Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PeE3AU8o-vvnRkX-9GQe97tcXyg.roa
File: PeE3AU8o-vvnRkX-9GQe97tcXyg.roa (raw, json)
Hash identifier: pLEagVCMIeyCjJjlGg7sfFxC5FUObqdTw14KMPXrf5U=
Subject key identifier: 3D:E1:37:01:4F:28:FA:FB:E7:46:45:FE:F4:64:1E:F7:BB:5C:5F:28
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019F94DE4803559E9D0CA6CBFEC7471F5474
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PeE3AU8o-vvnRkX-9GQe97tcXyg.roa
Signing time: Fri 24 Jul 2026 16:03:43 +0000
ROA not before: Fri 24 Jul 2026 16:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a11:1600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:de:48:03:55:9e:9d:0c:a6:cb:fe:c7:47:1f:54:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 24 16:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3de137014f28fafbe74645fef4641ef7bb5c5f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:df:dd:ca:f9:9a:64:5f:cc:18:1c:f7:a0:
2f:65:04:6d:5f:cc:b0:94:ae:56:78:48:e5:f9:d6:
58:0c:25:bc:25:60:36:28:b1:fd:0c:85:8b:14:1f:
2d:f5:45:83:fd:81:63:3c:fe:12:43:35:e6:2e:e1:
69:36:79:4e:46:31:12:f7:4c:4b:8e:65:5c:a7:36:
54:e8:d4:41:e4:43:35:5a:c5:6b:61:6e:5e:bc:8c:
69:d8:a9:85:87:e1:10:4d:c8:d8:c5:25:ae:57:db:
01:bb:e8:59:21:ad:c9:2c:e5:77:1f:05:01:82:28:
54:14:b2:86:a6:9b:4b:bb:4e:74:05:5e:ab:e4:4c:
86:32:dc:5a:44:f7:e7:58:c4:b9:36:76:18:43:4b:
5e:88:5c:2c:bc:35:6f:7a:ad:fc:7b:62:98:e1:83:
18:66:c9:da:96:af:b5:02:f8:03:4c:f2:96:5f:fd:
c4:91:63:1b:1f:68:94:e3:63:91:02:41:7d:3b:33:
f1:8d:ab:ff:9b:b5:72:5d:fc:6b:71:b5:4d:4b:c1:
f5:40:5c:fc:d2:bf:7e:00:a9:5e:6b:5d:c2:58:14:
1c:ae:d4:3b:85:d7:51:83:32:8a:72:68:5e:98:0f:
0c:97:30:4e:20:5f:a6:1d:d9:de:25:b5:50:b4:e7:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E1:37:01:4F:28:FA:FB:E7:46:45:FE:F4:64:1E:F7:BB:5C:5F:28
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PeE3AU8o-vvnRkX-9GQe97tcXyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1600::/29
Signature Algorithm: sha256WithRSAEncryption
32:98:a3:98:28:04:dc:af:ad:10:85:0a:80:77:26:ef:98:26:
a0:df:52:79:11:da:f6:3f:aa:c9:9e:34:25:f0:69:aa:df:4b:
f4:68:af:99:3b:7f:7f:64:e9:18:6a:20:06:39:ae:a4:cb:8f:
3d:db:45:b8:a1:02:ae:97:32:f6:0d:f6:74:df:9e:00:7f:5f:
e3:82:bc:a9:2e:24:29:6c:f1:83:71:0b:b6:60:89:1c:5e:66:
4b:6a:17:b8:0b:d5:a2:bd:fd:6a:71:9e:66:8f:bb:3e:1d:3d:
c0:a2:13:b6:e5:b3:bc:0e:b0:59:f7:34:38:3d:3d:7c:0f:dd:
16:33:bb:05:ad:2e:31:8c:62:70:ec:78:41:71:46:8c:a0:52:
31:1a:13:42:e8:b3:7f:c4:0f:51:cc:2d:1d:c3:ed:b0:48:d2:
c1:3d:e7:46:c3:a0:12:cd:ff:db:fa:07:23:a2:3d:9e:b8:34:
73:39:37:33:21:ad:49:ae:ee:47:d8:54:35:da:68:83:50:6a:
06:5a:f0:4e:dd:a4:ac:35:4b:fb:2e:67:da:88:db:6f:7d:45:
86:0d:8c:03:e3:cb:a8:3b:d8:38:c6:17:99:d1:ff:7c:c6:37:
25:16:51:9c:b3:b0:af:42:cf:90:26:16:dd:7b:a6:86:2c:50:
a9:00:63:34
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ+U3kgDVZ6dDKbL/sdHH1R0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYwNzI0MTYwMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGUxMzcwMTRmMjhmYWZiZTc0NjQ1ZmVmNDY0MWVmN2JiNWM1ZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngrf3cr5mmRfzBgc96AvZQRtX8yw
lK5WeEjl+dZYDCW8JWA2KLH9DIWLFB8t9UWD/YFjPP4SQzXmLuFpNnlORjES90xL
jmVcpzZU6NRB5EM1WsVrYW5evIxp2KmFh+EQTcjYxSWuV9sBu+hZIa3JLOV3HwUB
gihUFLKGpptLu050BV6r5EyGMtxaRPfnWMS5NnYYQ0teiFwsvDVveq38e2KY4YMY
Zsnalq+1AvgDTPKWX/3EkWMbH2iU42ORAkF9OzPxjav/m7VyXfxrcbVNS8H1QFz8
0r9+AKlea13CWBQcrtQ7hddRgzKKcmhemA8MlzBOIF+mHdneJbVQtOc6VwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFD3hNwFPKPr750ZF/vRkHve7XF8oMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvUGVFM0FVOG8tdnZuUmtYLTlHUWU5N3RjWHlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhEWADAN
BgkqhkiG9w0BAQsFAAOCAQEAMpijmCgE3K+tEIUKgHcm75gmoN9SeRHa9j+qyZ40
JfBpqt9L9GivmTt/f2TpGGogBjmupMuPPdtFuKECrpcy9g32dN+eAH9f44K8qS4k
KWzxg3ELtmCJHF5mS2oXuAvVor39anGeZo+7Ph09wKITtuWzvA6wWfc0OD09fA/d
FjO7Ba0uMYxicOx4QXFGjKBSMRoTQuizf8QPUcwtHcPtsEjSwT3nRsOgEs3/2/oH
I6I9nrg0czk3MyGtSa7uR9hUNdpog1BqBlrwTt2krDVL+y5n2ojbb31Fhg2MA+PL
qDvYOMYXmdH/fMY3JRZRnLOwr0LPkCYW3XumhixQqQBjNA==
-----END CERTIFICATE-----
Generated at Sun Jul 26 14:44:55 2026 by rpki-client