Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/izn0gTPOQgQruf6Plz077lbyDvQ.roa
File: izn0gTPOQgQruf6Plz077lbyDvQ.roa (raw, json)
Hash identifier: SL5lQV0cHnhG5e9HsORKQLS+k85jrcJmLKm8DFk0UWk=
Subject key identifier: 8B:39:F4:81:33:CE:42:04:2B:B9:FE:8F:97:3D:3B:EE:56:F2:0E:F4
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019F47F5DF6DE515BE5CBE405A8E966F19D9
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/izn0gTPOQgQruf6Plz077lbyDvQ.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a11:d780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:df:6d:e5:15:be:5c:be:40:5a:8e:96:6f:19:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b39f48133ce42042bb9fe8f973d3bee56f20ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:c8:df:ce:6c:c7:cb:71:b9:eb:28:05:3e:
cf:09:8b:cb:c3:db:bc:f6:9f:63:ea:33:72:6d:06:
65:8f:22:34:75:77:aa:fb:89:a7:cc:2f:38:6f:57:
e6:5b:f9:e8:81:91:83:59:f2:6c:da:02:9f:29:4b:
c0:54:4a:7c:be:ab:51:81:91:27:4d:df:3d:ae:fd:
be:e5:70:3e:2b:5e:0b:b0:89:b0:d7:76:e6:54:6d:
07:78:32:34:19:ec:21:9f:dc:fa:63:ee:53:88:78:
6a:b9:63:38:04:38:dd:9d:44:fe:fe:2f:75:bb:0f:
87:e7:a8:67:dd:35:c6:7a:41:88:b1:7d:70:61:e9:
46:1a:9d:84:2d:53:98:ca:ca:44:be:7f:23:6c:6c:
8f:25:63:df:54:7e:26:99:d2:58:9d:d9:55:e5:c7:
cb:89:f1:34:d2:b7:9d:45:36:91:3c:0b:f9:51:df:
71:a7:45:24:0b:72:9b:5b:f5:eb:e6:8f:c4:11:28:
ae:39:69:0d:1e:f1:b0:2d:5f:3a:48:bc:2f:71:34:
78:d2:72:b0:25:84:d4:7c:1a:c8:b8:44:bb:2c:11:
2e:cc:6a:41:f9:7d:d1:88:d9:51:96:50:36:61:ca:
20:9a:e9:bf:4a:c5:9c:0f:57:1f:cb:1c:ef:56:e3:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:39:F4:81:33:CE:42:04:2B:B9:FE:8F:97:3D:3B:EE:56:F2:0E:F4
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/izn0gTPOQgQruf6Plz077lbyDvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d780::/29
Signature Algorithm: sha256WithRSAEncryption
4e:87:f8:6a:03:c4:1c:49:e1:7d:ce:9e:7d:f0:a4:37:d2:f3:
db:a1:37:6a:a3:aa:e7:2f:13:03:04:74:51:5c:b9:5e:f6:d3:
7b:92:14:9a:02:a2:23:85:ad:fd:ef:3f:64:30:a2:15:a6:03:
78:91:cc:cc:73:3e:ac:f5:db:9b:d1:ce:57:50:25:5b:5e:f6:
44:e9:4e:0c:ef:2b:b0:6c:6b:cf:04:d4:e7:7a:3c:fd:4c:c8:
3a:1e:0d:bb:89:05:41:d4:62:c5:22:ff:f4:22:31:f6:16:99:
5e:92:7d:a2:00:31:2f:50:35:57:99:d8:27:24:6d:83:b3:a7:
9e:73:18:57:cb:ed:f7:40:2e:07:32:3c:25:8a:9c:a7:82:7a:
24:02:77:9a:66:0a:5e:bc:6c:d2:9f:38:03:cb:22:0d:85:24:
e2:4a:c7:f3:d0:ed:02:d4:5b:01:8d:e9:ff:fa:0a:e8:c4:7c:
e5:d6:e2:90:36:0f:43:cd:1b:8d:ef:a4:54:bd:66:6b:72:d9:
0d:b8:6f:b7:8b:7d:c6:e0:dc:b8:4f:2a:0b:5e:29:ae:fd:1e:
5d:4a:04:38:44:bb:1b:9e:05:cf:2a:98:59:49:af:90:39:87:
92:20:ab:f5:2f:73:01:02:0a:fa:4d:49:5e:a5:e9:08:ab:77:
9e:97:64:4a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9H9d9t5RW+XL5AWo6WbxnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwNzA5MTczODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjM5ZjQ4MTMzY2U0MjA0MmJiOWZlOGY5NzNkM2JlZTU2ZjIwZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjDI385sx8txuesoBT7PCYvLw9u8
9p9j6jNybQZljyI0dXeq+4mnzC84b1fmW/nogZGDWfJs2gKfKUvAVEp8vqtRgZEn
Td89rv2+5XA+K14LsImw13bmVG0HeDI0Gewhn9z6Y+5TiHhquWM4BDjdnUT+/i91
uw+H56hn3TXGekGIsX1wYelGGp2ELVOYyspEvn8jbGyPJWPfVH4mmdJYndlV5cfL
ifE00redRTaRPAv5Ud9xp0UkC3KbW/Xr5o/EESiuOWkNHvGwLV86SLwvcTR40nKw
JYTUfBrIuES7LBEuzGpB+X3RiNlRllA2Ycogmum/SsWcD1cfyxzvVuPfrwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIs59IEzzkIEK7n+j5c9O+5W8g70MB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvaXpuMGdUUE9RZ1FydWY2UGx6MDc3bGJ5RHZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhHXgDAN
BgkqhkiG9w0BAQsFAAOCAQEATof4agPEHEnhfc6effCkN9Lz26E3aqOq5y8TAwR0
UVy5XvbTe5IUmgKiI4Wt/e8/ZDCiFaYDeJHMzHM+rPXbm9HOV1AlW172ROlODO8r
sGxrzwTU53o8/UzIOh4Nu4kFQdRixSL/9CIx9haZXpJ9ogAxL1A1V5nYJyRtg7On
nnMYV8vt90AuBzI8JYqcp4J6JAJ3mmYKXrxs0p84A8siDYUk4krH89DtAtRbAY3p
//oK6MR85dbikDYPQ80bje+kVL1ma3LZDbhvt4t9xuDcuE8qC14prv0eXUoEOES7
G54FzyqYWUmvkDmHkiCr9S9zAQIK+k1JXqXpCKt3npdkSg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:41 2026 by rpki-client