Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/s-l1K6n-Dq-c-W13L4taLbNrba8.roa
File: s-l1K6n-Dq-c-W13L4taLbNrba8.roa (raw, json)
Hash identifier: XXcUV02lcrNf1Elz+XrEzMo/1+t5L9EpOYNoooqluDA=
Subject key identifier: B3:E9:75:2B:A9:FE:0E:AF:9C:F9:6D:77:2F:8B:5A:2D:B3:6B:6D:AF
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019F47F5E07E5EC835AE435F61F2BCB66F2A
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/s-l1K6n-Dq-c-W13L4taLbNrba8.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a09:440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:7e:5e:c8:35:ae:43:5f:61:f2:bc:b6:6f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3e9752ba9fe0eaf9cf96d772f8b5a2db36b6daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:2f:03:16:cd:ab:76:3a:8e:5d:7a:4e:da:
7f:87:fc:8f:15:6f:80:3a:27:c8:7a:30:2f:cd:00:
87:09:a1:49:a8:16:1b:8e:19:e1:f8:68:92:7c:0c:
b3:08:ae:46:7b:a7:a2:3c:14:63:e0:70:e6:4b:22:
9b:9d:e7:6d:d7:30:72:c8:76:d3:dc:90:05:d2:55:
05:d9:cc:a0:1f:df:ca:86:9e:4b:36:31:27:c9:14:
e8:0a:a2:79:18:34:66:21:e3:b3:c4:85:26:2f:bb:
81:22:86:9e:a4:71:1d:60:5b:e0:94:94:df:9b:f3:
00:a6:0e:71:ce:9c:af:5e:ff:fc:22:d0:18:d3:aa:
3d:e3:bb:9f:85:9e:9c:11:6d:93:53:3f:15:e6:1d:
7c:32:da:39:59:13:a7:ec:49:47:4f:e9:59:ba:d6:
ba:1b:c8:8a:d3:aa:a2:28:7d:c8:e5:e5:1d:13:e8:
06:dc:e9:0b:3f:2c:d7:5d:52:e8:e4:f2:b7:e8:c8:
ec:af:80:1f:b7:44:3b:84:58:fd:3a:5f:6b:4a:75:
50:91:4e:a5:6b:6a:35:f4:21:2f:b1:8d:66:8d:dd:
b7:3a:3d:12:c5:56:e7:2e:c6:40:ce:ff:06:80:3c:
41:c0:53:4f:cf:21:bf:01:f7:9a:35:76:b5:36:b1:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:75:2B:A9:FE:0E:AF:9C:F9:6D:77:2F:8B:5A:2D:B3:6B:6D:AF
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/s-l1K6n-Dq-c-W13L4taLbNrba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:440::/29
Signature Algorithm: sha256WithRSAEncryption
62:1d:ec:d4:a7:da:fc:ea:1d:76:f2:4f:4e:29:60:b1:7e:4a:
ba:39:1c:b9:23:c9:63:03:39:03:7f:37:c5:15:bc:2e:69:79:
17:f4:24:60:57:e7:21:cc:d7:b9:e8:5a:0f:89:5f:01:dc:83:
8b:a8:fd:50:fd:bb:c1:b1:aa:c9:68:46:24:0c:e2:94:45:3c:
2c:4b:bb:1d:3e:84:75:58:c5:3b:94:e6:2f:4d:59:3f:e4:06:
d3:d0:53:1e:a8:a0:75:47:58:ff:fd:4e:20:73:27:b1:91:5d:
a9:c4:db:4a:14:b0:e6:9d:ee:ca:17:c0:f6:e1:08:6f:23:15:
40:89:af:fe:92:be:4e:e3:8d:3f:7b:71:1b:56:da:b5:73:b2:
dc:05:43:7b:c4:d0:af:27:a9:be:86:dc:ad:40:7b:66:60:7d:
dc:c6:a9:b6:af:85:7b:ff:d1:20:07:44:d9:89:af:09:23:7b:
a3:44:c3:7c:78:95:97:8c:f7:b6:23:0a:a7:fc:c5:87:0c:0d:
08:d3:37:e7:d9:94:40:f5:c4:cb:6e:78:e6:34:17:5c:6d:e9:
25:dd:b5:1e:5b:ee:f8:b3:0c:97:0b:a9:fc:12:8a:30:a7:f0:
fc:bc:9b:e5:c2:01:94:0f:08:06:50:1e:73:06:70:86:ef:1b:
1a:be:aa:bf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9H9eB+Xsg1rkNfYfK8tm8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjYwNzA5MTczODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2U5NzUyYmE5ZmUwZWFmOWNmOTZkNzcyZjhiNWEyZGIzNmI2ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL0vAxbNq3Y6jl16Ttp/h/yPFW+A
OifIejAvzQCHCaFJqBYbjhnh+GiSfAyzCK5Ge6eiPBRj4HDmSyKbnedt1zByyHbT
3JAF0lUF2cygH9/Khp5LNjEnyRToCqJ5GDRmIeOzxIUmL7uBIoaepHEdYFvglJTf
m/MApg5xzpyvXv/8ItAY06o947ufhZ6cEW2TUz8V5h18Mto5WROn7ElHT+lZuta6
G8iK06qiKH3I5eUdE+gG3OkLPyzXXVLo5PK36Mjsr4Aft0Q7hFj9Ol9rSnVQkU6l
a2o19CEvsY1mjd23Oj0SxVbnLsZAzv8GgDxBwFNPzyG/AfeaNXa1NrG2SQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLPpdSup/g6vnPltdy+LWi2za22vMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvcy1sMUs2bi1EcS1jLVcxM0w0dGFMYk5yYmE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgkEQDAN
BgkqhkiG9w0BAQsFAAOCAQEAYh3s1Kfa/OoddvJPTilgsX5KujkcuSPJYwM5A383
xRW8Lml5F/QkYFfnIczXuehaD4lfAdyDi6j9UP27wbGqyWhGJAzilEU8LEu7HT6E
dVjFO5TmL01ZP+QG09BTHqigdUdY//1OIHMnsZFdqcTbShSw5p3uyhfA9uEIbyMV
QImv/pK+TuONP3txG1batXOy3AVDe8TQryepvobcrUB7ZmB93Maptq+Fe//RIAdE
2YmvCSN7o0TDfHiVl4z3tiMKp/zFhwwNCNM359mUQPXEy2545jQXXG3pJd21Hlvu
+LMMlwup/BKKMKfw/Lyb5cIBlA8IBlAecwZwhu8bGr6qvw==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:36:55 2026 by rpki-client