Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oSrpL3uCV8Yj8r_erBHIgyAMt9k.roa
File: oSrpL3uCV8Yj8r_erBHIgyAMt9k.roa (raw, json)
Hash identifier: YTb/TCPnD4OJ5FoLBf4GSbddEL691Fzxd/xmf25/aYU=
Subject key identifier: A1:2A:E9:2F:7B:82:57:C6:23:F2:BF:DE:AC:11:C8:83:20:0C:B7:D9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D1FCCF6A1893B11809E9213B7B73B5145
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oSrpL3uCV8Yj8r_erBHIgyAMt9k.roa
Signing time: Tue 24 Mar 2026 12:23:39 +0000
ROA not before: Tue 24 Mar 2026 12:23:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 2a0c:7886:100::/48 maxlen: 48
2a0e:f600:2c::/48 maxlen: 48
2a0f:1584:77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:cc:f6:a1:89:3b:11:80:9e:92:13:b7:b7:3b:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 24 12:23:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a12ae92f7b8257c623f2bfdeac11c883200cb7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:9c:ae:fc:c3:d4:34:f8:d5:42:49:3c:af:
f2:69:5a:dc:f4:cc:43:14:db:fa:c6:fe:ea:0e:c3:
2a:96:ce:28:12:c8:82:0d:87:12:4f:22:4b:d6:78:
20:2f:48:af:e6:43:44:28:58:67:03:90:69:49:a0:
e5:c3:a3:ac:70:20:43:aa:a0:42:12:6e:3d:b0:2c:
62:e2:3a:08:75:dd:0a:cb:35:d8:85:dd:64:81:1b:
85:92:c0:dc:20:ca:18:e8:db:a1:3e:76:b8:f9:1f:
eb:93:2a:31:8d:1c:1a:c9:3d:ac:c5:04:d5:27:9f:
84:6b:eb:62:2d:35:30:cf:ea:1f:92:95:2c:83:ed:
c6:1c:09:0a:16:8d:8b:2c:18:f3:7d:da:ed:0a:26:
b4:d7:ae:96:0f:4f:f8:93:ce:4c:87:63:93:96:d7:
fb:72:34:3e:47:75:84:d2:7f:16:3e:6a:40:08:21:
63:ea:b1:5d:a7:49:2d:25:2d:4b:6e:cd:0f:cf:35:
00:e6:58:8c:e7:ea:62:41:51:12:ae:12:12:01:18:
d4:2e:c6:4c:53:10:9c:45:fd:05:c3:58:c9:5f:fe:
fb:c8:24:2c:52:14:57:d3:c8:cf:e2:ea:be:c5:56:
a4:44:5d:0c:6f:3f:66:ee:74:47:1a:2d:3f:91:14:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:E9:2F:7B:82:57:C6:23:F2:BF:DE:AC:11:C8:83:20:0C:B7:D9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oSrpL3uCV8Yj8r_erBHIgyAMt9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7886:100::/48
2a0e:f600:2c::/48
2a0f:1584:77::/48
Signature Algorithm: sha256WithRSAEncryption
cf:cf:69:11:e6:15:1c:a0:95:16:a8:c1:0b:04:a6:ad:84:9d:
05:66:dd:26:f3:13:28:0e:f5:5b:43:9d:9c:17:c2:c5:2a:a3:
8f:59:6c:2f:bd:b1:45:67:b4:a3:44:b9:3f:e1:4e:65:21:95:
be:96:01:20:d0:c6:6b:33:59:07:7e:48:8e:f9:a1:1e:c3:ff:
fd:fe:03:26:b0:13:83:56:eb:67:ad:5e:53:ce:b3:1e:ab:e9:
09:c2:3a:09:93:d3:37:5e:f2:47:7b:93:19:2d:b0:e9:9c:e7:
18:3f:25:40:40:ea:81:fb:c5:59:a4:c0:6f:e9:92:f9:31:7d:
f3:12:75:61:8a:b6:f1:cb:13:02:27:8c:54:a0:81:e7:ff:61:
4d:0d:b1:5d:81:34:59:2f:bd:f6:f1:f3:78:3c:06:f9:f0:e7:
09:8f:0e:4d:a2:e2:18:ab:1c:dd:db:95:32:50:fb:e2:fc:a2:
7a:da:89:c2:27:33:37:84:71:43:14:a0:67:fe:ee:50:c5:59:
09:be:13:ff:7c:d8:68:b8:58:e3:20:ac:cc:e9:18:81:f5:12:
7b:00:8d:15:50:4b:48:71:e2:2d:18:80:20:62:ed:a4:6f:6e:
3d:7b:a5:c7:c8:f3:51:9b:cb:0a:69:a7:96:7b:ec:23:51:42:
1f:e1:68:70
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ0fzPahiTsRgJ6SE7e3O1FFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMzI0MTIyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTJhZTkyZjdiODI1N2M2MjNmMmJmZGVhYzExYzg4MzIwMGNiN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJecrvzD1DT41UJJPK/yaVrc9MxD
FNv6xv7qDsMqls4oEsiCDYcSTyJL1nggL0iv5kNEKFhnA5BpSaDlw6OscCBDqqBC
Em49sCxi4joIdd0KyzXYhd1kgRuFksDcIMoY6NuhPna4+R/rkyoxjRwayT2sxQTV
J5+Ea+tiLTUwz+ofkpUsg+3GHAkKFo2LLBjzfdrtCia0166WD0/4k85Mh2OTltf7
cjQ+R3WE0n8WPmpACCFj6rFdp0ktJS1Lbs0PzzUA5liM5+piQVESrhISARjULsZM
UxCcRf0Fw1jJX/77yCQsUhRX08jP4uq+xVakRF0Mbz9m7nRHGi0/kRQVywIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKEq6S97glfGI/K/3qwRyIMgDLfZMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvb1NycEwzdUNWOFlqOHJfZXJCSElneUFNdDlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgx4hgEA
AwcAKg72AAAsAwcAKg8VhAB3MA0GCSqGSIb3DQEBCwUAA4IBAQDPz2kR5hUcoJUW
qMELBKathJ0FZt0m8xMoDvVbQ52cF8LFKqOPWWwvvbFFZ7SjRLk/4U5lIZW+lgEg
0MZrM1kHfkiO+aEew//9/gMmsBODVutnrV5TzrMeq+kJwjoJk9M3XvJHe5MZLbDp
nOcYPyVAQOqB+8VZpMBv6ZL5MX3zEnVhirbxyxMCJ4xUoIHn/2FNDbFdgTRZL732
8fN4PAb58OcJjw5NouIYqxzd25UyUPvi/KJ62onCJzM3hHFDFKBn/u5QxVkJvhP/
fNhouFjjIKzM6RiB9RJ7AI0VUEtIceItGIAgYu2kb249e6XHyPNRm8sKaaeWe+wj
UUIf4Whw
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:55 2026 by rpki-client