Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Of8LD5FithUrd7Uq0T6MoOiJrjo.roa
File: Of8LD5FithUrd7Uq0T6MoOiJrjo.roa (raw, json)
Hash identifier: xvNdwyQWLStxfstlO3p5athtnW8domP5q3ON3hTHQxo=
Subject key identifier: 39:FF:0B:0F:91:62:B6:15:2B:77:B5:2A:D1:3E:8C:A0:E8:89:AE:3A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DFDF66907A48403584ABC8507CD1FF710
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Of8LD5FithUrd7Uq0T6MoOiJrjo.roa
Signing time: Wed 06 May 2026 15:44:37 +0000
ROA not before: Wed 06 May 2026 15:44:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53667
IP address blocks: 2a09:7500::/29 maxlen: 29
2a0f:3044::/32 maxlen: 32
2a0f:7d05::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:f6:69:07:a4:84:03:58:4a:bc:85:07:cd:1f:f7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 6 15:44:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39ff0b0f9162b6152b77b52ad13e8ca0e889ae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:3e:4b:5d:76:6f:4b:1f:7a:1c:46:de:e8:
30:76:f7:5a:36:36:bb:36:44:e1:97:e2:92:df:b1:
5f:a4:c5:d2:b8:38:3b:ca:f7:39:5b:b3:8f:98:fe:
84:1c:9a:0f:17:ec:0d:d1:1a:76:5e:a7:25:e4:90:
bf:85:08:15:eb:f3:e0:9d:4b:b3:34:e3:3e:b4:54:
36:33:ae:64:b3:a8:8b:d6:e4:ca:f7:65:8c:0a:b4:
84:7b:b2:40:79:a1:c3:6c:74:4c:a6:82:69:af:f6:
1d:89:10:4c:01:e2:b3:9e:33:0c:4a:33:8d:32:6b:
e5:a5:8b:c2:2d:b4:28:6b:08:ba:1f:a3:62:39:d4:
39:f6:d9:4c:b2:77:7f:bc:47:17:5e:05:f3:4e:8d:
a8:f0:0e:8d:53:33:97:90:28:0b:c9:29:1c:56:37:
6a:29:9e:1e:e7:97:bd:2c:40:c8:29:cd:b6:b6:d1:
6b:9b:d8:e3:a9:c7:11:17:0d:29:4a:32:8e:9d:3a:
4b:44:bd:12:b2:52:d1:23:ca:e8:99:10:92:99:e0:
65:02:b0:2d:96:7d:91:10:f6:3f:d4:78:60:15:61:
35:6f:04:22:00:27:ac:91:87:72:6f:4e:f4:35:5f:
c6:40:59:5b:90:ac:18:d4:4a:e3:90:06:c3:a1:c3:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FF:0B:0F:91:62:B6:15:2B:77:B5:2A:D1:3E:8C:A0:E8:89:AE:3A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Of8LD5FithUrd7Uq0T6MoOiJrjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7500::/29
2a0f:3044::/32
2a0f:7d05::/32
Signature Algorithm: sha256WithRSAEncryption
53:b8:41:b1:ff:a2:6c:d1:30:fa:45:0a:f6:90:c8:24:69:66:
3f:7a:84:37:60:3f:b7:fa:6d:a3:34:99:56:5f:82:79:fe:0c:
76:f4:92:35:38:7a:78:dd:b8:4c:2f:39:7b:8d:d2:01:07:b7:
9e:cf:4d:19:19:25:f3:84:e1:b7:b9:fa:8c:96:d7:89:b7:6c:
ba:14:25:60:37:e4:02:ef:c9:8a:8b:ab:fd:8b:bd:3d:86:9d:
eb:1c:46:21:c2:40:31:74:5c:75:4a:97:7a:28:6e:99:f5:21:
9f:d9:3a:fa:85:3b:66:45:64:1f:02:ea:94:5d:95:4d:b6:c4:
a1:8c:e0:0a:a7:3a:e2:d3:ac:44:2a:44:c2:58:6a:a4:37:48:
72:88:9a:c1:1f:c4:6f:ad:5c:b3:11:c3:5a:4e:70:2d:e0:b5:
5d:47:96:1b:c5:8d:d9:d5:db:3f:e6:f8:59:47:ce:10:81:28:
69:c1:af:5a:0f:f0:68:76:80:3c:31:66:4d:f7:64:db:5f:4c:
98:92:2a:b1:48:e4:f8:9e:5e:7a:1e:30:a3:e9:5b:2a:bf:dc:
02:c1:bf:49:8c:44:6a:77:d6:bf:ff:f9:0e:82:2d:f4:fc:eb:
be:a0:ad:6d:ed:bc:b8:b1:41:4e:43:b0:60:22:24:11:06:56:
56:e6:c0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:43 2026 by rpki-client