Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/IEx_0Z6u31GqI1BaECPc4xdAG3w.roa
File: IEx_0Z6u31GqI1BaECPc4xdAG3w.roa (raw, json)
Hash identifier: 8EZCAmuufXDHSH3swsv0wuZft41YnaBcDHK+XNDY9tQ=
Subject key identifier: 20:4C:7F:D1:9E:AE:DF:51:AA:23:50:5A:10:23:DC:E3:17:40:1B:7C
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A020AA0278E8A54866166C241B79671EEB
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/IEx_0Z6u31GqI1BaECPc4xdAG3w.roa
Signing time: Thu 20 Aug 2026 19:33:27 +0000
ROA not before: Thu 20 Aug 2026 19:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219412
IP address blocks: 2a0d:d940:201a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:aa:02:78:e8:a5:48:66:16:6c:24:1b:79:67:1e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 20 19:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=204c7fd19eaedf51aa23505a1023dce317401b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bc:20:7d:22:f0:ed:22:15:7b:3b:f4:40:34:
d4:1a:f2:09:96:35:3a:d2:7a:77:e1:1a:15:1b:d5:
70:08:c0:df:77:59:d3:58:f1:9f:dd:e3:45:77:e6:
a5:19:01:32:e0:36:98:69:ac:e3:b4:dd:64:d4:7c:
de:9f:64:15:ac:9a:91:a8:3f:d9:0c:a7:e2:13:a7:
3c:50:67:aa:a4:4d:37:54:12:cb:2e:d6:3f:3d:db:
91:f6:6a:36:46:ba:41:08:2b:84:ad:b1:fc:c2:91:
40:5c:a1:42:f4:d5:dc:69:4a:ca:0f:82:61:5e:31:
10:ae:b4:3d:25:26:74:84:0d:79:31:43:d0:f0:0e:
0c:d6:8a:0a:25:2f:7a:60:e2:7a:aa:80:96:87:f7:
86:31:23:f7:59:3f:2a:f2:88:11:61:7d:99:3e:d1:
30:4f:ee:0f:7c:7b:f2:be:77:c6:49:76:7e:ae:42:
9f:67:54:4f:ba:dd:42:af:3e:96:40:d2:39:8f:71:
10:24:55:8d:f5:d2:90:6c:c9:32:93:53:87:ed:d0:
4e:7f:8e:e7:c4:4b:cb:f2:ab:4c:4f:3f:2b:3c:41:
76:8b:8a:10:4e:cd:af:66:3a:30:0f:27:38:69:31:
76:d3:33:99:65:87:be:0b:88:20:f4:0b:9e:82:b9:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:7F:D1:9E:AE:DF:51:AA:23:50:5A:10:23:DC:E3:17:40:1B:7C
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/IEx_0Z6u31GqI1BaECPc4xdAG3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:201a::/48
Signature Algorithm: sha256WithRSAEncryption
ca:9d:0c:d9:b8:af:7d:09:d8:a7:33:3e:ee:0b:45:99:3f:95:
6e:44:77:5c:dd:4b:5f:41:ad:13:88:e4:a8:e6:ed:14:2b:32:
d1:c7:fd:22:03:14:4b:49:70:b2:c1:76:79:21:04:cf:bb:4b:
ac:dc:21:18:3b:3f:2b:74:5c:d1:cd:aa:7a:d2:82:04:d0:f0:
82:ba:ef:c7:a6:fe:4f:c5:f1:bc:cb:32:66:75:d9:2a:bd:9c:
25:1a:9f:62:02:86:91:a1:df:6c:fc:db:89:c9:9c:ea:e1:3e:
53:c1:5f:00:5c:7b:a4:13:f1:00:ff:75:5e:c8:b2:c2:05:f3:
60:8a:5a:4c:4e:ed:1d:d1:0d:77:d5:f4:a2:04:64:f5:86:51:
76:49:da:58:8d:63:60:b2:22:50:a5:ee:f3:fe:82:ad:b6:58:
3c:82:3a:d2:e7:7a:ab:1a:02:e4:19:ec:91:c4:83:7c:68:cf:
2b:b0:b1:ca:93:7d:15:5e:35:1e:be:85:e6:a5:bc:68:88:a8:
9d:7a:f3:46:b2:59:aa:cc:a3:e6:9a:e2:18:9b:17:9f:e1:ca:
56:f2:b5:f8:0f:75:25:67:59:e4:55:d8:87:1a:24:e0:95:7f:
10:cb:36:f0:b0:a8:f5:10:2a:77:2d:81:b2:fd:3a:ba:7b:f4:
be:7b:c2:de
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaAgqgJ46KVIZhZsJBt5Zx7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwODIwMTkzMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDRjN2ZkMTllYWVkZjUxYWEyMzUwNWExMDIzZGNlMzE3NDAxYjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87wgfSLw7SIVezv0QDTUGvIJljU6
0np34RoVG9VwCMDfd1nTWPGf3eNFd+alGQEy4DaYaazjtN1k1Hzen2QVrJqRqD/Z
DKfiE6c8UGeqpE03VBLLLtY/PduR9mo2RrpBCCuErbH8wpFAXKFC9NXcaUrKD4Jh
XjEQrrQ9JSZ0hA15MUPQ8A4M1ooKJS96YOJ6qoCWh/eGMSP3WT8q8ogRYX2ZPtEw
T+4PfHvyvnfGSXZ+rkKfZ1RPut1Crz6WQNI5j3EQJFWN9dKQbMkyk1OH7dBOf47n
xEvL8qtMTz8rPEF2i4oQTs2vZjowDyc4aTF20zOZZYe+C4gg9AuegrnU/QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCBMf9Gert9RqiNQWhAj3OMXQBt8MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvSUV4XzBaNnUzMUdxSTFCYUVDUGM0eGRBRzN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQCAa
MA0GCSqGSIb3DQEBCwUAA4IBAQDKnQzZuK99CdinMz7uC0WZP5VuRHdc3UtfQa0T
iOSo5u0UKzLRx/0iAxRLSXCywXZ5IQTPu0us3CEYOz8rdFzRzap60oIE0PCCuu/H
pv5PxfG8yzJmddkqvZwlGp9iAoaRod9s/NuJyZzq4T5TwV8AXHukE/EA/3VeyLLC
BfNgilpMTu0d0Q131fSiBGT1hlF2SdpYjWNgsiJQpe7z/oKttlg8gjrS53qrGgLk
GeyRxIN8aM8rsLHKk30VXjUevoXmpbxoiKidevNGslmqzKPmmuIYmxef4cpW8rX4
D3UlZ1nkVdiHGiTglX8QyzbwsKj1ECp3LYGy/Tq6e/S+e8Le
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:51 2026 by rpki-client