Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/1GxQmUTb97UmZv7pfW11O7jdoKQ.roa
File: 1GxQmUTb97UmZv7pfW11O7jdoKQ.roa (raw, json)
Hash identifier: FmC4+AN9e0K9c8X4YT0jW6rSPs+y4UOdKxP9qZCnFuc=
Subject key identifier: D4:6C:50:99:44:DB:F7:B5:26:66:FE:E9:7D:6D:75:3B:B8:DD:A0:A4
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019F47F5E34F7CD8A8D999AD745A933739B6
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/1GxQmUTb97UmZv7pfW11O7jdoKQ.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a11:4600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e3:4f:7c:d8:a8:d9:99:ad:74:5a:93:37:39:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d46c509944dbf7b52666fee97d6d753bb8dda0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:c8:19:1c:00:0f:2b:43:bd:bd:df:17:70:
b9:c0:9d:83:3a:fe:2a:2a:b2:5f:01:d7:5c:f5:02:
ef:c6:e2:cc:a6:db:0f:20:07:06:47:c9:75:7c:2d:
09:1e:02:1e:55:bc:f7:ea:b2:bf:18:cc:79:f6:fc:
94:ff:80:f9:65:9b:fe:2c:b5:96:4a:9f:9d:27:21:
d2:28:59:10:10:b1:f7:7e:15:1e:3c:f8:c0:a3:a7:
5d:3f:c8:5d:28:1c:42:32:e6:83:e6:20:ab:f0:60:
7d:4c:1c:5f:54:e2:15:3e:61:17:b4:e3:50:18:45:
ee:8a:f0:d8:9e:ec:ce:0a:23:14:33:8e:6a:3a:04:
72:48:dd:09:98:4e:ff:c5:cb:62:e2:ce:fd:35:60:
85:9a:80:ec:75:e0:0e:74:47:6a:78:28:a2:5e:a6:
cd:f7:12:5d:4c:c1:ce:49:89:68:45:d8:0a:f2:f1:
44:1a:11:d8:51:4e:5f:5b:04:d5:0c:22:c5:86:ac:
d7:f6:f9:19:f9:23:d7:3c:40:f9:62:bb:b9:e6:88:
8f:85:61:01:47:79:55:b0:d9:52:03:b3:00:f3:c7:
f4:5b:49:a4:72:e5:cf:a3:27:13:74:fc:e1:23:16:
9c:e7:0d:39:a8:1e:21:93:0e:19:00:81:c1:8e:68:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6C:50:99:44:DB:F7:B5:26:66:FE:E9:7D:6D:75:3B:B8:DD:A0:A4
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/1GxQmUTb97UmZv7pfW11O7jdoKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4600::/29
Signature Algorithm: sha256WithRSAEncryption
86:0b:87:fb:db:25:fa:3e:2b:7d:d1:3b:ee:82:c4:15:69:72:
e4:52:c3:ac:64:e2:69:b1:28:d6:60:ec:dc:8e:ef:b2:4e:a8:
29:26:1c:89:8a:c3:17:27:7d:e5:bc:60:23:68:ff:c2:cf:d4:
13:9a:90:c7:88:1f:4d:2e:d7:5c:f1:04:60:c0:d6:b7:2c:03:
61:e8:4b:19:bc:0a:51:92:42:bd:e7:52:fd:01:c2:83:cc:3d:
50:cd:ae:46:06:8f:c0:47:02:96:cd:23:17:74:41:56:06:51:
de:69:f7:3c:57:9a:ed:53:53:a4:cd:b6:c6:c0:5f:41:97:d9:
ee:d5:13:7c:05:83:79:38:4e:25:94:cf:58:80:0d:f0:09:33:
f8:ab:a7:7f:04:47:65:4b:cc:85:62:fd:ef:cf:e1:d7:63:46:
4f:f3:44:0a:e6:72:8a:3a:46:7a:50:e6:fd:8e:ab:4d:6b:92:
85:d2:b9:e2:45:60:e2:49:0c:3a:b8:ab:ba:55:20:54:bc:52:
48:54:e7:99:ff:82:f6:5b:a7:89:4a:4b:76:ae:09:37:46:5a:
6c:01:b1:9e:31:24:a6:1b:24:86:b0:66:f4:9c:df:c1:c5:66:
b0:5f:6e:5c:d1:bb:13:76:24:5b:22:88:b9:89:29:05:b7:27:
d4:e4:bf:cd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9H9eNPfNio2ZmtdFqTNzm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwNzA5MTczODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDZjNTA5OTQ0ZGJmN2I1MjY2NmZlZTk3ZDZkNzUzYmI4ZGRhMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD7IGRwADytDvb3fF3C5wJ2DOv4q
KrJfAddc9QLvxuLMptsPIAcGR8l1fC0JHgIeVbz36rK/GMx59vyU/4D5ZZv+LLWW
Sp+dJyHSKFkQELH3fhUePPjAo6ddP8hdKBxCMuaD5iCr8GB9TBxfVOIVPmEXtONQ
GEXuivDYnuzOCiMUM45qOgRySN0JmE7/xcti4s79NWCFmoDsdeAOdEdqeCiiXqbN
9xJdTMHOSYloRdgK8vFEGhHYUU5fWwTVDCLFhqzX9vkZ+SPXPED5Yru55oiPhWEB
R3lVsNlSA7MA88f0W0mkcuXPoycTdPzhIxac5w05qB4hkw4ZAIHBjmijdQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNRsUJlE2/e1Jmb+6X1tdTu43aCkMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvMUd4UW1VVGI5N1VtWnY3cGZXMTFPN2pkb0tRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFGADAN
BgkqhkiG9w0BAQsFAAOCAQEAhguH+9sl+j4rfdE77oLEFWly5FLDrGTiabEo1mDs
3I7vsk6oKSYciYrDFyd95bxgI2j/ws/UE5qQx4gfTS7XXPEEYMDWtywDYehLGbwK
UZJCvedS/QHCg8w9UM2uRgaPwEcCls0jF3RBVgZR3mn3PFea7VNTpM22xsBfQZfZ
7tUTfAWDeThOJZTPWIAN8Akz+KunfwRHZUvMhWL978/h12NGT/NECuZyijpGelDm
/Y6rTWuShdK54kVg4kkMOrirulUgVLxSSFTnmf+C9luniUpLdq4JN0ZabAGxnjEk
phskhrBm9JzfwcVmsF9uXNG7E3YkWyKIuYkpBbcn1OS/zQ==
-----END CERTIFICATE-----
Generated at Sun Jul 12 20:47:51 2026 by rpki-client