Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/DmAQPdW8nsvi__nFBR2Nzfz4tKE.roa
File: DmAQPdW8nsvi__nFBR2Nzfz4tKE.roa (raw, json)
Hash identifier: SxYJFQpriEWdQfpUNT7KGc85ANx5ZL3x1vLN53tDOww=
Subject key identifier: 0E:60:10:3D:D5:BC:9E:CB:E2:FF:F9:C5:05:1D:8D:CD:FC:F8:B4:A1
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A0C7D8C4A669551EBD453637649119129E
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/DmAQPdW8nsvi__nFBR2Nzfz4tKE.roa
Signing time: Tue 22 Sep 2026 06:41:07 +0000
ROA not before: Tue 22 Sep 2026 06:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218616
IP address blocks: 2a0a:87c0:fffc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:d8:c4:a6:69:55:1e:bd:45:36:37:64:91:19:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Sep 22 06:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e60103dd5bc9ecbe2fff9c5051d8dcdfcf8b4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:fc:cd:ff:a2:44:c0:9a:1a:26:56:08:98:
fe:a3:f6:ab:0a:b8:2c:8e:79:3a:6c:26:b4:b3:95:
ba:ac:8f:3f:3c:3a:53:34:7d:8e:46:75:47:20:b9:
b6:eb:44:48:49:25:67:12:b4:59:57:de:7f:13:3a:
8c:db:7a:e8:bf:35:a6:5c:ba:c7:f5:ef:e6:d1:70:
e3:9d:bf:96:05:1f:33:29:95:ed:f6:59:f0:25:ad:
24:d5:b4:2d:38:25:33:d4:87:db:ca:af:e1:ff:9b:
32:9e:da:4e:12:d7:ee:db:2b:53:c1:30:dc:9b:b1:
d5:58:5a:de:1b:52:cd:91:4d:5a:c1:ab:34:ef:2b:
e8:59:c3:4f:ce:a8:09:96:02:e8:84:12:49:93:7b:
54:be:de:55:58:92:8a:5b:e3:d8:f4:8e:45:18:bd:
be:b3:c8:0a:f0:b3:e9:44:9a:68:95:1d:d8:30:b2:
a6:28:0b:54:bc:64:c7:f0:d1:a8:98:0f:7b:c8:0d:
57:13:9c:a8:0c:c5:8f:ca:62:a9:88:8b:b2:36:8a:
2d:e7:07:2a:a3:9e:64:01:69:bb:d7:9a:90:4b:cd:
fb:38:99:80:b3:d1:ac:2d:59:41:ab:bf:05:3c:a6:
05:cd:c8:5f:22:0c:2c:d3:86:04:c6:4c:e2:d6:df:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:10:3D:D5:BC:9E:CB:E2:FF:F9:C5:05:1D:8D:CD:FC:F8:B4:A1
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/DmAQPdW8nsvi__nFBR2Nzfz4tKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fffc::/48
Signature Algorithm: sha256WithRSAEncryption
08:70:81:55:91:ce:34:fe:a4:97:70:15:10:d2:d4:74:30:85:
ba:f4:1c:62:03:6b:11:df:d9:22:6a:42:61:1f:7f:cf:8e:48:
79:e2:13:b3:75:e6:8a:b8:b6:9a:ef:07:11:7d:ae:ab:a6:c4:
da:5a:37:10:11:65:89:d2:43:a6:1b:40:fe:4f:58:4b:81:79:
2f:ac:17:00:b1:45:d3:00:2e:3a:70:1b:81:d1:40:e4:b0:c4:
2e:d2:13:a0:56:2d:7f:75:a4:90:db:10:33:b9:c7:c2:2f:1b:
f9:57:4c:67:f2:9c:7f:58:bc:8b:3f:a9:b1:63:c5:ca:38:c1:
0b:d4:d3:2d:dc:30:5e:11:34:ce:1d:c4:8b:7f:4a:e5:04:e2:
90:d5:a8:98:8e:d7:ad:db:7b:01:b3:a5:4e:43:28:3c:6c:98:
83:85:ea:d0:e9:57:17:b8:db:0b:63:27:1b:e9:7f:a3:79:f6:
8d:65:d0:26:d5:aa:ca:d5:4d:26:9f:81:4e:c0:79:39:1a:7d:
42:73:5c:2b:2a:ee:f2:f8:65:9c:60:29:40:7b:7c:f7:a8:4f:
93:85:ea:69:b9:3e:75:47:70:4f:91:8a:f3:0a:8a:fe:52:e4:
19:ce:5d:c5:8f:e1:3f:c2:72:36:61:16:3e:71:18:5c:e7:b4:
09:83:c4:fd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDH2MSmaVUevUU2N2SRGRKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOGZmM2FjZmNhZWQyMDNlOTZkZTkxYWIwOGM2ZWZiNjQw
MzFhNjMwHhcNMjYwOTIyMDY0MTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTYwMTAzZGQ1YmM5ZWNiZTJmZmY5YzUwNTFkOGRjZGZjZjhiNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1T8zf+iRMCaGiZWCJj+o/arCrgs
jnk6bCa0s5W6rI8/PDpTNH2ORnVHILm260RISSVnErRZV95/EzqM23rovzWmXLrH
9e/m0XDjnb+WBR8zKZXt9lnwJa0k1bQtOCUz1Ifbyq/h/5syntpOEtfu2ytTwTDc
m7HVWFreG1LNkU1awas07yvoWcNPzqgJlgLohBJJk3tUvt5VWJKKW+PY9I5FGL2+
s8gK8LPpRJpolR3YMLKmKAtUvGTH8NGomA97yA1XE5yoDMWPymKpiIuyNoot5wcq
o55kAWm715qQS837OJmAs9GsLVlBq78FPKYFzchfIgws04YExkzi1t+SQQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA5gED3VvJ7L4v/5xQUdjc38+LShMB8GA1UdIwQY
MBaAFH+P86z8rtID6W3pGrCMbvtkAxpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRfenJQeXUwZ1BwYmVrYXNJeHUtMlFER21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xODhkMWMtZmZlMi00MjNiLTg3ZmIt
OGY5YzY1YWMxNmM2LzEvRG1BUVBkVzhuc3ZpX19uRkJSMk56Zno0dEtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xODhkMWMtZmZlMi00MjNiLTg3ZmItOGY5YzY1YWMxNmM2
LzEvZjRfenJQeXUwZ1BwYmVrYXNJeHUtMlFER21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgqHwP/8
MA0GCSqGSIb3DQEBCwUAA4IBAQAIcIFVkc40/qSXcBUQ0tR0MIW69BxiA2sR39ki
akJhH3/Pjkh54hOzdeaKuLaa7wcRfa6rpsTaWjcQEWWJ0kOmG0D+T1hLgXkvrBcA
sUXTAC46cBuB0UDksMQu0hOgVi1/daSQ2xAzucfCLxv5V0xn8px/WLyLP6mxY8XK
OMEL1NMt3DBeETTOHcSLf0rlBOKQ1aiYjtet23sBs6VOQyg8bJiDherQ6VcXuNsL
Yycb6X+jefaNZdAm1arK1U0mn4FOwHk5Gn1Cc1wrKu7y+GWcYClAe3z3qE+Thepp
uT51R3BPkYrzCor+UuQZzl3Fj+E/wnI2YRY+cRhc57QJg8T9
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:43 2026 by rpki-client