Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/itS-7ha_IdLYwdYtX_vFDNOpaSE.roa
File: itS-7ha_IdLYwdYtX_vFDNOpaSE.roa (raw, json)
Hash identifier: 10UbSa1ECdATqMzpvZcae0sI1BmyHBLNcKy0z94H+20=
Subject key identifier: 8A:D4:BE:EE:16:BF:21:D2:D8:C1:D6:2D:5F:FB:C5:0C:D3:A9:69:21
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A02BA85AEF182759E883986E86601CCF92
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/itS-7ha_IdLYwdYtX_vFDNOpaSE.roa
Signing time: Sat 22 Aug 2026 22:47:28 +0000
ROA not before: Sat 22 Aug 2026 22:47:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197391
IP address blocks: 2a02:2fc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2b:a8:5a:ef:18:27:59:e8:83:98:6e:86:60:1c:cf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 22 22:47:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ad4beee16bf21d2d8c1d62d5ffbc50cd3a96921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:55:17:0a:67:b6:2b:6f:ec:6a:8f:98:e5:
f7:85:86:da:32:8e:a8:79:0e:78:6d:f7:0b:39:bf:
6d:46:81:8c:77:f0:95:37:1a:4a:c0:28:43:cb:5b:
7c:83:d3:d2:e3:e7:2d:1a:5b:a1:07:41:72:9c:08:
2e:20:d1:fb:d3:39:05:66:24:92:d3:44:5f:e2:0c:
f5:68:26:ad:93:84:f2:56:49:10:6f:2c:a8:2d:4f:
5c:55:2f:ea:07:05:17:3f:bb:98:e4:8f:92:ab:d2:
ef:e9:46:4d:40:c1:28:f9:e1:89:28:82:2d:30:ae:
b1:09:d9:4c:01:eb:d9:2a:09:97:a8:04:ea:46:cb:
fe:49:f7:70:d1:a9:e3:51:8b:6d:1c:80:c5:da:df:
e7:38:bf:5f:e2:29:f9:09:6f:e6:7e:5d:d0:09:61:
a9:ba:b7:ab:18:23:f9:89:39:b2:f3:71:06:1e:42:
31:72:18:5f:5a:46:90:12:25:93:5a:a4:9a:63:38:
91:45:ee:32:37:f6:5d:0f:b4:f1:e7:ee:b3:0a:cd:
e1:ec:5b:01:c8:c7:89:f3:8c:92:96:e2:0d:11:e1:
98:45:60:74:06:2c:c8:86:e7:2d:f2:73:92:f0:76:
59:2e:60:41:34:68:1d:ee:99:c5:9d:77:e0:80:7b:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D4:BE:EE:16:BF:21:D2:D8:C1:D6:2D:5F:FB:C5:0C:D3:A9:69:21
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/itS-7ha_IdLYwdYtX_vFDNOpaSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:3::/48
Signature Algorithm: sha256WithRSAEncryption
9f:a0:58:2a:85:2e:ab:a0:4f:ed:08:e1:91:bc:4e:0b:26:df:
b7:b5:05:a7:4a:d5:f3:c5:86:69:df:ed:b5:f0:3e:72:67:25:
ed:c1:18:7b:f9:e7:ff:39:0c:9d:60:bf:f1:bc:de:d0:21:a8:
da:17:6e:3b:c3:65:24:21:26:e5:c8:d4:6b:30:ee:31:1a:4f:
64:6d:22:d2:90:e7:4f:4a:3b:2f:57:08:8c:35:9b:fc:1b:10:
03:aa:1d:db:d5:3c:c1:1d:71:d3:07:b7:ce:b9:6f:88:2a:ad:
ff:01:a5:3b:ab:f1:40:bb:b3:10:18:db:e7:e0:ff:9b:84:fa:
b9:dd:e3:12:58:11:c5:ea:4f:07:6a:5e:59:48:08:dd:8b:6a:
55:5c:e1:48:4a:f6:40:4d:ad:41:da:f5:a0:1a:eb:ee:3e:21:
a1:eb:89:bf:b7:73:cc:be:fc:7f:3b:57:6a:03:40:e6:d1:f8:
98:1f:fa:24:db:d8:43:c7:7d:5d:df:cb:9e:30:d1:4f:09:b8:
b9:c0:f8:4c:6a:45:56:17:ac:52:fc:a5:67:e1:da:3a:59:77:
4d:68:b8:d7:4a:e4:7e:b8:8e:85:92:5a:81:0d:21:1a:9a:cf:
66:ed:ab:8b:7d:0b:d7:f9:aa:55:86:17:36:74:bd:55:6d:71:
07:9e:35:78
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaArqFrvGCdZ6IOYboZgHM+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODIyMjI0NzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWQ0YmVlZTE2YmYyMWQyZDhjMWQ2MmQ1ZmZiYzUwY2QzYTk2OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HxVFwpntitv7GqPmOX3hYbaMo6o
eQ54bfcLOb9tRoGMd/CVNxpKwChDy1t8g9PS4+ctGluhB0FynAguINH70zkFZiSS
00Rf4gz1aCatk4TyVkkQbyyoLU9cVS/qBwUXP7uY5I+Sq9Lv6UZNQMEo+eGJKIIt
MK6xCdlMAevZKgmXqATqRsv+Sfdw0anjUYttHIDF2t/nOL9f4in5CW/mfl3QCWGp
urerGCP5iTmy83EGHkIxchhfWkaQEiWTWqSaYziRRe4yN/ZdD7Tx5+6zCs3h7FsB
yMeJ84ySluINEeGYRWB0BizIhuct8nOS8HZZLmBBNGgd7pnFnXfggHuoZQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIrUvu4WvyHS2MHWLV/7xQzTqWkhMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvaXRTLTdoYV9JZExZd2RZdFhfdkZETk9wYVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIvwAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQCfoFgqhS6roE/tCOGRvE4LJt+3tQWnStXzxYZp
3+218D5yZyXtwRh7+ef/OQydYL/xvN7QIajaF247w2UkISblyNRrMO4xGk9kbSLS
kOdPSjsvVwiMNZv8GxADqh3b1TzBHXHTB7fOuW+IKq3/AaU7q/FAu7MQGNvn4P+b
hPq53eMSWBHF6k8Hal5ZSAjdi2pVXOFISvZATa1B2vWgGuvuPiGh64m/t3PMvvx/
O1dqA0Dm0fiYH/ok29hDx31d38ueMNFPCbi5wPhMakVWF6xS/KVn4do6WXdNaLjX
SuR+uI6FklqBDSEams9m7auLfQvX+apVhhc2dL1VbXEHnjV4
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:42 2026 by rpki-client