Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/wiPd6tKL-ejAoZ6GLTkwP9VrnWA.roa
File: wiPd6tKL-ejAoZ6GLTkwP9VrnWA.roa (raw, json)
Hash identifier: YxRVGM09B7hq2RXw9mcl3q9tvV0vOyxDQg2e0rhZobo=
Subject key identifier: C2:23:DD:EA:D2:8B:F9:E8:C0:A1:9E:86:2D:39:30:3F:D5:6B:9D:60
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 01A13BBB9D0D6024C4D9E06E1ACDB5D47A45
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/wiPd6tKL-ejAoZ6GLTkwP9VrnWA.roa
Signing time: Wed 14 Oct 2026 18:45:13 +0000
ROA not before: Wed 14 Oct 2026 18:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a14:1d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bb:9d:0d:60:24:c4:d9:e0:6e:1a:cd:b5:d4:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Oct 14 18:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c223ddead28bf9e8c0a19e862d39303fd56b9d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:cf:c7:04:22:09:bb:77:90:a2:f8:0f:1e:
e2:d9:cf:61:03:20:80:2c:27:44:1a:b1:e0:c6:80:
49:b2:0c:85:bf:b5:71:ec:55:4a:a7:79:9e:33:a7:
20:dc:8e:c1:35:26:37:73:63:0a:3f:91:f5:8f:c1:
12:a8:8a:04:d0:1f:8c:da:04:bb:98:cb:85:38:da:
80:7c:77:37:bf:bf:4b:d1:fd:75:98:78:d7:77:65:
e3:0b:eb:01:b5:63:14:a8:f8:58:d0:a9:18:9c:45:
73:2e:4f:b5:4e:03:a0:e3:dc:d1:f9:3e:eb:3e:ab:
a3:79:33:5d:80:da:50:9f:7b:55:bf:ac:8e:e4:f4:
2d:70:b1:9f:e1:e0:dc:d8:1e:f0:b9:bf:c3:78:a6:
11:e8:91:d6:4b:c7:62:a0:39:39:e4:4b:c1:26:63:
7f:b4:55:77:34:96:f1:ec:af:96:21:c6:96:8f:29:
09:62:35:56:29:e8:30:d2:dc:25:cc:41:5b:f4:a4:
9e:05:46:05:68:e2:db:9a:0b:f4:0e:54:44:d2:d1:
c9:26:03:06:84:7a:d7:c6:27:f6:36:25:03:2b:a7:
76:97:2d:7a:95:7e:44:79:14:4c:f9:fb:df:f2:13:
66:1a:5e:8c:70:87:9b:83:ae:dc:d4:9e:22:3e:d8:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:23:DD:EA:D2:8B:F9:E8:C0:A1:9E:86:2D:39:30:3F:D5:6B:9D:60
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/wiPd6tKL-ejAoZ6GLTkwP9VrnWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
7b:54:b2:e6:87:9e:45:96:4e:64:d9:b8:c0:3f:ff:90:0f:b7:
41:89:65:f6:29:0a:06:43:6d:96:50:d5:e9:7a:f7:db:1d:6f:
7c:2e:93:33:bb:6b:70:a2:97:c0:27:34:e4:21:96:56:7f:4d:
95:0f:99:f5:44:e9:ba:6c:fa:1c:05:29:99:d2:51:00:35:8a:
5a:96:c7:cf:df:a4:94:10:cf:ea:bc:d0:64:40:7e:a0:d0:93:
e3:49:70:f2:4d:4a:13:3d:f3:4f:14:5c:8a:94:89:bd:7f:d8:
71:3a:17:92:0f:ec:ec:25:42:27:06:e4:0d:65:81:43:f6:b8:
5c:0f:06:3b:c6:15:87:07:b6:a9:d9:70:d8:b9:d3:b8:40:0a:
bf:39:8c:53:13:d3:4b:13:6c:32:3a:a7:3b:35:1c:62:a0:28:
12:f6:eb:07:68:eb:c3:c9:3d:9f:bb:59:b9:9c:3c:e1:c3:53:
2c:fa:44:8d:3c:63:ac:77:50:66:6b:8c:26:4b:cf:aa:27:d2:
ad:4e:66:23:fc:a6:a2:f4:64:b9:54:00:c9:ed:a1:eb:5c:6d:
11:fc:c3:1b:32:bf:0d:ef:6e:fc:a0:cd:b2:ac:1c:2a:22:36:
4d:82:0e:88:37:6c:6b:9c:69:99:6f:0e:79:17:3e:3b:53:30:
53:26:fc:8b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE7u50NYCTE2eBuGs211HpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz
NTBiY2IwHhcNMjYxMDE0MTg0NTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjIzZGRlYWQyOGJmOWU4YzBhMTllODYyZDM5MzAzZmQ1NmI5ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyrPxwQiCbt3kKL4Dx7i2c9hAyCA
LCdEGrHgxoBJsgyFv7Vx7FVKp3meM6cg3I7BNSY3c2MKP5H1j8ESqIoE0B+M2gS7
mMuFONqAfHc3v79L0f11mHjXd2XjC+sBtWMUqPhY0KkYnEVzLk+1TgOg49zR+T7r
PqujeTNdgNpQn3tVv6yO5PQtcLGf4eDc2B7wub/DeKYR6JHWS8dioDk55EvBJmN/
tFV3NJbx7K+WIcaWjykJYjVWKegw0twlzEFb9KSeBUYFaOLbmgv0DlRE0tHJJgMG
hHrXxif2NiUDK6d2ly16lX5EeRRM+fvf8hNmGl6McIebg67c1J4iPtj3zQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMIj3erSi/nowKGehi05MD/Va51gMB8GA1UdIwQY
MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt
NTI4NzQ2MTFjZDIxLzEvd2lQZDZ0S0wtZWpBb1o2R0xUa3dQOVZybldBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx
LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQdQDAN
BgkqhkiG9w0BAQsFAAOCAQEAe1Sy5oeeRZZOZNm4wD//kA+3QYll9ikKBkNtllDV
6Xr32x1vfC6TM7trcKKXwCc05CGWVn9NlQ+Z9UTpumz6HAUpmdJRADWKWpbHz9+k
lBDP6rzQZEB+oNCT40lw8k1KEz3zTxRcipSJvX/YcToXkg/s7CVCJwbkDWWBQ/a4
XA8GO8YVhwe2qdlw2LnTuEAKvzmMUxPTSxNsMjqnOzUcYqAoEvbrB2jrw8k9n7tZ
uZw84cNTLPpEjTxjrHdQZmuMJkvPqifSrU5mI/ymovRkuVQAye2h61xtEfzDGzK/
De9u/KDNsqwcKiI2TYIOiDdsa5xpmW8OeRc+O1MwUyb8iw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:15 2026 by rpki-client