Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/CUsD8lt5-lXh9LkZsJ6cPOX6hsc.roa
File: CUsD8lt5-lXh9LkZsJ6cPOX6hsc.roa (raw, json)
Hash identifier: vpk8KShRqahOvvvQQ5KHNcIKAntGCFPSkwmHDUnFRTk=
Subject key identifier: 09:4B:03:F2:5B:79:FA:55:E1:F4:B9:19:B0:9E:9C:3C:E5:FA:86:C7
Certificate issuer: /CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Certificate serial: 019F2368D4A4CAC3F5935A72CB6BF7FC82B4
Authority key identifier: 88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/CUsD8lt5-lXh9LkZsJ6cPOX6hsc.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213565
IP address blocks: 2a14:a902::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d4:a4:ca:c3:f5:93:5a:72:cb:6b:f7:fc:82:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=094b03f25b79fa55e1f4b919b09e9c3ce5fa86c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:b3:9e:7a:0f:46:1d:2e:40:0e:40:10:d5:
9c:15:39:b3:05:51:64:dd:4c:d9:9a:84:37:82:af:
84:19:10:0b:35:9b:ba:88:22:93:10:b1:29:56:c8:
ff:77:cd:6f:a2:07:92:3a:d1:1b:dc:3d:12:12:fe:
3e:42:62:df:4e:85:14:7a:30:3b:3a:15:8c:49:be:
0a:2c:01:02:5f:eb:cd:f3:8e:e8:5b:47:40:0f:f6:
40:3e:d9:07:28:b6:16:67:f4:55:55:37:ec:e2:f1:
45:6e:e1:10:33:07:6e:a0:2f:a1:3e:48:44:ab:1e:
b9:3a:ae:6b:9f:20:3d:bf:91:12:f8:e3:5e:fc:7a:
1b:c3:d8:d9:92:16:11:53:0f:3b:a3:08:0d:d0:1d:
dc:c5:a9:68:c7:ca:5e:69:e8:10:ad:8f:49:4c:83:
d2:30:c0:c1:bf:f0:79:38:4e:e1:34:a3:fc:a2:aa:
c9:41:e5:3e:54:75:99:57:8b:87:9a:b4:0d:b1:07:
fc:80:f9:f0:c8:03:b6:58:2b:bf:a2:45:35:25:fa:
9c:85:37:68:77:3b:6d:e9:bf:81:23:cb:06:b5:20:
89:ef:65:84:70:2e:bf:2e:f2:73:1c:bb:b9:0b:d4:
0d:c7:69:6c:bb:29:83:04:c9:93:53:bb:3e:46:08:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:03:F2:5B:79:FA:55:E1:F4:B9:19:B0:9E:9C:3C:E5:FA:86:C7
X509v3 Authority Key Identifier:
keyid:88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/CUsD8lt5-lXh9LkZsJ6cPOX6hsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a902::/32
Signature Algorithm: sha256WithRSAEncryption
a6:80:51:b7:4a:bd:23:28:6c:7a:f9:e3:2d:f6:9d:29:6f:cc:
5b:00:e0:2a:55:cd:a7:f0:17:fc:9c:e3:69:cd:dd:14:f2:ca:
10:92:e8:a1:71:06:4d:09:eb:7d:47:29:fd:a0:31:83:ba:2c:
3a:e2:fe:33:23:fa:d7:3d:ff:6b:3b:66:ab:68:fc:f5:38:de:
75:82:07:50:9d:33:e8:f5:23:66:5e:0e:0d:c0:5c:1a:a8:60:
7f:8f:f7:9b:50:2c:4f:f4:98:44:17:3f:50:96:8c:f3:cc:28:
42:c7:b2:1a:fe:6e:f6:c7:96:38:00:a4:d5:96:56:b0:73:c0:
65:a2:b9:ac:fd:24:be:c6:54:82:6b:18:dd:73:f8:6b:5c:8a:
dd:18:1d:46:6b:37:32:2b:f8:8a:7b:63:18:85:4c:f3:80:a6:
4a:dc:3c:f0:87:3c:61:83:c5:ae:03:8d:ba:73:8f:70:70:14:
a9:5d:ac:87:83:02:e6:67:c6:18:9d:b0:a8:f5:74:10:4c:e1:
83:04:bb:0a:72:fe:6c:7c:a5:e9:d3:76:34:43:3c:12:14:f4:
e5:79:75:41:08:22:3c:43:56:72:44:69:17:7c:29:1c:ce:1c:
e3:12:59:d4:a2:ab:f1:11:0e:f5:ce:07:d9:3e:f5:e5:97:2c:
ea:77:f8:a3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaNSkysP1k1pyy2v3/IK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Mjc1ZjVmMTJjNzU2ZWEwOTRiMmZhMmNlZDIxNzczZDY5
YWU4OTYwHhcNMjYwNzAyMTUxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTRiMDNmMjViNzlmYTU1ZTFmNGI5MTliMDllOWMzY2U1ZmE4NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKaznnoPRh0uQA5AENWcFTmzBVFk
3UzZmoQ3gq+EGRALNZu6iCKTELEpVsj/d81vogeSOtEb3D0SEv4+QmLfToUUejA7
OhWMSb4KLAECX+vN847oW0dAD/ZAPtkHKLYWZ/RVVTfs4vFFbuEQMwduoC+hPkhE
qx65Oq5rnyA9v5ES+ONe/Hobw9jZkhYRUw87owgN0B3cxalox8peaegQrY9JTIPS
MMDBv/B5OE7hNKP8oqrJQeU+VHWZV4uHmrQNsQf8gPnwyAO2WCu/okU1JfqchTdo
dztt6b+BI8sGtSCJ72WEcC6/LvJzHLu5C9QNx2lsuymDBMmTU7s+RgjmXQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAlLA/JbefpV4fS5GbCenDzl+obHMB8GA1UdIwQY
MBaAFIgnX18Sx1bqCUsvos7SF3PWmuiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUNkZlh4TEhWdW9KU3ktaXp0SVhjOWFhNkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt
Nzc1ZjVmNzRkNTgxLzEvQ1VzRDhsdDUtbFhoOUxrWnNKNmNQT1g2aHNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDktNzc1ZjVmNzRkNTgx
LzEvaUNkZlh4TEhWdW9KU3ktaXp0SVhjOWFhNkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhSpAjAN
BgkqhkiG9w0BAQsFAAOCAQEApoBRt0q9IyhsevnjLfadKW/MWwDgKlXNp/AX/Jzj
ac3dFPLKEJLooXEGTQnrfUcp/aAxg7osOuL+MyP61z3/aztmq2j89TjedYIHUJ0z
6PUjZl4ODcBcGqhgf4/3m1AsT/SYRBc/UJaM88woQseyGv5u9seWOACk1ZZWsHPA
ZaK5rP0kvsZUgmsY3XP4a1yK3RgdRms3Miv4intjGIVM84CmStw88Ic8YYPFrgON
unOPcHAUqV2sh4MC5mfGGJ2wqPV0EEzhgwS7CnL+bHyl6dN2NEM8EhT05Xl1QQgi
PENWckRpF3wpHM4c4xJZ1KKr8REO9c4H2T715Zcs6nf4ow==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:19:00 2026 by rpki-client