Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gUnCSyMKNinWHyipnTJp-4Qjqew.roa
File: gUnCSyMKNinWHyipnTJp-4Qjqew.roa (raw, json)
Hash identifier: VaKhaNrvJ/T2+GSoNeKwDb2tBPsq1MF83ZSHromYvRU=
Subject key identifier: 81:49:C2:4B:23:0A:36:29:D6:1F:28:A9:9D:32:69:FB:84:23:A9:EC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E0682A13B74BF9C9EB2D815D25E71A233
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gUnCSyMKNinWHyipnTJp-4Qjqew.roa
Signing time: Fri 08 May 2026 07:34:44 +0000
ROA not before: Fri 08 May 2026 07:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 2a07:f300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:82:a1:3b:74:bf:9c:9e:b2:d8:15:d2:5e:71:a2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 8 07:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8149c24b230a3629d61f28a99d3269fb8423a9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:94:df:13:ea:70:d3:49:7c:15:03:17:0e:
30:1d:45:3c:ef:10:18:a1:15:d5:d5:cd:d7:fe:90:
2d:0a:84:0c:5d:ca:4b:db:ab:29:90:4e:f3:6a:eb:
7b:0e:60:36:d4:9d:5a:62:62:7b:8d:f3:b5:47:e1:
8e:a7:10:25:f0:6e:44:43:39:c5:a5:6c:3c:ce:0d:
8e:42:cf:fb:02:f3:31:52:07:e2:97:ea:a6:03:b5:
a7:9a:32:79:21:f2:cc:49:37:21:bf:aa:ed:fd:ee:
d6:88:d2:ce:b1:d8:1e:bf:75:c9:5a:e0:e9:ce:cb:
83:c3:b0:21:8f:bb:b0:ab:5e:e6:9c:5b:d8:0b:ea:
c1:5c:36:33:ee:42:13:17:6a:d9:07:1d:19:94:96:
1d:db:9f:8c:e6:12:4e:a5:aa:6b:88:b8:bf:38:1c:
38:8a:ba:3e:f6:70:04:77:57:da:5b:68:b7:ef:79:
03:4a:79:09:aa:2f:6a:ed:b3:3a:c6:f3:34:39:ca:
78:47:98:c4:bf:b8:6f:e5:56:14:1b:30:4d:0b:1c:
64:f7:18:c0:f6:69:75:ce:86:60:a9:14:14:25:e1:
88:22:db:82:66:4d:b0:c1:d3:4b:f0:2d:1f:2d:54:
0b:6a:59:9a:73:9a:1f:ac:0c:0e:08:31:46:a4:fb:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:49:C2:4B:23:0A:36:29:D6:1F:28:A9:9D:32:69:FB:84:23:A9:EC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gUnCSyMKNinWHyipnTJp-4Qjqew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f300::/29
Signature Algorithm: sha256WithRSAEncryption
a0:23:4e:d4:1a:b7:74:66:a9:1b:7f:b9:cb:91:1a:73:c5:6c:
51:b5:2a:b2:36:05:4e:94:65:5f:ca:1a:6b:5b:50:27:c1:ad:
c7:0c:58:e7:df:a6:53:b6:59:51:46:3e:0f:09:30:d9:6d:3f:
cb:18:3c:a6:3d:f9:1a:7a:c4:f0:85:e5:8f:f8:a0:90:84:3e:
84:bc:df:e8:a0:3a:50:cf:50:28:17:07:04:78:b8:69:a5:9e:
f2:fb:b7:af:bd:0f:d9:22:36:c5:cf:9d:d8:69:11:ce:62:6d:
87:94:ab:90:67:7a:b5:6c:c8:ec:6c:6c:50:ce:2f:89:27:05:
32:a1:41:af:80:fb:c9:8c:fd:9a:fb:e7:f2:65:d3:7a:40:bf:
3c:89:97:12:6e:3b:33:65:1a:b1:94:c1:0c:4e:d6:24:1c:6a:
04:17:7c:b8:ae:6d:b8:37:3e:b8:8d:13:4a:f8:10:fe:1b:e2:
66:8c:9a:9d:2b:07:0a:9c:98:b8:13:72:8a:77:14:4f:86:0f:
92:ea:87:39:cf:71:d2:be:6e:5b:64:7e:43:4c:f6:21:e9:27:
29:cf:a5:f9:25:cc:4d:4a:71:94:00:97:fa:11:3f:03:cf:30:
26:0d:fb:bd:15:65:9d:55:93:58:d9:13:dc:5e:5e:10:a9:16:
da:c1:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:17 2026 by rpki-client