Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/YrCkUV44O8nfShCRKU-YvtLNv6g.roa
File: YrCkUV44O8nfShCRKU-YvtLNv6g.roa (raw, json)
Hash identifier: nd9DiyAV9mNqFtekCI6fvweaLKSWAY3KNFjhwN/iBxw=
Subject key identifier: 62:B0:A4:51:5E:38:3B:C9:DF:4A:10:91:29:4F:98:BE:D2:CD:BF:A8
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A1A193A3EB82598204FE0B1B128DB21F9C
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/YrCkUV44O8nfShCRKU-YvtLNv6g.roa
Signing time: Tue 03 Nov 2026 13:22:49 +0000
ROA not before: Tue 03 Nov 2026 13:22:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 2a0d:d940:b200::/44 maxlen: 44
2a0d:d940:b210::/44 maxlen: 44
2a0d:d940:b220::/44 maxlen: 44
2a0d:d940:b230::/44 maxlen: 44
2a0d:d940:b250::/44 maxlen: 44
2a0d:d940:b260::/44 maxlen: 44
2a0d:d940:b270::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:93:a3:eb:82:59:82:04:fe:0b:1b:12:8d:b2:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Nov 3 13:22:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62b0a4515e383bc9df4a1091294f98bed2cdbfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:21:0e:4a:95:17:76:78:2a:af:f4:e0:2b:
47:0b:1a:77:da:8e:49:b2:ad:55:cb:72:dd:9d:e7:
86:5e:7e:99:51:8e:70:b8:58:fe:21:92:ab:ac:dc:
33:97:78:29:8b:10:24:93:88:38:ad:e6:0d:86:e4:
77:94:7d:75:f3:e1:54:0d:ed:6a:fd:3f:34:e0:31:
69:e2:28:13:0f:e5:3c:a2:9b:c7:e4:1c:51:9b:4b:
c1:12:1b:e6:63:ab:9d:24:86:95:4e:19:63:b6:c8:
77:79:6a:31:57:8f:22:ad:b4:64:5b:47:77:10:7d:
67:d4:29:2b:b7:15:77:f3:2c:a9:0d:7f:79:80:f8:
c9:84:0b:a8:a3:4d:50:24:8d:bd:33:eb:15:a4:97:
f9:36:39:95:5a:30:6f:8c:34:62:bd:6f:bf:1d:dd:
01:6c:a7:5a:69:8e:82:d5:57:b0:87:15:ac:82:ef:
f8:ae:95:03:d7:6d:1b:7a:d6:7d:8e:ed:ff:4b:64:
ff:c5:01:b0:5e:08:b2:0f:ea:0d:84:c6:61:45:2d:
d3:8e:18:bb:28:64:2b:69:5c:ff:9c:b6:58:37:e6:
bc:12:6c:2f:6a:0d:01:90:3b:d5:24:f7:75:d9:e5:
ef:55:13:c8:19:40:fd:f2:d5:07:36:d8:1d:f9:8e:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B0:A4:51:5E:38:3B:C9:DF:4A:10:91:29:4F:98:BE:D2:CD:BF:A8
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/YrCkUV44O8nfShCRKU-YvtLNv6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:b200::/42
2a0d:d940:b250::-2a0d:d940:b27f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7d:2b:57:74:94:cb:8e:32:bc:23:9b:9f:6a:89:10:00:39:52:
06:ed:f4:3d:ee:2c:c4:ff:9a:78:cb:12:c9:a6:e6:ee:32:ad:
ba:50:54:7a:e6:ca:f3:05:57:b5:9f:3c:36:73:d8:2a:8d:2c:
31:fa:7d:37:20:c4:f4:c6:5f:f6:03:72:26:00:2d:c5:f6:7e:
e5:a0:df:c9:ea:1d:39:19:ba:bf:bd:53:64:26:61:29:55:78:
3d:ce:e5:ae:dd:c2:c8:27:a9:c7:83:22:58:b8:aa:64:a0:01:
86:47:e6:73:c4:f2:fc:58:98:4a:e5:5a:ff:f4:ac:9d:8c:f5:
79:ad:be:94:52:4c:91:c8:d3:f1:e9:9d:a0:40:40:39:e0:04:
94:a4:10:f1:28:59:f0:7f:9a:82:2c:d2:1c:38:b8:be:a2:46:
90:4d:a9:b2:60:6d:f5:ef:b0:b1:16:5e:80:a9:d4:70:ce:f7:
a6:08:a9:7b:a6:30:3f:23:f2:4e:a3:4e:df:69:f3:0d:3f:0d:
28:aa:d2:c1:eb:dd:44:be:9d:1f:5b:07:87:f6:f9:be:ab:a2:
dd:fa:f5:15:94:a9:78:3b:36:b3:c3:b3:b6:06:d9:ff:e1:7b:
a9:d8:19:f6:c8:91:4f:6a:f7:2b:6b:69:45:f0:03:9c:5f:fa:
87:e5:df:2f
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaGhk6PrglmCBP4LGxKNsh+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYxMTAzMTMyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmIwYTQ1MTVlMzgzYmM5ZGY0YTEwOTEyOTRmOThiZWQyY2RiZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7YhDkqVF3Z4Kq/04CtHCxp32o5J
sq1Vy3LdneeGXn6ZUY5wuFj+IZKrrNwzl3gpixAkk4g4reYNhuR3lH118+FUDe1q
/T804DFp4igTD+U8opvH5BxRm0vBEhvmY6udJIaVThljtsh3eWoxV48irbRkW0d3
EH1n1CkrtxV38yypDX95gPjJhAuoo01QJI29M+sVpJf5NjmVWjBvjDRivW+/Hd0B
bKdaaY6C1VewhxWsgu/4rpUD120betZ9ju3/S2T/xQGwXgiyD+oNhMZhRS3Tjhi7
KGQraVz/nLZYN+a8Emwvag0BkDvVJPd12eXvVRPIGUD98tUHNtgd+Y7BqwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFGKwpFFeODvJ30oQkSlPmL7Szb+oMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvWXJDa1VWNDRPOG5mU2hDUktVLVl2dExOdjZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcGKg3ZQLIA
MBIDBwQqDdlAslADBwcqDdlAsgAwDQYJKoZIhvcNAQELBQADggEBAH0rV3SUy44y
vCObn2qJEAA5Ugbt9D3uLMT/mnjLEsmm5u4yrbpQVHrmyvMFV7WfPDZz2CqNLDH6
fTcgxPTGX/YDciYALcX2fuWg38nqHTkZur+9U2QmYSlVeD3O5a7dwsgnqceDIli4
qmSgAYZH5nPE8vxYmErlWv/0rJ2M9XmtvpRSTJHI0/HpnaBAQDngBJSkEPEoWfB/
moIs0hw4uL6iRpBNqbJgbfXvsLEWXoCp1HDO96YIqXumMD8j8k6jTt9p8w0/DSiq
0sHr3US+nR9bB4f2+b6rot369RWUqXg7NrPDs7YG2f/he6nYGfbIkU9q9ytraUXw
A5xf+ofl3y8=
-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:35 2026 by rpki-client