Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-6jR8JtL_3yNRLI6amtEfuA8n98.roa
File: 1-6jR8JtL_3yNRLI6amtEfuA8n98.roa (raw, json)
Hash identifier: ivBSgLDwLqQcFHUFFjOCu5YKjtvR7PS76DSA4VcnK24=
Subject key identifier: FB:A8:D1:F0:9B:4B:FF:7C:8D:44:B2:3A:6A:6B:44:7E:E0:3C:9F:DF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F813D040757F178B7593C12DBAF528F7B
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-6jR8JtL_3yNRLI6amtEfuA8n98.roa
Signing time: Mon 20 Jul 2026 20:34:47 +0000
ROA not before: Mon 20 Jul 2026 20:34:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206174
IP address blocks: 2a0d:ad42::/32 maxlen: 32
2a0d:b840::/32 maxlen: 32
2a11:ec5::/32 maxlen: 32
2a11:9041::/32 maxlen: 32
2a12:e81::/32 maxlen: 32
2a12:6483::/32 maxlen: 32
2a12:bc81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:3d:04:07:57:f1:78:b7:59:3c:12:db:af:52:8f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 20 20:34:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fba8d1f09b4bff7c8d44b23a6a6b447ee03c9fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:0c:fa:35:b8:c1:2a:ac:15:e2:fc:ef:79:
0b:7c:64:3a:35:0b:b6:7c:30:2f:72:f8:a9:1c:96:
32:eb:42:04:e3:25:e7:9f:ac:5d:8b:8c:12:24:e7:
e7:8f:b0:45:9b:ef:a0:bb:53:a2:9c:16:f1:ae:5b:
f2:36:62:66:91:0d:a8:64:a8:53:8d:6d:35:34:b8:
7c:21:9d:a5:e5:08:da:b5:38:e7:f7:9e:f1:14:bc:
2e:ba:63:12:f4:1e:96:53:3f:73:c2:dd:11:68:7d:
64:67:d2:56:5c:00:85:3a:de:0a:b6:3b:18:f4:ee:
2b:4c:b9:84:b6:35:bf:d1:c5:29:63:1d:fb:00:8d:
7c:1f:ef:49:c1:81:53:9c:22:6f:b5:23:4e:7b:62:
72:e5:bd:e4:5f:e7:8d:87:a8:f9:4b:22:05:1b:1c:
a9:4d:81:dd:e4:d4:b5:ba:15:15:11:44:06:7a:bf:
88:1e:d1:5a:89:27:02:cf:a5:ab:d0:95:19:36:de:
ed:a3:d2:52:d3:44:fa:1d:30:66:db:d0:82:2f:99:
96:cb:f2:4b:1b:bf:08:00:36:98:35:01:5b:c9:a2:
ce:75:53:6b:2f:c1:52:02:8d:85:10:05:8e:29:78:
3e:89:e8:6c:be:14:a9:2e:49:e6:56:3b:85:5d:84:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:D1:F0:9B:4B:FF:7C:8D:44:B2:3A:6A:6B:44:7E:E0:3C:9F:DF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-6jR8JtL_3yNRLI6amtEfuA8n98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad42::/32
2a0d:b840::/32
2a11:ec5::/32
2a11:9041::/32
2a12:e81::/32
2a12:6483::/32
2a12:bc81::/32
Signature Algorithm: sha256WithRSAEncryption
0e:cf:a1:61:85:3f:da:28:1d:8c:cb:6b:c4:02:d6:74:ad:07:
c1:a2:73:aa:ab:55:13:f2:00:49:24:9f:37:c2:b6:45:fc:37:
be:6d:be:8a:d4:13:4f:75:75:db:18:b6:e5:bc:fc:9d:27:ec:
6c:14:a3:b3:8c:05:7f:dd:07:32:03:e1:92:8e:45:c8:ed:bb:
29:fc:bf:14:09:d0:dd:4d:60:85:2c:ea:04:2c:f7:e9:66:45:
49:5e:d5:d4:a1:eb:3d:a0:89:8c:fb:a5:22:81:03:21:c0:9d:
28:96:b7:ba:d7:e7:85:e0:44:10:01:98:dd:60:a0:50:db:bb:
d1:6b:63:3a:1b:c1:7d:7f:56:65:d4:b1:a2:a6:d7:cc:c9:fd:
07:68:95:80:a6:84:c7:b8:74:4c:c6:75:7d:1e:a6:37:99:c5:
40:4f:22:c1:25:7f:88:8c:c0:24:bc:a0:9f:6c:d2:bf:06:eb:
e4:0e:cc:01:7d:02:0b:9f:63:6b:4e:3f:67:89:1c:8c:50:09:
51:d8:44:a8:6a:d0:e8:3f:90:48:46:2f:b5:71:fc:3b:47:09:
07:cc:42:63:6f:9b:f0:b5:68:aa:f9:1b:03:a8:69:8e:7a:02:
49:27:55:8a:3d:ac:de:9d:cd:38:e6:5e:1f:dc:23:f1:2e:f0:
61:15:53:48
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZ+BPQQHV/F4t1k8EtuvUo97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNzIwMjAzNDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmE4ZDFmMDliNGJmZjdjOGQ0NGIyM2E2YTZiNDQ3ZWUwM2M5ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufEM+jW4wSqsFeL873kLfGQ6NQu2
fDAvcvipHJYy60IE4yXnn6xdi4wSJOfnj7BFm++gu1OinBbxrlvyNmJmkQ2oZKhT
jW01NLh8IZ2l5QjatTjn957xFLwuumMS9B6WUz9zwt0RaH1kZ9JWXACFOt4KtjsY
9O4rTLmEtjW/0cUpYx37AI18H+9JwYFTnCJvtSNOe2Jy5b3kX+eNh6j5SyIFGxyp
TYHd5NS1uhUVEUQGer+IHtFaiScCz6Wr0JUZNt7to9JS00T6HTBm29CCL5mWy/JL
G78IADaYNQFbyaLOdVNrL8FSAo2FEAWOKXg+iehsvhSpLknmVjuFXYTNYwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFPuo0fCbS/98jUSyOmprRH7gPJ/fMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvMS02alI4SnRMXzN5TlJMSTZhbXRFZnVBOG45OC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWIvN2I5MzM2LWU5ZjgtNGUyNy1hZjRiLTIzOWQyZmUzOThi
MS8xL0NUTlR3ZnEtaVdyNHVGX25ZQTVHTkphUHpFdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBKBggrBgEFBQcBBwEB/wQ7MDkwNwQCAAIwMQMFACoNrUID
BQAqDbhAAwUAKhEOxQMFACoRkEEDBQAqEg6BAwUAKhJkgwMFACoSvIEwDQYJKoZI
hvcNAQELBQADggEBAA7PoWGFP9ooHYzLa8QC1nStB8Gic6qrVRPyAEkknzfCtkX8
N75tvorUE091ddsYtuW8/J0n7GwUo7OMBX/dBzID4ZKORcjtuyn8vxQJ0N1NYIUs
6gQs9+lmRUle1dSh6z2giYz7pSKBAyHAnSiWt7rX54XgRBABmN1goFDbu9FrYzob
wX1/VmXUsaKm18zJ/QdolYCmhMe4dEzGdX0epjeZxUBPIsElf4iMwCS8oJ9s0r8G
6+QOzAF9AgufY2tOP2eJHIxQCVHYRKhq0Og/kEhGL7Vx/DtHCQfMQmNvm/C1aKr5
GwOoaY56AkknVYo9rN6dzTjmXh/cI/Eu8GEVU0g=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:20 2026 by rpki-client