Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/URHVo6LqmoVh0ooMPYCIdzcTBBo.roa
File: URHVo6LqmoVh0ooMPYCIdzcTBBo.roa (raw, json)
Hash identifier: NIFIGG+yO0mOBKSS23nY0UMSWiblELGOsvIY8VzYbSc=
Subject key identifier: 51:11:D5:A3:A2:EA:9A:85:61:D2:8A:0C:3D:80:88:77:37:13:04:1A
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A10B5054D1BE4628E82A0BFE802873E406
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/URHVo6LqmoVh0ooMPYCIdzcTBBo.roa
Signing time: Mon 05 Oct 2026 09:06:16 +0000
ROA not before: Mon 05 Oct 2026 09:06:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218839
IP address blocks: 2a0e:4001:500::/40 maxlen: 40
2a0e:4001:500::/48 maxlen: 48
2a0e:4001:501::/48 maxlen: 48
2a0e:4001:502::/48 maxlen: 48
2a0e:4001:503::/48 maxlen: 48
2a0e:4001:504::/48 maxlen: 48
2a0e:4001:505::/48 maxlen: 48
2a0e:4001:506::/48 maxlen: 48
2a0e:4001:507::/48 maxlen: 48
2a0e:4001:508::/48 maxlen: 48
2a0e:4001:509::/48 maxlen: 48
2a0e:4001:510::/48 maxlen: 48
2a0e:4001:511::/48 maxlen: 48
2a0e:4001:800::/40 maxlen: 40
2a0e:4001:800::/48 maxlen: 48
2a0e:4001:801::/48 maxlen: 48
2a0e:4001:802::/48 maxlen: 48
2a0e:4001:803::/48 maxlen: 48
2a0e:4001:804::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:50:54:d1:be:46:28:e8:2a:0b:fe:80:28:73:e4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 5 09:06:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5111d5a3a2ea9a8561d28a0c3d8088773713041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:a5:85:12:18:dc:74:47:01:5b:d1:e5:69:
0a:b8:f4:cb:34:12:64:18:58:2c:ba:0e:d6:df:7e:
ec:4b:2c:94:ad:a8:46:7a:3b:8a:35:42:9e:6e:d7:
24:e9:f0:8f:83:0d:cd:66:bb:62:aa:6f:2c:62:84:
5c:c9:42:04:c4:d3:09:cf:15:c6:43:0a:d0:78:e9:
66:10:f5:cc:da:14:0f:d5:a6:83:5a:aa:98:12:b5:
fa:5b:a9:b4:4b:ac:df:7c:f3:2a:5b:17:a3:74:66:
44:ff:cb:a4:47:34:d1:80:6d:d5:fc:87:2f:6e:70:
4f:4c:54:33:50:84:b4:1f:c4:5c:bf:3d:76:6b:7a:
ac:e9:7f:c5:ae:2a:48:0b:da:d0:f4:9b:eb:a5:e6:
ac:82:a6:1b:7f:68:cf:01:4f:08:fd:a9:ae:b4:bb:
b6:62:0a:5f:50:51:05:72:dc:61:84:e6:ef:2c:e0:
1c:fc:00:f7:c0:ae:8b:02:a1:e0:2c:92:f1:78:86:
45:6b:1e:87:3e:db:fb:e6:3d:c0:2d:c5:71:48:54:
7e:ed:80:e0:11:28:44:4f:3f:db:1c:a8:8d:2a:15:
ca:5d:d4:95:4d:12:33:2c:fb:7b:32:72:9b:8d:bf:
67:30:f0:e4:5d:75:f0:77:ff:e7:2a:28:82:e9:0c:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:D5:A3:A2:EA:9A:85:61:D2:8A:0C:3D:80:88:77:37:13:04:1A
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/URHVo6LqmoVh0ooMPYCIdzcTBBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:500::/40
2a0e:4001:800::/40
Signature Algorithm: sha256WithRSAEncryption
8a:8d:94:6c:06:e2:77:4c:e1:53:af:df:c2:a0:cb:71:c9:59:
b3:69:3e:38:8b:0c:0b:3b:b1:16:a1:70:9b:dc:4b:0d:74:6b:
fd:a0:91:d3:f0:36:e5:93:de:ec:1d:e7:a8:8d:8d:46:7e:84:
ca:fa:70:d5:53:a3:64:22:59:c8:a3:0c:08:bb:2a:c2:6c:45:
28:a8:60:a0:e0:75:65:21:cf:a4:fa:fe:b5:25:86:45:b4:90:
4a:ca:c0:6f:1d:71:9b:53:b2:e7:93:81:45:66:5e:43:42:52:
92:8e:03:ad:87:d7:59:78:ec:8d:b6:78:1b:20:95:e0:be:66:
31:6b:f9:d3:e9:b8:74:72:4d:22:da:d0:f6:14:4f:15:39:aa:
45:c0:33:d0:53:93:b8:11:19:f8:38:42:e7:ec:df:a5:0b:cf:
4e:fd:6b:51:3b:83:20:39:8b:dd:71:26:d8:56:dc:60:07:44:
0e:27:da:fd:ac:e8:b4:05:c9:a6:fd:ea:a3:24:54:bc:f1:ed:
f4:f2:cf:7d:38:60:f8:d9:52:eb:60:77:4e:18:f6:76:90:2c:
54:76:be:79:14:ed:f6:ce:7c:41:a0:d1:2a:45:b1:c8:f4:36:
ff:bd:29:f9:d7:fa:cb:88:75:d8:16:e9:c7:55:bd:49:c8:c0:
96:3a:62:cf
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAaELUFTRvkYo6CoL/oAoc+QGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYxMDA1MDkwNjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTExZDVhM2EyZWE5YTg1NjFkMjhhMGMzZDgwODg3NzM3MTMwNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7ylhRIY3HRHAVvR5WkKuPTLNBJk
GFgsug7W337sSyyUrahGejuKNUKebtck6fCPgw3NZrtiqm8sYoRcyUIExNMJzxXG
QwrQeOlmEPXM2hQP1aaDWqqYErX6W6m0S6zffPMqWxejdGZE/8ukRzTRgG3V/Icv
bnBPTFQzUIS0H8Rcvz12a3qs6X/FripIC9rQ9JvrpeasgqYbf2jPAU8I/amutLu2
YgpfUFEFctxhhObvLOAc/AD3wK6LAqHgLJLxeIZFax6HPtv75j3ALcVxSFR+7YDg
EShETz/bHKiNKhXKXdSVTRIzLPt7MnKbjb9nMPDkXXXwd//nKiiC6QwzVwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFFER1aOi6pqFYdKKDD2AiHc3EwQaMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvVVJIVm82THFtb1ZoMG9vTVBZQ0lkemNUQkJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKg5AAQUD
BgAqDkABCDANBgkqhkiG9w0BAQsFAAOCAQEAio2UbAbid0zhU6/fwqDLcclZs2k+
OIsMCzuxFqFwm9xLDXRr/aCR0/A25ZPe7B3nqI2NRn6Eyvpw1VOjZCJZyKMMCLsq
wmxFKKhgoOB1ZSHPpPr+tSWGRbSQSsrAbx1xm1Oy55OBRWZeQ0JSko4DrYfXWXjs
jbZ4GyCV4L5mMWv50+m4dHJNItrQ9hRPFTmqRcAz0FOTuBEZ+DhC5+zfpQvPTv1r
UTuDIDmL3XEm2FbcYAdEDifa/azotAXJpv3qoyRUvPHt9PLPfThg+NlS62B3Thj2
dpAsVHa+eRTt9s58QaDRKkWxyPQ2/70p+df6y4h12Bbpx1W9ScjAljpizw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:13 2026 by rpki-client