Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/RUihvj4Zrgg-YhSk3VlsQBdz1Q8.roa
File: RUihvj4Zrgg-YhSk3VlsQBdz1Q8.roa (raw, json)
Hash identifier: KXOmbu8CN/OdjJybf1wkfewAeOV5Ci03QFOvQnW7bJQ=
Subject key identifier: 45:48:A1:BE:3E:19:AE:08:3E:62:14:A4:DD:59:6C:40:17:73:D5:0F
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A17EE95E633820391F473D0F810CFFFF8E
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/RUihvj4Zrgg-YhSk3VlsQBdz1Q8.roa
Signing time: Tue 27 Oct 2026 19:49:45 +0000
ROA not before: Tue 27 Oct 2026 19:49:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199742
IP address blocks: 2a09:3f00:3500::/40 maxlen: 48
2a09:3f00:3504::/48 maxlen: 48
2a09:3f00:358b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:e9:5e:63:38:20:39:1f:47:3d:0f:81:0c:ff:ff:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Oct 27 19:49:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4548a1be3e19ae083e6214a4dd596c401773d50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:55:9b:b7:07:92:4a:8f:be:80:bf:44:42:
d2:8e:76:29:10:bc:53:b1:e4:13:e6:8c:8a:85:ab:
35:cd:d1:2d:89:92:2f:7b:13:3b:64:b7:c8:69:51:
64:4a:99:38:0b:43:dd:46:11:c3:f8:93:3e:8f:37:
79:01:42:7b:91:2b:bb:80:6c:eb:81:9b:c4:91:90:
8a:69:c2:a3:11:a3:b6:e8:cb:cd:76:f9:fd:f8:77:
4e:91:51:2a:79:37:4e:6d:68:a7:c8:b7:dd:47:c5:
09:69:38:2c:3d:6f:8c:90:d1:1c:28:19:68:3d:cb:
96:5c:a4:21:c0:c7:1f:e5:25:e4:6f:37:87:4d:11:
7c:be:dc:84:b8:8d:86:49:15:74:cd:d0:92:e1:31:
16:b2:89:8d:6f:ff:98:74:d5:69:ee:fe:59:8f:46:
2e:2d:85:56:13:0f:cd:ba:f7:36:52:df:8e:c8:65:
e5:a8:dd:be:c4:18:d2:db:a5:63:37:23:f8:0d:71:
11:54:c3:35:d5:78:ca:5b:f2:dd:74:44:87:73:ba:
28:ab:b6:92:bb:05:ab:0e:86:49:e5:25:e7:54:4f:
f4:38:3c:c0:46:ed:63:4e:45:b3:b7:3d:1a:aa:71:
00:82:70:86:87:8d:19:c2:df:97:9a:90:21:94:cc:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:A1:BE:3E:19:AE:08:3E:62:14:A4:DD:59:6C:40:17:73:D5:0F
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/RUihvj4Zrgg-YhSk3VlsQBdz1Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3500::/40
Signature Algorithm: sha256WithRSAEncryption
3f:10:81:49:b8:2f:fe:c4:9b:62:d3:da:8e:48:31:5f:df:46:
a9:ca:8a:74:e8:79:a4:74:43:0d:96:32:fe:23:f3:2c:21:e2:
16:a8:d3:52:2c:4c:a4:8a:16:db:fa:90:ce:98:4c:36:d5:21:
1d:2d:9f:2f:96:ce:ce:cc:23:72:29:28:02:f6:56:45:2d:d0:
c6:85:d1:25:30:16:f1:a3:ca:1a:83:d1:d7:23:e0:84:e8:8e:
bc:20:db:c5:55:1e:46:14:ad:fc:a5:c3:e7:7e:f5:db:f2:b5:
56:78:13:3b:78:a7:de:8e:04:3d:83:aa:bb:d6:bb:67:54:5a:
f9:52:e8:c4:65:a7:c2:e0:74:9c:7f:29:3b:7a:2a:de:f2:56:
8d:d8:4f:17:d8:8e:32:36:b1:cb:26:af:be:04:2a:1a:8a:92:
2a:78:33:10:ee:c6:03:12:47:a6:39:26:19:15:c9:e5:5c:6f:
5a:c0:4e:59:8e:2a:87:fb:22:0d:a0:1a:ed:da:af:13:65:11:
a0:f0:4a:bd:bb:47:51:c2:9e:95:42:0f:f4:66:b4:5e:99:f4:
a1:13:c6:0b:a1:53:b9:b0:cf:15:4c:20:f1:fd:96:67:73:1b:
d8:68:88:66:f3:b1:f3:23:6d:cc:b9:1f:da:3f:a6:98:7a:5a:
cd:d0:7b:89
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaF+6V5jOCA5H0c9D4EM//+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzE2MDE4MTczOTU2OGU1NzhlMWI1ZjU3OTc2YTYwMzk4
MDYyZTYwHhcNMjYxMDI3MTk0OTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTQ4YTFiZTNlMTlhZTA4M2U2MjE0YTRkZDU5NmM0MDE3NzNkNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFhVm7cHkkqPvoC/RELSjnYpELxT
seQT5oyKhas1zdEtiZIvexM7ZLfIaVFkSpk4C0PdRhHD+JM+jzd5AUJ7kSu7gGzr
gZvEkZCKacKjEaO26MvNdvn9+HdOkVEqeTdObWinyLfdR8UJaTgsPW+MkNEcKBlo
PcuWXKQhwMcf5SXkbzeHTRF8vtyEuI2GSRV0zdCS4TEWsomNb/+YdNVp7v5Zj0Yu
LYVWEw/Nuvc2Ut+OyGXlqN2+xBjS26VjNyP4DXERVMM11XjKW/LddESHc7ooq7aS
uwWrDoZJ5SXnVE/0ODzARu1jTkWztz0aqnEAgnCGh40Zwt+XmpAhlMyf2QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEVIob4+Ga4IPmIUpN1ZbEAXc9UPMB8GA1UdIwQY
MBaAFDZxYBgXOVaOV44bX1eXamA5gGLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYt
ZWU4Y2ZkZDJlZDk0LzEvUlVpaHZqNFpyZ2ctWWhTazNWbHNRQmR6MVE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYtZWU4Y2ZkZDJlZDk0
LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgk/ADUw
DQYJKoZIhvcNAQELBQADggEBAD8QgUm4L/7Em2LT2o5IMV/fRqnKinToeaR0Qw2W
Mv4j8ywh4hao01IsTKSKFtv6kM6YTDbVIR0tny+Wzs7MI3IpKAL2VkUt0MaF0SUw
FvGjyhqD0dcj4ITojrwg28VVHkYUrfylw+d+9dvytVZ4Ezt4p96OBD2DqrvWu2dU
WvlS6MRlp8LgdJx/KTt6Kt7yVo3YTxfYjjI2scsmr74EKhqKkip4MxDuxgMSR6Y5
JhkVyeVcb1rATlmOKof7Ig2gGu3arxNlEaDwSr27R1HCnpVCD/RmtF6Z9KETxguh
U7mwzxVMIPH9lmdzG9hoiGbzsfMjbcy5H9o/pph6Ws3Qe4k=
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:38 2026 by rpki-client