Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/xnS3YQHzmM3IKOJwZZ61XzSUVH0.roa
File: xnS3YQHzmM3IKOJwZZ61XzSUVH0.roa (raw, json)
Hash identifier: Sa/tlcppGodbWmYYdWi83QwEeAbRR6jGxfeiG7p+nKE=
Subject key identifier: C6:74:B7:61:01:F3:98:CD:C8:28:E2:70:65:9E:B5:5F:34:94:54:7D
Certificate issuer: /CN=60b3b4a7daddddf93bb81acc8ab52cd5f487df49
Certificate serial: 01A12F410D73B7014ED8A59B6C608072FBC1
Authority key identifier: 60:B3:B4:A7:DA:DD:DD:F9:3B:B8:1A:CC:8A:B5:2C:D5:F4:87:DF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/xnS3YQHzmM3IKOJwZZ61XzSUVH0.roa
Signing time: Mon 12 Oct 2026 08:35:54 +0000
ROA not before: Mon 12 Oct 2026 08:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213586
IP address blocks: 2a0b:1d40:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:41:0d:73:b7:01:4e:d8:a5:9b:6c:60:80:72:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b3b4a7daddddf93bb81acc8ab52cd5f487df49
Validity
Not Before: Oct 12 08:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c674b76101f398cdc828e270659eb55f3494547d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:06:fd:ab:ce:93:b1:d3:01:29:58:a3:95:
ad:cd:1d:28:eb:5f:59:70:da:dd:f5:14:b6:8e:63:
f8:83:df:5e:70:22:11:6e:ae:d8:51:97:13:49:80:
3d:de:41:99:87:f8:08:d2:0e:8e:83:5c:fe:02:df:
a6:97:52:4b:e1:06:e6:3e:d8:f2:ac:b5:30:71:5e:
30:02:dd:33:0d:c9:69:70:7c:9f:50:89:9b:a6:1d:
34:f5:3d:a9:2e:6d:84:8b:33:bc:6c:9d:95:f6:61:
d2:3f:76:2f:e4:53:d4:af:51:03:a1:ce:c7:f7:3f:
be:16:9d:11:1a:1a:c9:ee:49:c4:be:ee:5b:47:a1:
7b:53:e1:dc:2a:be:86:20:13:00:74:40:4e:82:5e:
b8:2c:20:c1:51:77:52:12:63:96:6b:b5:ca:93:ab:
f9:be:01:56:02:f6:1a:c1:8c:75:21:a5:c7:d6:97:
aa:92:e4:86:0d:bf:67:ec:b8:26:13:9e:b1:11:50:
47:fd:6a:63:bd:a5:ec:20:c2:71:a0:1c:b0:0a:aa:
1a:2f:63:dc:6a:7a:83:c6:06:65:5d:da:18:cc:7d:
b0:fc:08:c2:a3:45:b4:9f:75:68:e3:bf:03:8e:58:
de:55:cb:54:36:13:26:86:50:54:80:0a:5f:6e:5a:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:74:B7:61:01:F3:98:CD:C8:28:E2:70:65:9E:B5:5F:34:94:54:7D
X509v3 Authority Key Identifier:
keyid:60:B3:B4:A7:DA:DD:DD:F9:3B:B8:1A:CC:8A:B5:2C:D5:F4:87:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/xnS3YQHzmM3IKOJwZZ61XzSUVH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1d40:1000::/36
Signature Algorithm: sha256WithRSAEncryption
1a:a1:bb:e9:56:1b:c0:be:9c:0b:3d:de:8e:9b:7c:da:0d:77:
d8:2b:a3:1a:08:58:81:b8:cb:65:eb:75:9a:56:26:54:f0:93:
ee:26:07:d7:a9:78:61:d3:4f:a2:e5:9d:ea:d0:6b:f0:34:7b:
cc:40:21:a3:3a:ba:de:78:32:e5:9c:85:04:08:af:36:39:c4:
fc:b0:d6:13:f7:e5:80:ef:61:f9:28:79:6e:d2:87:8f:74:10:
c9:fc:1d:47:76:0a:0a:a6:03:71:1b:da:06:a3:6d:a9:94:c5:
ef:9a:97:4c:be:3e:cf:3b:c3:9d:be:42:3c:44:78:57:44:6a:
72:e0:82:c9:98:a9:ed:af:23:61:67:1a:61:ad:be:7d:84:e7:
ea:fd:31:46:06:f4:a2:26:9d:8e:ec:f9:b7:25:c8:ac:2c:78:
4c:47:2e:c1:60:3e:ae:a1:ca:c6:85:b3:fc:67:0f:0f:74:c3:
0a:b6:d5:bb:89:93:16:26:44:fe:a7:ae:83:96:8b:af:66:eb:
e6:09:c9:be:25:2f:4d:a8:6b:79:0e:01:f4:a4:89:e7:10:e4:
d7:d6:75:77:03:40:37:86:7a:fa:78:8c:06:8e:25:50:1a:cb:
a8:7d:e1:14:43:5b:00:db:36:0d:4d:90:1c:99:ab:f6:a6:27:
9e:e6:7b:a9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaEvQQ1ztwFO2KWbbGCAcvvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjNiNGE3ZGFkZGRkZjkzYmI4MWFjYzhhYjUyY2Q1ZjQ4
N2RmNDkwHhcNMjYxMDEyMDgzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjc0Yjc2MTAxZjM5OGNkYzgyOGUyNzA2NTllYjU1ZjM0OTQ1NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UEG/avOk7HTASlYo5WtzR0o619Z
cNrd9RS2jmP4g99ecCIRbq7YUZcTSYA93kGZh/gI0g6Og1z+At+ml1JL4QbmPtjy
rLUwcV4wAt0zDclpcHyfUImbph009T2pLm2EizO8bJ2V9mHSP3Yv5FPUr1EDoc7H
9z++Fp0RGhrJ7knEvu5bR6F7U+HcKr6GIBMAdEBOgl64LCDBUXdSEmOWa7XKk6v5
vgFWAvYawYx1IaXH1peqkuSGDb9n7LgmE56xEVBH/WpjvaXsIMJxoBywCqoaL2Pc
anqDxgZlXdoYzH2w/AjCo0W0n3Vo478DjljeVctUNhMmhlBUgApfblqNRwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMZ0t2EB85jNyCjicGWetV80lFR9MB8GA1UdIwQY
MBaAFGCztKfa3d35O7gazIq1LNX0h99JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxPMHA5cmQzZms3dUJyTWlyVXMxZlNIMzBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWVjNTgtZTk5Ni00M2U1LWIyOTct
MzM0NWFiY2M3NjNjLzEveG5TM1lRSHptTTNJS09Kd1paNjFYelNVVkgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81OWVjNTgtZTk5Ni00M2U1LWIyOTctMzM0NWFiY2M3NjNj
LzEvWUxPMHA5cmQzZms3dUJyTWlyVXMxZlNIMzBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgsdQBAw
DQYJKoZIhvcNAQELBQADggEBABqhu+lWG8C+nAs93o6bfNoNd9groxoIWIG4y2Xr
dZpWJlTwk+4mB9epeGHTT6LlnerQa/A0e8xAIaM6ut54MuWchQQIrzY5xPyw1hP3
5YDvYfkoeW7Sh490EMn8HUd2CgqmA3Eb2gajbamUxe+al0y+Ps87w52+QjxEeFdE
anLggsmYqe2vI2FnGmGtvn2E5+r9MUYG9KImnY7s+bclyKwseExHLsFgPq6hysaF
s/xnDw90wwq21buJkxYmRP6nroOWi69m6+YJyb4lL02oa3kOAfSkiecQ5NfWdXcD
QDeGevp4jAaOJVAay6h94RRDWwDbNg1NkByZq/amJ57me6k=
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:47:14 2026 by rpki-client