01:22:9e:48:a2:7f:54:
b7:88:c4:2d:a3:5d:cb:f2:7a:d3:ca:ad:28:1a:b0:
1f:ec:51:b7:98:d6:4d:c3:87:9e:8c:a6:db:b5:cc:
39:72:52:86:14:20:bd:3c:94:b5:fd:80:0f:6e:56:
ef:71:96:7f:c6:32:24:2d:cb:31:92:58:9f:ca:69:
3e:81:b9:f7:9f:39:e5:e5:e0:4b:fa:04:4d:5d:ee:
78:d3:1a:ad:5b:33:98:d6:71:e7:37:56:98:65:08:
a8:63:ac:19:db:45:cc:8f:17:a5:d5:49:1e:55:d4:
6a:30:24:ae:eb:c7:05:6b:4c:3b:a7:87:c8:9c:f8:
40:5d:90:1d:a2:f9:1a:0e:41:d7:5c:ad:6b:65:ab:
ec:93:f9:f6:83:4d:53:49:aa:8d:ed:c5:43:b4:9f:
de:8f:d7:ce:36:1f:00:df:e6:5a:85:11:2b:fd:49:
ec:4f:37:71:a5:9d:de:5e:1d:d9:57:f4:ad:a3:9f:
70:00:21:2e:0b:bc:77:98:8f:f7:12:55:db:06:3d:
51:33:7b:a0:fb:9b:1e:fd:58:c2:73:32:f5:cf:59:
12:dd:7b:ca:d2:da:94:74:84:4b:da:55:b2:ea:f4:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1D:03:6E:8B:23:6D:7E:78:6B:35:D8:5F:17:01:D3:85:C9:0B:DC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MB0DbosjbX54azXYXxcB04XJC9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:1184:11::/48
2a06:35c3:100::/48
2a09:17c1:4a::/48
2a0a:2d06:66::/48
2a0c:7882:2::/48
2a0e:15c7:101::/48
2a0e:1a83:99::/48
2a0e:c786:122::/48
2a0e:c787:1000::/48
2a0e:f600:2a::/48
2a0f:1200:10::/48
2a0f:1206:66::/48
2a0f:1584:6::/48
2a0f:1740::/29
2a0f:18c0::/29
2a0f:1e07::/32
2a0f:1e80:1986::/48
2a0f:1fc0::/29
2a0f:3046:85::/48
2a0f:3047:fe48::/48
2a0f:31c7::/32
2a0f:3d80:1312::/48
2a0f:3e80::/29
2a0f:7d00:100::/48
2a0f:7d06:11::/48
2a0f:bc04:1004::/48
2a0f:da40::/29
2a0f:de40::/29
2a0f:e1c0:1312::/48
2a0f:e1c7:77::/48
2a0f:e202:33::/48
2a0f:e207:fd38::/48
2a0f:e740::/29
2a0f:e7c7:b4::/48
2a0f:ea44:55::/48
2a0f:ea44:acab::/48
2a0f:ec00::/29
2a10:4e00::/29
2a10:5400::/29
2a10:67c2:d6::/48
2a10:67c5:2::/48
2a10:6f00::/29
2a10:7700::/29
2a12:ac46:77::/48
2a12:ac46:99::/48
2a12:ecc0:11::/48
2a12:ecc0:3e2::/48
2a13:18c5:11::/48
2a13:18c6:101::/48
2a13:18c6:8512::/48
2a13:2c40::/29
2a13:3080::/29
2a13:8100::/29
2a13:8c86:88::/48
2a13:8c86:10a::/48
2a13:9180::/29
2a13:9285:100::/48
2a13:c900:120::/48
2a13:e100:323::/48
2a13:e102:1::/48
Signature Algorithm: sha256WithRSAEncryption
36:2b:78:69:7f:b4:15:db:2f:6c:92:39:64:86:59:a9:39:9a:
2a:92:4a:5c:eb:74:8b:58:7b:c9:59:25:0f:e4:b7:0d:a7:e5:
2f:42:59:be:83:34:50:e8:d6:f2:67:aa:c1:da:c5:55:77:f1:
4d:c7:1e:c9:33:0f:4b:29:51:24:2f:2b:e7:ab:6b:ed:ab:36:
54:b6:b0:49:5a:e4:ca:c3:5a:03:f2:02:6c:fb:a4:50:ee:c7:
b9:90:d9:b3:52:34:3a:d3:4c:06:a5:cf:1a:88:73:da:1f:56:
7e:0c:21:f3:7d:0b:78:9b:ca:cf:7b:48:f2:89:fa:c1:22:26:
c5:14:25:d2:03:8a:d2:38:36:17:4f:2b:02:ec:59:da:1c:17:
0f:72:8d:0f:08:b5:19:9e:57:01:ca:a8:9d:40:92:69:69:39:
2a:61:66:04:d6:0a:bd:8f:94:e1:54:14:61:44:fc:91:d7:23:
98:3a:f3:29:cb:45:f8:e7:68:7b:d0:92:3e:43:4a:58:f4:1b:
7c:49:07:e0:92:b8:0c:f2:5d:44:2e:41:eb:9b:f1:bb:dd:6b:
ea:e7:4a:b5:b3:b9:76:44:eb:b5:d3:49:28:aa:a5:56:10:9e:
f4:49:b9:0e:c3:5f:d2:14:8a:c4:5f:5d:ad:3a:bc:ee:53:86:
3f:06:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:53 2026 by rpki-client