Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/U_-1Q3CXNdyH8LyLCnZun8-SIHg.roa
File: U_-1Q3CXNdyH8LyLCnZun8-SIHg.roa (raw, json)
Hash identifier: EvC9W/uK0k6/lVdDounnJu1nM/JswpfJ3EgUmw02Kk0=
Subject key identifier: 53:FF:B5:43:70:97:35:DC:87:F0:BC:8B:0A:76:6E:9F:CF:92:20:78
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A13673A56F0B607DEB73CFC5130D6AA888
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/U_-1Q3CXNdyH8LyLCnZun8-SIHg.roa
Signing time: Tue 13 Oct 2026 18:08:31 +0000
ROA not before: Tue 13 Oct 2026 18:08:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218415
IP address blocks: 2a09:3f00:1012::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:73:a5:6f:0b:60:7d:eb:73:cf:c5:13:0d:6a:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Oct 13 18:08:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53ffb543709735dc87f0bc8b0a766e9fcf922078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:b4:bf:f3:06:da:ee:75:8d:b9:3a:b0:37:
c4:ec:d9:82:0b:83:80:7c:e8:2c:a4:dd:1a:50:15:
8d:e7:b6:4d:7e:32:23:51:37:f7:f8:7b:bd:fb:22:
94:45:23:ed:0b:ad:88:b9:6a:1e:76:ee:26:82:44:
f4:39:17:96:51:f2:f7:7b:f7:13:3f:54:f0:40:ca:
32:f6:ea:ba:90:ad:07:51:40:42:14:38:37:83:cc:
ff:c7:cc:f3:e7:b5:40:71:0e:3e:d6:d0:93:ec:48:
a4:8d:88:57:0b:e0:33:94:7d:cd:7b:8e:7f:9c:0d:
66:f1:9d:f9:82:ad:63:35:db:53:b0:7f:b9:82:28:
e7:53:94:c5:ec:fd:3a:33:1f:45:c7:bf:f9:7c:0a:
34:fe:c1:e0:df:ab:30:64:7f:81:1e:5e:2f:45:66:
ab:e6:1d:bd:1c:0f:f5:ad:a3:ac:33:5b:8b:d9:4f:
e8:e6:25:66:b6:03:03:74:b8:e5:f7:e9:07:3b:43:
c0:d4:d4:9c:6a:2e:f6:70:68:49:24:9d:14:de:9b:
f8:95:ed:24:08:08:81:7c:05:ec:5a:e5:40:06:f5:
50:18:7b:92:ea:1b:b8:32:c5:66:30:94:81:4e:18:
ce:ad:78:b9:9a:68:46:5a:77:6e:7d:ff:2e:41:a7:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:B5:43:70:97:35:DC:87:F0:BC:8B:0A:76:6E:9F:CF:92:20:78
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/U_-1Q3CXNdyH8LyLCnZun8-SIHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1012::/48
Signature Algorithm: sha256WithRSAEncryption
42:90:a8:e6:60:09:89:d1:b9:04:ae:f2:5a:88:36:4a:10:47:
aa:06:e4:00:55:b9:78:58:20:3c:20:21:a0:ed:91:37:45:bc:
d4:11:53:45:43:82:7b:8c:dc:63:1c:22:1f:8f:62:5a:be:51:
ee:ae:81:a6:6c:8a:ee:54:b9:84:68:b7:fa:ac:ce:fb:cf:3a:
49:86:a2:0a:3a:82:9c:54:1b:a4:d4:7b:14:05:71:29:fb:f3:
e5:2a:55:21:a9:dd:a8:3a:d5:38:10:8a:a2:cf:15:42:c6:f4:
b4:f1:b2:10:f5:b4:80:83:12:e6:37:60:9e:9d:f0:84:4a:84:
df:80:7c:03:91:71:a0:cd:0f:52:e8:2d:48:e9:77:5a:fe:b7:
39:5f:19:03:49:40:2e:09:e1:18:aa:2a:49:4c:b9:87:9f:d2:
44:46:79:e7:9a:82:69:21:1f:e5:ac:fb:bb:00:ec:0d:ff:69:
2b:20:d2:6c:16:cf:81:c7:b3:06:7d:81:2e:15:55:07:fc:6e:
85:a4:96:68:ad:33:78:c1:4f:1a:9a:14:c7:b8:84:2c:80:dc:
85:4f:e8:22:c8:6f:6d:7e:99:77:0b:29:b7:dc:eb:cb:88:08:
84:0d:07:e8:de:54:0d:6b:56:1a:07:e7:7f:56:15:92:d5:ae:
cb:33:a0:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaE2c6VvC2B963PPxRMNaqiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzE2MDE4MTczOTU2OGU1NzhlMWI1ZjU3OTc2YTYwMzk4
MDYyZTYwHhcNMjYxMDEzMTgwODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2ZmYjU0MzcwOTczNWRjODdmMGJjOGIwYTc2NmU5ZmNmOTIyMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCW0v/MG2u51jbk6sDfE7NmCC4OA
fOgspN0aUBWN57ZNfjIjUTf3+Hu9+yKURSPtC62IuWoedu4mgkT0OReWUfL3e/cT
P1TwQMoy9uq6kK0HUUBCFDg3g8z/x8zz57VAcQ4+1tCT7EikjYhXC+AzlH3Ne45/
nA1m8Z35gq1jNdtTsH+5gijnU5TF7P06Mx9Fx7/5fAo0/sHg36swZH+BHl4vRWar
5h29HA/1raOsM1uL2U/o5iVmtgMDdLjl9+kHO0PA1NScai72cGhJJJ0U3pv4le0k
CAiBfAXsWuVABvVQGHuS6hu4MsVmMJSBThjOrXi5mmhGWnduff8uQaeTPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFP/tUNwlzXch/C8iwp2bp/PkiB4MB8GA1UdIwQY
MBaAFDZxYBgXOVaOV44bX1eXamA5gGLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYt
ZWU4Y2ZkZDJlZDk0LzEvVV8tMVEzQ1hOZHlIOEx5TENuWnVuOC1TSUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYtZWU4Y2ZkZDJlZDk0
LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgk/ABAS
MA0GCSqGSIb3DQEBCwUAA4IBAQBCkKjmYAmJ0bkErvJaiDZKEEeqBuQAVbl4WCA8
ICGg7ZE3RbzUEVNFQ4J7jNxjHCIfj2JavlHuroGmbIruVLmEaLf6rM77zzpJhqIK
OoKcVBuk1HsUBXEp+/PlKlUhqd2oOtU4EIqizxVCxvS08bIQ9bSAgxLmN2CenfCE
SoTfgHwDkXGgzQ9S6C1I6Xda/rc5XxkDSUAuCeEYqipJTLmHn9JERnnnmoJpIR/l
rPu7AOwN/2krINJsFs+Bx7MGfYEuFVUH/G6FpJZorTN4wU8amhTHuIQsgNyFT+gi
yG9tfpl3Cym33OvLiAiEDQfo3lQNa1YaB+d/VhWS1a7LM6Dv
-----END CERTIFICATE-----
Generated at Thu Oct 22 14:36:07 2026 by rpki-client