Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PbIFQjyhzEiWFprgJnfje693C5M.roa
File: PbIFQjyhzEiWFprgJnfje693C5M.roa (raw, json)
Hash identifier: gUAT56qx8HHNqWLj9g72Ecn2HtP5xAZwH600wPD+DXs=
Subject key identifier: 3D:B2:05:42:3C:A1:CC:48:96:16:9A:E0:26:77:E3:7B:AF:77:0B:93
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0D39BC1A348CF98FE1F908CBF1AF6E01A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PbIFQjyhzEiWFprgJnfje693C5M.roa
Signing time: Thu 24 Sep 2026 13:29:55 +0000
ROA not before: Thu 24 Sep 2026 13:29:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207449
IP address blocks: 2a13:8c85::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:9b:c1:a3:48:cf:98:fe:1f:90:8c:bf:1a:f6:e0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 24 13:29:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3db205423ca1cc4896169ae02677e37baf770b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:eb:4d:34:0a:6d:3b:a5:86:4e:03:1a:37:
6f:f8:18:36:3e:71:05:f8:01:89:ea:46:13:bb:b1:
29:a0:5b:7e:46:4c:f8:6f:5a:65:f7:27:50:ea:9b:
32:4d:58:14:cc:5b:1d:17:9b:69:da:0c:26:2b:d0:
ee:c6:21:7c:37:52:d3:60:3e:d5:b4:33:d7:e2:f1:
c1:57:33:4f:b2:be:72:46:e1:e4:01:85:cd:f4:c1:
b7:e6:ce:4c:7f:a5:de:db:14:fc:7f:95:e1:04:45:
9b:b6:8f:bb:73:2d:c7:bc:de:3a:d7:b2:c1:fa:52:
61:8d:41:56:bb:b0:59:7f:0f:9c:10:18:03:58:f0:
98:06:99:8b:7b:0b:20:2c:73:2d:26:4c:4d:52:87:
f1:26:7d:5d:db:bf:ff:d9:bb:4c:2c:4b:3e:0a:a7:
2a:bc:15:eb:01:9d:2e:72:c9:91:89:f2:50:9b:c5:
ce:5f:f5:94:4c:23:86:70:62:5e:07:e2:8b:c8:6c:
2c:98:a0:27:1e:4e:3f:5c:8f:ad:05:6c:54:3e:86:
d8:93:f0:06:78:32:7a:a0:61:20:79:43:92:d8:37:
d9:3e:e9:e1:74:bf:78:2b:45:39:4f:92:6d:20:cc:
26:f4:07:8e:fc:fe:9c:9a:d1:27:5e:2f:2e:de:2a:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:05:42:3C:A1:CC:48:96:16:9A:E0:26:77:E3:7B:AF:77:0B:93
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PbIFQjyhzEiWFprgJnfje693C5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8c85::/32
Signature Algorithm: sha256WithRSAEncryption
b6:41:be:e3:ca:54:8f:9f:93:ba:40:56:72:78:bf:7a:13:db:
2e:98:6e:29:b7:37:88:c7:87:bd:99:5b:30:f6:99:2b:c4:25:
02:8a:4d:db:e8:ef:31:d4:ed:7a:4c:c8:ca:e9:4f:61:27:1f:
6d:f2:55:22:92:e9:fb:4e:97:16:f6:5d:b1:46:d2:06:ec:36:
f5:56:06:5d:83:92:07:89:11:e1:3e:f1:89:c9:5d:77:b5:25:
96:cf:d8:5b:42:8b:76:4b:a3:6a:39:b1:d7:65:d0:6f:a6:a7:
27:8b:0a:d2:68:f6:1d:44:2e:6a:c4:a9:e8:c5:c1:54:a1:61:
ef:1a:6c:ff:7c:ff:17:a5:c8:97:0c:a6:2d:29:fc:0f:f3:d4:
ed:5d:38:29:61:c4:b0:70:83:45:dc:85:60:e1:fb:6c:6f:5b:
c3:09:00:1a:3c:5b:27:67:2a:df:03:a3:56:d2:0e:39:c7:70:
3f:d1:2e:7b:ca:11:ba:e8:b1:29:27:16:93:85:5b:b8:ad:52:
0f:44:d8:58:9e:3e:5a:53:70:a2:da:79:80:93:ce:75:4c:0c:
58:b2:7d:85:55:aa:da:2e:e0:04:a3:3c:ec:6d:17:97:dd:49:
1a:00:99:5f:9c:48:9a:18:a8:c1:5b:9b:b5:c0:e1:03:03:f3:
1d:2a:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:09:07 2026 by rpki-client