Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/V65EM35fOOQyLpY-E34bGPsze3I.roa
File: V65EM35fOOQyLpY-E34bGPsze3I.roa (raw, json)
Hash identifier: WBS7hLQvA8ERDZBxyndg/aLfHJyEfhq623pnd15n2VI=
Subject key identifier: 57:AE:44:33:7E:5F:38:E4:32:2E:96:3E:13:7E:1B:18:FB:33:7B:72
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A1260C3087993F9C104356A05A3D1BBF82
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/V65EM35fOOQyLpY-E34bGPsze3I.roa
Signing time: Sat 10 Oct 2026 13:41:35 +0000
ROA not before: Sat 10 Oct 2026 13:41:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218876
IP address blocks: 2a0e:4007:100::/40 maxlen: 40
2a0e:4007:1f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:0c:30:87:99:3f:9c:10:43:56:a0:5a:3d:1b:bf:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 10 13:41:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57ae44337e5f38e4322e963e137e1b18fb337b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:4f:fe:ed:2a:50:17:fc:99:3f:aa:93:b9:
d1:8a:50:d2:5d:50:f9:39:d0:87:71:60:e6:3c:38:
1b:68:a3:36:02:d9:43:a9:4c:b6:a5:15:05:9d:47:
61:bd:35:68:30:ad:ee:7e:d5:a5:e0:c3:28:ce:36:
bf:52:b3:82:68:c7:ff:ad:24:38:dc:0e:b2:2c:66:
c3:00:cd:3e:9e:cc:96:49:5d:35:8b:34:84:92:b8:
c5:f7:f7:ae:5e:4c:f4:1c:cd:fd:65:84:2b:66:91:
e8:29:93:ec:5c:4e:25:e4:67:dd:bd:3a:9f:87:eb:
e7:fe:0a:46:6f:1f:c8:a2:9c:b9:23:dd:c7:c0:74:
52:a8:4e:38:d0:f7:33:35:f5:0f:88:56:fb:12:cb:
31:55:51:23:17:ed:31:15:a6:88:4c:4e:eb:61:15:
b5:d7:49:67:2f:bd:f0:05:c8:f4:0b:ef:cd:83:df:
dc:1a:ed:b4:19:83:98:88:cc:c0:8b:26:6a:a2:61:
41:f9:7a:e2:b3:cd:b3:76:be:f0:35:bb:70:e0:6b:
a5:c7:5b:77:9c:93:6b:36:19:33:08:70:39:d6:b3:
a8:b1:ae:ae:91:f9:2a:1a:bc:98:0f:ec:24:f3:b0:
fc:e2:0f:a9:b4:f8:89:e3:a2:1c:cb:11:12:fa:6d:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AE:44:33:7E:5F:38:E4:32:2E:96:3E:13:7E:1B:18:FB:33:7B:72
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/V65EM35fOOQyLpY-E34bGPsze3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4007:100::/40
2a0e:4007:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
7e:f4:38:62:9b:20:bb:ce:2e:45:e6:99:49:a7:c4:74:c9:41:
11:15:ee:b2:07:45:b7:8b:41:ea:b2:b4:34:ce:bb:ec:ca:a9:
8f:2e:f3:48:a1:2c:e4:15:99:60:75:31:1f:ac:2a:77:90:75:
2f:55:a2:c1:6c:ac:c1:17:46:4e:a3:9d:fa:0a:a1:98:e1:85:
eb:02:a6:11:d0:b3:85:0f:dd:f5:7e:40:0e:c7:46:55:d6:65:
3d:48:c5:90:d6:66:c0:dc:e9:8a:48:12:19:d7:65:e9:b0:9d:
be:08:0c:2b:50:6e:53:d4:ef:a8:9f:fe:61:e4:fa:5b:10:06:
4b:3a:16:aa:69:b6:6a:e7:de:9d:41:f9:0d:9b:05:4b:32:5c:
a2:f2:d2:3d:b0:86:8b:60:c3:00:2e:d2:0e:7b:a8:67:32:da:
f0:d8:7b:25:ba:ce:2f:d1:ff:83:3f:25:cf:f0:d6:4a:e2:a0:
77:ef:21:f2:ec:ed:6c:e4:86:2c:2d:d3:f3:5d:c3:5b:93:08:
64:ba:11:7c:ba:65:39:b8:e6:58:fb:77:c4:95:a3:76:70:56:
b6:6c:4d:67:e2:ba:b4:4f:a0:3a:b1:80:d2:39:83:fe:d8:d8:
52:ee:e6:e2:4f:75:f8:a5:3f:88:7d:7c:6f:ab:81:98:b9:a1:
b6:57:27:f2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAaEmDDCHmT+cEENWoFo9G7+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYxMDEwMTM0MTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2FlNDQzMzdlNWYzOGU0MzIyZTk2M2UxMzdlMWIxOGZiMzM3YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkhP/u0qUBf8mT+qk7nRilDSXVD5
OdCHcWDmPDgbaKM2AtlDqUy2pRUFnUdhvTVoMK3uftWl4MMozja/UrOCaMf/rSQ4
3A6yLGbDAM0+nsyWSV01izSEkrjF9/euXkz0HM39ZYQrZpHoKZPsXE4l5GfdvTqf
h+vn/gpGbx/Iopy5I93HwHRSqE440PczNfUPiFb7EssxVVEjF+0xFaaITE7rYRW1
10lnL73wBcj0C+/Ng9/cGu20GYOYiMzAiyZqomFB+Xris82zdr7wNbtw4Gulx1t3
nJNrNhkzCHA51rOosa6ukfkqGryYD+wk87D84g+ptPiJ46IcyxES+m0NawIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFFeuRDN+XzjkMi6WPhN+Gxj7M3tyMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvVjY1RU0zNWZPT1F5THBZLUUzNGJHUHN6ZTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKg5ABwED
BgAqDkAHHzANBgkqhkiG9w0BAQsFAAOCAQEAfvQ4Ypsgu84uReaZSafEdMlBERXu
sgdFt4tB6rK0NM677Mqpjy7zSKEs5BWZYHUxH6wqd5B1L1WiwWyswRdGTqOd+gqh
mOGF6wKmEdCzhQ/d9X5ADsdGVdZlPUjFkNZmwNzpikgSGddl6bCdvggMK1BuU9Tv
qJ/+YeT6WxAGSzoWqmm2aufenUH5DZsFSzJcovLSPbCGi2DDAC7SDnuoZzLa8Nh7
JbrOL9H/gz8lz/DWSuKgd+8h8uztbOSGLC3T813DW5MIZLoRfLplObjmWPt3xJWj
dnBWtmxNZ+K6tE+gOrGA0jmD/tjYUu7m4k91+KU/iH18b6uBmLmhtlcn8g==
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:56 2026 by rpki-client