Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/begHJW_3d2bqc9PtYvQJQ0WHssI.roa
File: begHJW_3d2bqc9PtYvQJQ0WHssI.roa (raw, json)
Hash identifier: tLRWTA5ftxYc4IcRDd+yqiNm97NC8ay/Tj80qIsf6p8=
Subject key identifier: 6D:E8:07:25:6F:F7:77:66:EA:73:D3:ED:62:F4:09:43:45:87:B2:C2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D1CAF890E79061FBA7AD2411D968963AB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/begHJW_3d2bqc9PtYvQJQ0WHssI.roa
Signing time: Mon 23 Mar 2026 21:52:39 +0000
ROA not before: Mon 23 Mar 2026 21:52:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62563
IP address blocks: 2a0f:1740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:af:89:0e:79:06:1f:ba:7a:d2:41:1d:96:89:63:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 23 21:52:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6de807256ff77766ea73d3ed62f409434587b2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:a9:b3:1c:d8:63:a2:01:83:95:cf:fc:e9:
80:45:12:c4:9e:d0:68:84:e0:e6:ff:c1:88:ca:b0:
41:cb:1d:c2:02:3c:54:f6:e7:86:15:a2:73:69:a2:
bd:e5:65:3f:5c:b0:36:32:63:78:0d:0b:d9:c7:e2:
85:16:b5:dc:38:19:7d:73:bf:09:38:03:88:31:19:
7d:e4:fd:07:f1:b2:4a:44:8b:e8:d2:97:af:f8:7d:
39:fd:f8:e6:23:ea:dc:ab:46:8e:e2:24:9c:cc:13:
90:e5:e4:ee:f0:3b:b5:eb:f5:a1:02:65:d2:01:d6:
b1:9a:97:de:c9:0f:4b:2c:ae:da:f7:80:72:63:33:
fd:b6:06:93:de:cb:85:50:aa:4e:70:6d:b8:ee:5b:
26:fe:73:69:ce:f1:65:77:f6:13:b9:5f:3b:aa:36:
64:43:c9:92:9f:40:02:d6:ff:56:f7:65:b4:97:75:
0f:19:84:34:d4:3e:93:d3:87:42:bf:e4:e8:44:39:
fa:64:70:cc:ac:57:09:1c:46:70:06:c1:70:6e:42:
3e:92:c4:35:58:0e:81:99:0c:9a:4e:c6:7e:eb:4c:
b6:0f:ab:26:c2:f0:66:84:b0:51:19:d8:10:73:84:
17:cc:c4:f9:f8:a0:2a:d7:12:d3:39:af:29:ab:06:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:07:25:6F:F7:77:66:EA:73:D3:ED:62:F4:09:43:45:87:B2:C2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/begHJW_3d2bqc9PtYvQJQ0WHssI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1740::/29
Signature Algorithm: sha256WithRSAEncryption
78:ba:3f:87:6c:71:f4:c5:61:60:8d:52:bd:cf:f6:dd:86:5b:
f7:b8:2f:b5:72:1c:be:fa:05:36:37:41:b6:90:1c:ef:9f:f0:
8e:a2:57:12:34:f1:5c:59:23:b6:87:bf:10:ca:aa:1a:8e:1d:
21:d8:d6:c9:4a:9d:39:bd:b7:fd:b7:30:ea:60:bf:62:24:2c:
cf:3a:c8:78:3b:23:58:b2:f8:2d:17:bc:00:5d:f8:9f:7f:ff:
4c:6b:1d:48:dd:ea:93:ed:64:c4:e3:0d:0b:56:b2:af:9e:95:
af:8a:82:9b:ca:e0:2c:25:74:f5:64:23:32:ca:07:48:d2:9d:
b3:b9:b9:25:22:2f:ac:1f:ec:fc:86:8c:a4:d7:f5:5e:c6:59:
50:f6:cd:c5:55:64:18:2c:42:54:91:d4:96:94:37:ff:05:31:
de:e2:e8:99:cf:ca:b5:26:2c:62:68:d2:e9:09:14:16:f2:32:
2f:93:b6:0e:b3:30:bb:34:70:b1:f9:c1:3b:2a:b9:f6:da:b0:
c0:b3:84:c1:7b:21:3d:9c:1d:e1:26:79:5d:db:e0:18:ca:a4:
18:7c:c7:46:de:b3:c5:23:b9:61:71:69:12:b1:a2:05:87:b6:
d3:1f:e5:be:2c:31:a4:c4:f1:53:08:a0:77:a6:8a:25:71:b3:
0d:36:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:47 2026 by rpki-client