Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U1-JNW-OwzL80aSg1hHg_laTYaw.roa
File: U1-JNW-OwzL80aSg1hHg_laTYaw.roa (raw, json)
Hash identifier: vHQxvU1xxP/nqasOcdytPK0iGyxIchhIrlk2n38f3Rs=
Subject key identifier: 53:5F:89:35:6F:8E:C3:32:FC:D1:A4:A0:D6:11:E0:FE:56:93:61:AC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0C2CA386C03EB92DFC3C127B7B0D6215C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U1-JNW-OwzL80aSg1hHg_laTYaw.roa
Signing time: Mon 21 Sep 2026 07:07:07 +0000
ROA not before: Mon 21 Sep 2026 07:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a06:1181:2::/48 maxlen: 48
2a09:17c0:22::/48 maxlen: 48
2a09:17c7:10::/48 maxlen: 48
2a0a:2d07:9a::/48 maxlen: 48
2a0c:7886:22::/48 maxlen: 48
2a0d:1140::/29 maxlen: 32
2a0e:15c0:4::/48 maxlen: 48
2a0e:1a80:1312::/48 maxlen: 48
2a0e:2240::/29 maxlen: 32
2a0e:c785:273::/48 maxlen: 48
2a0e:e980::/29 maxlen: 32
2a0e:f500::/29 maxlen: 32
2a0e:f604:10::/48 maxlen: 48
2a0f:1200:2::/48 maxlen: 48
2a0f:1587:100::/48 maxlen: 48
2a0f:1e84:3f::/48 maxlen: 48
2a0f:1e86:100::/48 maxlen: 48
2a0f:3047:fc1d::/48 maxlen: 48
2a0f:3d86:77::/48 maxlen: 48
2a0f:7d06:9c8a::/48 maxlen: 48
2a0f:bc00:100::/48 maxlen: 48
2a0f:df45:fc78::/48 maxlen: 48
2a0f:df47:200::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e640::/29 maxlen: 32
2a0f:e6c6:5532::/48 maxlen: 48
2a0f:e7c5:f8f9::/48 maxlen: 48
2a0f:e847:77::/48 maxlen: 48
2a10:3540::/29 maxlen: 32
2a10:3640::/29 maxlen: 32
2a10:6500::/29 maxlen: 32
2a10:7300::/29 maxlen: 32
2a10:7d00::/29 maxlen: 32
2a11:1200::/29 maxlen: 32
2a11:3f80::/29 maxlen: 29
2a12:ac44:1312::/48 maxlen: 48
2a12:dc00::/29 maxlen: 32
2a12:ecc3:2::/48 maxlen: 48
2a13:cc0::/29 maxlen: 32
2a13:18c0:22::/48 maxlen: 48
2a13:1940::/29 maxlen: 32
2a13:8c82:1::/48 maxlen: 48
2a13:9281:100::/48 maxlen: 48
2a13:9580::/29 maxlen: 32
2a13:c900:fd1a::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:ca:38:6c:03:eb:92:df:c3:c1:27:b7:b0:d6:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 21 07:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=535f89356f8ec332fcd1a4a0d611e0fe569361ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:6d:d0:87:13:ac:90:a0:af:98:7e:7e:4c:
9c:7c:50:d6:56:86:3f:37:bf:6b:fc:5e:8a:7c:61:
c1:76:bb:53:17:63:20:42:d5:da:e0:50:85:7d:63:
4c:8e:5a:11:37:ca:9e:34:c4:bb:8f:ea:f5:14:2f:
85:b2:ac:50:1e:9a:f9:af:38:d9:78:4f:01:57:40:
b3:68:6f:23:4f:10:bd:bf:24:b8:2f:ec:39:47:89:
49:6d:8f:e2:07:4c:27:11:46:76:a1:49:b7:ef:ca:
d0:27:30:c1:77:03:5f:f2:2d:30:58:04:22:89:89:
20:c6:8b:fa:87:6f:f0:55:ba:5f:4f:9a:a7:81:d1:
48:e0:1f:f4:3d:1d:82:b3:de:93:18:1d:be:52:75:
17:e1:cb:20:85:17:8a:5c:9e:5f:39:67:62:64:d0:
3e:68:76:5b:80:3e:86:6f:9b:bf:f0:5d:1c:0e:19:
8d:97:c8:b0:ff:4b:6f:3d:e4:b9:4d:1a:ec:a7:c1:
f6:c5:88:ab:8f:33:f0:46:c9:8c:00:aa:4f:49:cb:
3e:4d:9b:dd:90:b3:ee:97:90:b6:46:9c:61:20:0f:
26:13:89:4e:0c:dd:80:56:06:35:25:f1:80:b5:ec:
16:b8:89:24:6d:5f:8f:f7:7a:8d:91:d6:46:fb:18:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5F:89:35:6F:8E:C3:32:FC:D1:A4:A0:D6:11:E0:FE:56:93:61:AC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U1-JNW-OwzL80aSg1hHg_laTYaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1181:2::/48
2a09:17c0:22::/48
2a09:17c7:10::/48
2a0a:2d07:9a::/48
2a0c:7886:22::/48
2a0d:1140::/29
2a0e:15c0:4::/48
2a0e:1a80:1312::/48
2a0e:2240::/29
2a0e:c785:273::/48
2a0e:e980::/29
2a0e:f500::/29
2a0e:f604:10::/48
2a0f:1200:2::/48
2a0f:1587:100::/48
2a0f:1e84:3f::/48
2a0f:1e86:100::/48
2a0f:3047:fc1d::/48
2a0f:3d86:77::/48
2a0f:7d06:9c8a::/48
2a0f:bc00:100::/48
2a0f:df45:fc78::/48
2a0f:df47:200::/48
2a0f:e202:55::/48
2a0f:e640::/29
2a0f:e6c6:5532::/48
2a0f:e7c5:f8f9::/48
2a0f:e847:77::/48
2a10:3540::/29
2a10:3640::/29
2a10:6500::/29
2a10:7300::/29
2a10:7d00::/29
2a11:1200::/29
2a11:3f80::/29
2a12:ac44:1312::/48
2a12:dc00::/29
2a12:ecc3:2::/48
2a13:cc0::/29
2a13:18c0:22::/48
2a13:1940::/29
2a13:8c82:1::/48
2a13:9281:100::/48
2a13:9580::/29
2a13:c900:fd1a::/48
2a13:e107:99::/48
Signature Algorithm: sha256WithRSAEncryption
17:6a:ad:3c:7b:c7:11:a9:8a:2b:72:48:d7:1d:ee:a9:90:b9:
aa:1c:cb:8f:65:14:aa:3e:99:6e:f8:a1:c4:c7:3a:01:d2:98:
34:f4:04:af:b5:d2:de:94:88:e1:c4:a0:99:7a:fb:ce:dd:33:
1e:33:79:3b:3d:8d:89:18:0c:cc:04:89:8a:50:ea:31:31:01:
9d:db:d8:52:c4:70:2e:0f:1f:5e:35:bd:85:da:48:7c:79:0d:
fa:06:84:89:4e:3c:e5:78:97:9b:b5:cd:14:bf:23:be:c0:9f:
7a:fb:fb:69:17:67:b1:86:eb:db:34:70:27:a8:e4:7f:14:27:
66:c6:05:77:c9:f1:d4:5a:4d:d2:48:f5:bb:fd:84:36:eb:37:
5c:6f:2b:69:4c:f1:bd:d5:8d:aa:83:73:67:ad:f5:8f:c9:be:
e3:65:fc:af:f9:53:df:3a:bb:4f:5b:fa:a4:3f:07:cd:bf:93:
ce:ff:1f:59:41:b3:22:e3:d7:f5:29:4a:30:2a:f4:d9:96:b4:
db:6d:df:f2:8b:18:92:03:93:79:81:19:07:b6:97:35:3e:b1:
ca:72:ed:22:3f:5a:ba:5e:67:bc:f2:00:58:47:b6:f6:a4:d2:
61:c4:f3:26:0f:57:40:0a:33:b9:32:c4:47:73:01:55:41:76:
6f:6f:67:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:47:44 2026 by rpki-client