Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa
File: 0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa (raw, json)
Hash identifier: PLw1g8tEdu8DohzHWXzHrIGYzVNggXd55nUqO0fw1fA=
Subject key identifier: D0:95:F3:3E:C7:D0:8B:09:E1:90:03:EE:C1:47:28:67:84:E4:B2:A5
Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial: 019F226C820EC4E64D97D746D379625F6CC6
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa
Signing time: Thu 02 Jul 2026 10:42:44 +0000
ROA not before: Thu 02 Jul 2026 10:42:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6233
IP address blocks: 2a11::/32 maxlen: 48
2a11:3::/32 maxlen: 48
2a11:4::/30 maxlen: 48
2a11:8080::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:6c:82:0e:c4:e6:4d:97:d7:46:d3:79:62:5f:6c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
Validity
Not Before: Jul 2 10:42:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d095f33ec7d08b09e19003eec147286784e4b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:65:85:da:4a:32:93:19:c8:22:4d:c1:aa:
88:31:8a:7a:07:d3:39:0d:4d:9d:93:2c:2f:7c:a8:
36:2e:b4:4a:70:33:4c:9a:ad:e3:2f:04:76:8d:66:
0b:5c:85:76:8f:3d:65:4e:11:61:6c:cd:02:c1:0d:
32:70:71:bc:b7:a8:2b:ba:8e:65:61:85:a1:70:9c:
eb:e2:7c:4d:88:97:cd:45:7f:f6:25:6e:2a:43:5d:
da:f6:50:5a:c6:6a:6b:59:75:c8:1c:68:e8:09:4d:
37:3a:f3:6a:6a:cb:71:19:f4:a3:ac:22:b4:89:1b:
53:96:06:c2:09:9d:33:fd:46:bc:db:d5:8b:e2:ba:
c6:71:15:79:47:ab:13:69:f8:0d:8f:a8:66:76:ce:
c4:23:9a:f5:92:b1:81:95:77:5d:c4:ab:a8:59:9e:
f2:dc:5a:98:7e:af:db:ef:d6:36:b6:66:6c:23:39:
66:1d:19:16:48:3d:dc:d8:25:f4:3c:42:b6:38:98:
63:fc:e1:1e:fd:d3:b0:02:91:6f:1d:42:40:cf:a2:
7b:bb:b0:93:65:51:4f:ed:5a:f3:e5:36:7c:fc:34:
fb:3a:e5:1d:15:32:2e:07:64:9e:db:df:30:79:ca:
5e:1e:93:11:a1:c3:d4:92:9f:c0:8e:ac:38:1e:c5:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:95:F3:3E:C7:D0:8B:09:E1:90:03:EE:C1:47:28:67:84:E4:B2:A5
X509v3 Authority Key Identifier:
keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11::/32
2a11:3::-2a11:7:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8080::/29
Signature Algorithm: sha256WithRSAEncryption
8d:5a:a2:fb:ba:ec:a3:88:16:00:fa:17:83:ea:cd:97:7a:93:
e9:ff:c4:9a:4b:65:12:ee:59:f9:ed:25:fc:73:a7:af:6a:3d:
a3:9a:03:2d:ad:b4:8e:73:16:e1:da:c1:19:71:30:e2:70:12:
1e:1b:21:30:c0:e2:da:54:ad:0e:15:9d:94:7d:5c:fc:a7:81:
94:87:4c:c1:f5:8a:8a:d7:18:12:7c:52:c7:14:bf:66:05:74:
2f:89:76:39:ba:3c:9d:ee:57:c3:53:30:fe:8e:ce:a4:59:9c:
96:2a:1c:9e:cf:20:15:1c:a4:80:96:14:e0:ca:b3:07:a3:b2:
a0:05:e5:30:be:57:1c:3b:78:2c:84:97:94:c7:47:75:92:19:
25:b2:cd:41:ed:a5:ef:b0:55:f6:7a:da:c0:32:63:f0:4a:f1:
d1:aa:60:e9:05:95:ae:8c:66:ad:e6:33:54:fc:93:ea:d5:23:
f9:0b:f3:6f:2d:b7:e6:c7:5a:04:3a:69:e5:78:3e:c6:95:ff:
e4:ec:67:81:46:35:37:d0:48:8e:af:4f:01:16:bb:c1:74:ff:
a9:28:d5:f3:6d:38:55:ef:f1:09:7b:a2:9b:19:3b:91:f4:e0:
0e:c4:86:f5:2e:e6:e5:a8:cd:f7:e5:9e:5c:47:be:b3:ab:fa:
5e:d6:83:85
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ8ibIIOxOZNl9dG03liX2zGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx
ZTBiMmIwHhcNMjYwNzAyMTA0MjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDk1ZjMzZWM3ZDA4YjA5ZTE5MDAzZWVjMTQ3Mjg2Nzg0ZTRiMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YFlhdpKMpMZyCJNwaqIMYp6B9M5
DU2dkywvfKg2LrRKcDNMmq3jLwR2jWYLXIV2jz1lThFhbM0CwQ0ycHG8t6gruo5l
YYWhcJzr4nxNiJfNRX/2JW4qQ13a9lBaxmprWXXIHGjoCU03OvNqastxGfSjrCK0
iRtTlgbCCZ0z/Ua829WL4rrGcRV5R6sTafgNj6hmds7EI5r1krGBlXddxKuoWZ7y
3FqYfq/b79Y2tmZsIzlmHRkWSD3c2CX0PEK2OJhj/OEe/dOwApFvHUJAz6J7u7CT
ZVFP7Vrz5TZ8/DT7OuUdFTIuB2Se298wecpeHpMRocPUkp/Ajqw4HsWBtwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNCV8z7H0IsJ4ZAD7sFHKGeE5LKlMB8GA1UdIwQY
MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt
ZWUxZWE2MzZlZDRmLzEvMEpYelBzZlFpd25oa0FQdXdVY29aNFRrc3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm
LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAAjAeAwUAKhEAADAO
AwUAKhEAAwMFAyoRAAADBQMqEYCAMA0GCSqGSIb3DQEBCwUAA4IBAQCNWqL7uuyj
iBYA+heD6s2XepPp/8SaS2US7ln57SX8c6evaj2jmgMtrbSOcxbh2sEZcTDicBIe
GyEwwOLaVK0OFZ2UfVz8p4GUh0zB9YqK1xgSfFLHFL9mBXQviXY5ujyd7lfDUzD+
js6kWZyWKhyezyAVHKSAlhTgyrMHo7KgBeUwvlccO3gshJeUx0d1khklss1B7aXv
sFX2etrAMmPwSvHRqmDpBZWujGat5jNU/JPq1SP5C/NvLbfmx1oEOmnleD7Glf/k
7GeBRjU30EiOr08BFrvBdP+pKNXzbThV7/EJe6KbGTuR9OAOxIb1LublqM335Z5c
R76zq/pe1oOF
-----END CERTIFICATE-----
Generated at Sun Jul 12 06:23:30 2026 by rpki-client