Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/7KhOIRERuTcrnYJg3kNKz_Qo6_A.roa
File: 7KhOIRERuTcrnYJg3kNKz_Qo6_A.roa (raw, json)
Hash identifier: xhuByokXnscZFEd7L9YZZqKAvWHiGXMAc059o/ETOXA=
Subject key identifier: EC:A8:4E:21:11:11:B9:37:2B:9D:82:60:DE:43:4A:CF:F4:28:EB:F0
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A10625AE8EDCC7FCE8DE3EA0E08647AC59
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/7KhOIRERuTcrnYJg3kNKz_Qo6_A.roa
Signing time: Sun 04 Oct 2026 09:01:35 +0000
ROA not before: Sun 04 Oct 2026 09:01:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200081
IP address blocks: 2a0e:4006::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:ae:8e:dc:c7:fc:e8:de:3e:a0:e0:86:47:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 4 09:01:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eca84e211111b9372b9d8260de434acff428ebf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:21:fc:8a:9f:52:51:67:7e:06:56:9f:09:
3a:4d:fe:31:52:ae:c7:14:25:a4:30:b9:40:42:e0:
fb:5d:b1:63:98:6d:97:1e:d2:72:4d:95:ad:54:b6:
b6:95:9b:c9:37:66:8d:48:92:f8:3c:7e:d0:74:97:
a6:b7:da:df:29:ba:fd:23:6e:c0:cf:2e:00:92:46:
54:c4:e6:99:eb:9c:e9:ff:c8:9b:e7:88:8d:d2:f1:
25:e9:9a:4d:32:b2:3a:cc:03:6c:ad:35:a9:dc:8b:
65:fa:fa:92:df:e6:ba:5b:18:c7:3c:ba:fa:8d:60:
c9:58:16:c6:a0:db:59:c2:43:8d:11:de:7b:ce:bc:
cd:0f:61:db:e2:34:40:d0:89:b3:a1:a6:6a:4b:e6:
23:ff:a4:89:b4:c0:9c:3c:71:1b:15:a8:6f:49:64:
05:f8:f6:a7:f7:26:85:22:3b:2a:65:6a:b9:e8:24:
e8:26:bd:63:4b:67:19:a1:9f:aa:06:d5:63:92:e2:
9a:8f:23:5f:e3:61:d4:15:15:36:bb:25:d6:9b:a9:
7f:ed:b0:43:39:94:d7:f2:4c:77:6d:25:52:4d:1a:
7b:a8:28:ca:af:27:69:63:08:8c:f9:b0:e7:5b:71:
d0:e3:29:2a:92:78:a7:9f:ac:f2:6d:57:8c:de:f3:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:4E:21:11:11:B9:37:2B:9D:82:60:DE:43:4A:CF:F4:28:EB:F0
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/7KhOIRERuTcrnYJg3kNKz_Qo6_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4006::/32
Signature Algorithm: sha256WithRSAEncryption
ad:19:24:55:44:4c:c8:99:04:63:74:a8:ca:57:b2:77:81:3a:
cb:67:b2:1d:05:3e:78:db:bb:b8:78:28:ba:67:67:7f:b1:65:
6c:f1:42:bb:d1:82:83:54:a0:f8:6e:b3:ee:e6:88:a9:e4:76:
dd:36:13:d6:e5:08:e6:a5:1e:bc:e8:dd:f7:1f:97:ba:05:bf:
30:36:58:b7:09:23:0d:a0:25:7d:82:de:d1:54:b1:4e:71:21:
90:2a:2b:60:ee:f2:48:d9:b4:16:97:89:a5:62:79:5c:6d:b7:
b3:dd:92:b7:ee:ad:9d:ac:31:59:82:5f:e4:54:13:39:35:85:
b7:6e:d8:a2:f3:34:aa:14:09:5b:ce:47:9b:f2:ef:6b:17:be:
95:c2:5c:c6:7b:39:a4:c2:f3:02:18:11:03:ce:39:9e:9b:f4:
2b:16:4b:97:41:a4:36:49:03:21:b7:85:af:c1:97:72:93:dd:
29:2b:d5:f3:db:32:f6:81:b1:20:77:f7:6f:ec:af:2e:ca:a4:
0d:88:6c:95:a6:eb:e1:d5:07:20:93:19:13:5f:a3:27:3c:fe:
2d:7c:9c:29:3c:73:f1:d8:02:59:df:a7:d2:e8:ac:61:ec:29:
11:d3:30:5e:23:6d:bd:03:c0:df:b0:d4:f3:bd:11:a1:36:7c:
b2:fe:32:5c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaEGJa6O3Mf86N4+oOCGR6xZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYxMDA0MDkwMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2E4NGUyMTExMTFiOTM3MmI5ZDgyNjBkZTQzNGFjZmY0MjhlYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Mh/IqfUlFnfgZWnwk6Tf4xUq7H
FCWkMLlAQuD7XbFjmG2XHtJyTZWtVLa2lZvJN2aNSJL4PH7QdJemt9rfKbr9I27A
zy4AkkZUxOaZ65zp/8ib54iN0vEl6ZpNMrI6zANsrTWp3Itl+vqS3+a6WxjHPLr6
jWDJWBbGoNtZwkONEd57zrzND2Hb4jRA0ImzoaZqS+Yj/6SJtMCcPHEbFahvSWQF
+Pan9yaFIjsqZWq56CToJr1jS2cZoZ+qBtVjkuKajyNf42HUFRU2uyXWm6l/7bBD
OZTX8kx3bSVSTRp7qCjKrydpYwiM+bDnW3HQ4ykqkninn6zybVeM3vMRgwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOyoTiEREbk3K52CYN5DSs/0KOvwMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvN0toT0lSRVJ1VGNybllKZzNrTkt6X1FvNl9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg5ABjAN
BgkqhkiG9w0BAQsFAAOCAQEArRkkVURMyJkEY3Soyleyd4E6y2eyHQU+eNu7uHgo
umdnf7FlbPFCu9GCg1Sg+G6z7uaIqeR23TYT1uUI5qUevOjd9x+XugW/MDZYtwkj
DaAlfYLe0VSxTnEhkCorYO7ySNm0FpeJpWJ5XG23s92St+6tnawxWYJf5FQTOTWF
t27YovM0qhQJW85Hm/Lvaxe+lcJcxns5pMLzAhgRA845npv0KxZLl0GkNkkDIbeF
r8GXcpPdKSvV89sy9oGxIHf3b+yvLsqkDYhslabr4dUHIJMZE1+jJzz+LXycKTxz
8dgCWd+n0uisYewpEdMwXiNtvQPA37DU870RoTZ8sv4yXA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:44:00 2026 by rpki-client