Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/T94rHWCZeayUsVELjFLeQOr8rJo.roa
File: T94rHWCZeayUsVELjFLeQOr8rJo.roa (raw, json)
Hash identifier: R4O/pNAe1wQ6587rVDJkW+iV0R6LvPpUThFTN5d/NEM=
Subject key identifier: 4F:DE:2B:1D:60:99:79:AC:94:B1:51:0B:8C:52:DE:40:EA:FC:AC:9A
Certificate issuer: /CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Certificate serial: 01A173825E3CD06FF244717BD127976F01A1
Authority key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/T94rHWCZeayUsVELjFLeQOr8rJo.roa
Signing time: Sun 25 Oct 2026 14:41:25 +0000
ROA not before: Sun 25 Oct 2026 14:41:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:b240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:82:5e:3c:d0:6f:f2:44:71:7b:d1:27:97:6f:01:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Validity
Not Before: Oct 25 14:41:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fde2b1d609979ac94b1510b8c52de40eafcac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:29:f2:94:db:12:3d:cf:ae:77:dc:e1:70:
43:bc:7e:ed:ec:88:8b:b6:6f:35:0a:b0:aa:6b:a9:
cd:ad:92:82:04:1f:ee:2d:c9:b4:a0:ee:d9:03:a1:
a2:fd:14:38:9a:21:c6:0e:aa:20:a9:1d:2d:0d:cc:
fd:fb:97:72:ff:ca:bf:ee:07:53:52:da:9a:6e:87:
2f:1c:14:e2:27:2c:44:fe:35:58:61:5c:9e:47:3a:
90:4f:28:ed:5b:95:41:ab:75:74:3f:18:64:d2:0b:
9e:e0:7f:ad:d7:a3:e3:2e:94:be:88:48:15:7b:a8:
21:ba:bb:91:b5:f7:3b:dc:4e:13:26:0d:11:a7:b0:
18:46:2a:6e:49:3d:cc:45:65:51:25:80:12:0f:a5:
30:6c:02:47:41:91:e5:ae:0a:82:6c:50:59:87:18:
0c:84:e6:8a:5c:b9:d6:08:1f:97:d4:04:b0:4a:78:
30:d5:02:47:52:21:e6:cd:04:1c:db:ad:a7:0e:4d:
f4:0c:dd:38:e8:0d:28:ec:d3:65:92:34:ff:c8:c3:
e0:d4:06:7c:d3:82:fe:99:6d:90:f1:57:15:f4:bc:
18:ad:53:80:91:2e:a3:28:24:82:1a:85:e5:e0:1a:
9e:a0:04:ee:6e:8f:4f:d0:93:40:2c:59:60:b1:e2:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:2B:1D:60:99:79:AC:94:B1:51:0B:8C:52:DE:40:EA:FC:AC:9A
X509v3 Authority Key Identifier:
keyid:64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/T94rHWCZeayUsVELjFLeQOr8rJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b240::/29
Signature Algorithm: sha256WithRSAEncryption
13:d8:d1:1d:4a:f6:af:d0:5e:90:f9:50:bc:9f:95:6a:11:2e:
4b:dc:1f:48:23:d2:9a:5c:d5:09:59:7a:e8:1d:cd:4f:89:b4:
e1:67:1f:0d:b5:e5:f6:95:7e:be:1d:35:7f:e0:4f:07:4b:3a:
d5:f0:59:8c:24:b6:56:20:6b:07:2a:b6:e4:d8:e6:b1:e9:9a:
07:07:fe:03:67:cf:59:a8:5b:68:8a:b7:11:38:91:67:38:6d:
f6:05:36:aa:91:d2:55:05:84:4d:fd:f6:a5:62:86:72:3d:06:
ac:d1:bc:c7:79:65:08:2c:a8:e8:c8:d9:17:a2:fd:c9:c0:cd:
d7:6b:1f:23:1c:a9:cf:25:a7:fd:93:b4:14:12:ee:ea:83:ab:
db:2b:8a:71:0e:4e:af:f3:cc:93:84:32:89:a2:6a:68:69:05:
ac:ef:ba:2c:2f:d2:f8:71:08:48:61:b2:a2:a1:20:3e:4e:12:
12:55:72:67:55:eb:e4:fc:6e:b1:80:ab:5b:17:d6:36:01:f6:
fa:20:3c:e3:93:46:22:45:0c:ef:71:89:98:85:83:e8:a3:47:
70:4f:5d:df:3c:ab:e3:c0:1d:a3:72:ad:a1:2d:e1:b2:90:38:
eb:3c:85:1d:77:7e:fb:d2:7e:7b:08:7e:80:fc:16:d5:d2:d4:
b6:f6:f6:aa
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaFzgl480G/yRHF70SeXbwGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NDk2YzRhN2QzYTIzYzM4ZDJhYWNiNDZiMDZjYjYxNzU0
N2IxMWYwHhcNMjYxMDI1MTQ0MTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmRlMmIxZDYwOTk3OWFjOTRiMTUxMGI4YzUyZGU0MGVhZmNhYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2Ap8pTbEj3Prnfc4XBDvH7t7IiL
tm81CrCqa6nNrZKCBB/uLcm0oO7ZA6Gi/RQ4miHGDqogqR0tDcz9+5dy/8q/7gdT
UtqabocvHBTiJyxE/jVYYVyeRzqQTyjtW5VBq3V0Pxhk0gue4H+t16PjLpS+iEgV
e6ghuruRtfc73E4TJg0Rp7AYRipuST3MRWVRJYASD6UwbAJHQZHlrgqCbFBZhxgM
hOaKXLnWCB+X1ASwSngw1QJHUiHmzQQc262nDk30DN046A0o7NNlkjT/yMPg1AZ8
04L+mW2Q8VcV9LwYrVOAkS6jKCSCGoXl4BqeoATubo9P0JNALFlgseKDFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFE/eKx1gmXmslLFRC4xS3kDq/KyaMB8GA1UdIwQY
MBaAFGRJbEp9OiPDjSqstGsGy2F1R7EfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80OTMyODMtZTZjZC00MWJiLWI1YmMt
NzhmNjA1MjJkMDM1LzEvVDk0ckhXQ1plYXlVc1ZFTGpGTGVRT3I4ckpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80OTMyODMtZTZjZC00MWJiLWI1YmMtNzhmNjA1MjJkMDM1
LzEvWkVsc1NuMDZJOE9OS3F5MGF3YkxZWFZIc1I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg6yQDAN
BgkqhkiG9w0BAQsFAAOCAQEAE9jRHUr2r9BekPlQvJ+VahEuS9wfSCPSmlzVCVl6
6B3NT4m04WcfDbXl9pV+vh01f+BPB0s61fBZjCS2ViBrByq25NjmsemaBwf+A2fP
WahbaIq3ETiRZzht9gU2qpHSVQWETf32pWKGcj0GrNG8x3llCCyo6MjZF6L9ycDN
12sfIxypzyWn/ZO0FBLu6oOr2yuKcQ5Or/PMk4QyiaJqaGkFrO+6LC/S+HEISGGy
oqEgPk4SElVyZ1Xr5PxusYCrWxfWNgH2+iA845NGIkUM73GJmIWD6KNHcE9d3zyr
48Ado3KtoS3hspA46zyFHXd++9J+ewh+gPwW1dLUtvb2qg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:14:32 2026 by rpki-client