Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/IysZA3MLX2ZvO0KleomY7IPYa0Y.roa
File: IysZA3MLX2ZvO0KleomY7IPYa0Y.roa (raw, json)
Hash identifier: bJ8QUh9i9KG4qjAdJBbyeKXtAo2Wxax62J362DNjcHM=
Subject key identifier: 23:2B:19:03:73:0B:5F:66:6F:3B:42:A5:7A:89:98:EC:83:D8:6B:46
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A13BC697F1258A1756B466BEBC65E579C4
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/IysZA3MLX2ZvO0KleomY7IPYa0Y.roa
Signing time: Wed 14 Oct 2026 18:57:13 +0000
ROA not before: Wed 14 Oct 2026 18:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2a14:1040::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c6:97:f1:25:8a:17:56:b4:66:be:bc:65:e5:79:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Oct 14 18:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=232b1903730b5f666f3b42a57a8998ec83d86b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:01:c1:b5:c4:d2:c8:67:ee:cb:60:d6:0e:
59:b3:51:0a:6d:be:e4:12:54:09:97:1b:ad:ae:e2:
f0:3f:2a:e1:dd:c9:30:05:07:e4:db:8d:1e:21:36:
41:fe:bb:49:e2:6d:9e:03:e8:24:4c:e3:ea:c7:12:
eb:98:f1:70:bc:bc:7a:ab:f2:de:83:0b:32:41:aa:
6a:fa:30:92:57:a6:19:07:bd:f1:1a:11:83:3d:a1:
af:03:51:37:15:68:cf:61:9c:f2:d7:66:04:c2:cb:
40:9c:4d:57:e4:c4:d5:e2:38:ad:ea:cc:4b:fa:08:
24:fd:7f:81:3e:aa:89:9d:01:81:dc:e9:e5:64:32:
4c:f9:ce:5b:e1:79:e3:17:1b:69:5a:e5:2a:31:c5:
26:72:c8:a9:0e:d3:1e:d3:cb:71:96:6b:81:c1:dd:
88:f8:21:0e:6a:81:e8:fa:98:61:b9:f6:a5:dc:47:
6b:2f:8b:16:87:f4:4e:c9:58:2e:7c:51:cd:94:4c:
eb:48:c1:86:77:ac:a4:1e:47:d8:71:1b:cd:37:45:
2a:9b:a8:42:c3:e8:cc:36:f2:fb:02:b4:be:b1:98:
02:c3:55:ec:c6:28:2e:12:05:9e:f4:0a:96:56:14:
aa:c7:68:fc:76:c2:05:3d:2d:9e:03:96:6f:e8:c5:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:19:03:73:0B:5F:66:6F:3B:42:A5:7A:89:98:EC:83:D8:6B:46
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/IysZA3MLX2ZvO0KleomY7IPYa0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1040::/29
Signature Algorithm: sha256WithRSAEncryption
0d:77:a5:46:9e:5d:13:dd:a3:37:be:24:f2:11:61:8c:fd:ea:
55:40:aa:da:ea:6a:90:f0:b2:73:58:63:ca:e1:36:4e:15:a0:
9c:20:07:ec:38:de:7f:4d:22:c5:5f:ed:58:f8:bd:6b:e5:cd:
da:3c:30:1d:80:83:ec:47:2b:7a:d6:b4:6e:21:13:c3:9e:9a:
e0:30:d6:25:43:5b:2d:a2:eb:a3:fa:13:af:f6:81:f1:c1:11:
b4:ff:85:f9:57:ac:98:6a:f9:62:46:da:fa:13:f5:72:5d:21:
c8:06:12:d4:6e:0c:0b:22:a6:d6:dc:7c:ad:dd:a0:1c:c1:ad:
9f:a6:1f:3b:93:0d:9d:08:8b:e5:b2:71:1a:3d:50:18:bb:5c:
ee:16:06:bb:b5:5e:e7:0a:c5:2d:40:65:63:5a:b5:4a:47:ce:
56:90:70:44:b4:42:77:c5:d3:5e:3d:61:88:d0:32:66:ab:11:
07:06:5d:57:a7:87:60:73:aa:20:9a:29:22:04:27:91:80:68:
ce:39:58:2a:0d:67:5d:87:99:87:1d:4c:71:0d:e7:ce:28:e7:
c4:c1:37:3c:6f:31:33:f8:f9:92:96:ff:8f:6d:4d:e9:43:0d:
0e:2a:f1:eb:c9:8f:06:35:e6:26:23:e2:8a:81:b7:08:d1:2a:
58:c2:58:83
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE7xpfxJYoXVrRmvrxl5XnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjYxMDE0MTg1NzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzJiMTkwMzczMGI1ZjY2NmYzYjQyYTU3YTg5OThlYzgzZDg2YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx84BwbXE0shn7stg1g5Zs1EKbb7k
ElQJlxutruLwPyrh3ckwBQfk240eITZB/rtJ4m2eA+gkTOPqxxLrmPFwvLx6q/Le
gwsyQapq+jCSV6YZB73xGhGDPaGvA1E3FWjPYZzy12YEwstAnE1X5MTV4jit6sxL
+ggk/X+BPqqJnQGB3OnlZDJM+c5b4XnjFxtpWuUqMcUmcsipDtMe08txlmuBwd2I
+CEOaoHo+phhufal3EdrL4sWh/ROyVgufFHNlEzrSMGGd6ykHkfYcRvNN0Uqm6hC
w+jMNvL7ArS+sZgCw1XsxiguEgWe9AqWVhSqx2j8dsIFPS2eA5Zv6MWhUwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCMrGQNzC19mbztCpXqJmOyD2GtGMB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvSXlzWkEzTUxYMlp2TzBLbGVvbVk3SVBZYTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQQQDAN
BgkqhkiG9w0BAQsFAAOCAQEADXelRp5dE92jN74k8hFhjP3qVUCq2upqkPCyc1hj
yuE2ThWgnCAH7Djef00ixV/tWPi9a+XN2jwwHYCD7Ecreta0biETw56a4DDWJUNb
LaLro/oTr/aB8cERtP+F+VesmGr5Ykba+hP1cl0hyAYS1G4MCyKm1tx8rd2gHMGt
n6YfO5MNnQiL5bJxGj1QGLtc7hYGu7Ve5wrFLUBlY1q1SkfOVpBwRLRCd8XTXj1h
iNAyZqsRBwZdV6eHYHOqIJopIgQnkYBozjlYKg1nXYeZhx1McQ3nzijnxME3PG8x
M/j5kpb/j21N6UMNDirx68mPBjXmJiPiioG3CNEqWMJYgw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 23:56:50 2026 by rpki-client