Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/6ooBKqODZG-Sfj_comNyd2sFbho.roa
File: 6ooBKqODZG-Sfj_comNyd2sFbho.roa (raw, json)
Hash identifier: 5M67xR2rRGTfh2U+1vfNIVWM6nUiRi28sSM5j9PI9Ko=
Subject key identifier: EA:8A:01:2A:A3:83:64:6F:92:7E:3F:DC:A2:63:72:77:6B:05:6E:1A
Certificate issuer: /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial: 01A0451F3B7103C79FCBA0F2A0533AE6F18B
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/6ooBKqODZG-Sfj_comNyd2sFbho.roa
Signing time: Thu 27 Aug 2026 21:27:49 +0000
ROA not before: Thu 27 Aug 2026 21:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2011908
IP address blocks: 2a0c:3440:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:1f:3b:71:03:c7:9f:cb:a0:f2:a0:53:3a:e6:f1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Validity
Not Before: Aug 27 21:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea8a012aa383646f927e3fdca26372776b056e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:3c:e8:16:cf:03:6c:85:c0:92:2f:3d:cc:
e8:f4:68:e9:28:68:15:d0:ab:df:f4:1a:d5:7e:94:
cf:0e:45:2b:6b:57:d9:a4:96:46:45:89:d1:1a:b4:
c0:4d:4f:b8:fd:5e:cd:e2:11:46:d5:8c:4c:a2:ba:
f3:d1:ee:cc:61:e8:2d:83:d4:98:07:f2:97:5b:84:
e0:f3:87:b8:90:4e:d8:cc:9d:d2:f9:fa:ee:1e:ef:
ee:b7:91:b7:44:8d:47:b4:04:ae:97:14:ff:87:d3:
82:a6:4d:f4:eb:83:7c:ab:4c:6a:c0:e2:5d:76:6b:
5f:f1:89:dd:fa:0c:8d:f5:85:f5:fe:a3:51:fd:df:
d8:6e:ab:cc:a3:fe:9d:7a:8d:73:2d:6c:94:f7:6f:
8a:3c:fd:3e:b0:11:c6:a6:06:32:a6:6e:ce:c4:5b:
03:9b:b3:04:e7:bc:e8:24:6a:1d:d0:f5:b0:b5:c5:
f4:e9:ab:89:78:a0:d6:b7:81:b0:ef:ef:01:ba:08:
f3:88:a1:23:37:cd:83:c6:73:d1:6c:92:45:21:a4:
3f:4b:fa:85:1e:0c:d3:a9:7e:94:18:93:2a:a9:09:
4e:fb:17:7d:f3:14:cf:6b:92:93:e8:5a:c4:07:c3:
8f:d6:77:84:69:ee:22:75:47:96:ac:d9:57:2d:25:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:01:2A:A3:83:64:6F:92:7E:3F:DC:A2:63:72:77:6B:05:6E:1A
X509v3 Authority Key Identifier:
keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/6ooBKqODZG-Sfj_comNyd2sFbho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3440:2::/48
Signature Algorithm: sha256WithRSAEncryption
2f:dc:9d:80:20:9d:60:2d:1c:14:0c:8d:bd:0b:ea:c3:cc:2f:
41:2a:35:91:bb:32:f2:d7:21:34:8d:41:37:fd:d0:de:d8:fa:
12:ab:0a:b6:15:21:2d:86:56:cc:f0:7b:7d:23:c2:47:8a:a4:
10:fb:e9:7f:0e:38:48:bd:64:3b:c7:7a:5e:c5:15:c6:8b:aa:
8c:05:47:4e:91:87:52:33:0f:72:ce:f1:10:11:53:d5:75:b0:
d9:90:24:6e:e4:ac:24:7f:c6:69:49:71:01:2d:7d:e7:7e:6a:
7e:d7:ef:41:e4:97:55:e0:bc:6a:cd:71:03:13:39:72:c7:7a:
a0:ad:5f:27:79:6e:0d:60:66:92:5e:39:25:22:41:43:ed:30:
53:16:db:88:c9:27:2e:b7:6e:66:e8:e7:30:f9:1f:b2:9c:a4:
e2:9b:e9:9c:37:3b:09:2d:be:e7:57:59:88:33:38:8e:91:59:
8c:e3:7e:f4:93:3f:c5:16:a4:05:63:e6:43:04:99:14:b5:1e:
18:fc:c2:db:7a:51:88:cc:07:8a:94:f6:e6:5f:0c:1b:ea:d3:
ab:8e:f6:cf:7c:4d:44:4a:d3:6d:c9:74:a8:13:77:ec:b0:71:
dd:c4:2c:a0:26:94:ff:02:b6:ad:c8:91:41:af:3b:a7:bc:1a:
24:8b:43:7d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBFHztxA8efy6DyoFM65vGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGQ2OTFhYjE5Y2RjZjI4YTk4OTZjYmY1YTdhMGFmNGI5
NjFlOTgwHhcNMjYwODI3MjEyNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYThhMDEyYWEzODM2NDZmOTI3ZTNmZGNhMjYzNzI3NzZiMDU2ZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP486BbPA2yFwJIvPczo9GjpKGgV
0Kvf9BrVfpTPDkUra1fZpJZGRYnRGrTATU+4/V7N4hFG1YxMorrz0e7MYegtg9SY
B/KXW4Tg84e4kE7YzJ3S+fruHu/ut5G3RI1HtASulxT/h9OCpk3064N8q0xqwOJd
dmtf8Ynd+gyN9YX1/qNR/d/YbqvMo/6deo1zLWyU92+KPP0+sBHGpgYypm7OxFsD
m7ME57zoJGod0PWwtcX06auJeKDWt4Gw7+8BugjziKEjN82DxnPRbJJFIaQ/S/qF
HgzTqX6UGJMqqQlO+xd98xTPa5KT6FrEB8OP1neEae4idUeWrNlXLSXYYQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOqKASqjg2Rvkn4/3KJjcndrBW4aMB8GA1UdIwQY
MBaAFKINaRqxnNzyipiWy/WnoK9Llh6YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2cxcEdyR2MzUEtLbUpiTDlhZWdyMHVXSHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUt
MTJlODI3NmZkYWM0LzEvNm9vQktxT0RaRy1TZmpfY29tTnlkMnNGYmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUtMTJlODI3NmZkYWM0
LzEvb2cxcEdyR2MzUEtLbUpiTDlhZWdyMHVXSHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgw0QAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAv3J2AIJ1gLRwUDI29C+rDzC9BKjWRuzLy1yE0
jUE3/dDe2PoSqwq2FSEthlbM8Ht9I8JHiqQQ++l/DjhIvWQ7x3pexRXGi6qMBUdO
kYdSMw9yzvEQEVPVdbDZkCRu5Kwkf8ZpSXEBLX3nfmp+1+9B5JdV4LxqzXEDEzly
x3qgrV8neW4NYGaSXjklIkFD7TBTFtuIyScut25m6Ocw+R+ynKTim+mcNzsJLb7n
V1mIMziOkVmM4370kz/FFqQFY+ZDBJkUtR4Y/MLbelGIzAeKlPbmXwwb6tOrjvbP
fE1EStNtyXSoE3fssHHdxCygJpT/AratyJFBrzunvBoki0N9
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:24:54 2026 by rpki-client