Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/RLYmn3KzWEjiHkLRDVSUMKvdmYI.roa
File: RLYmn3KzWEjiHkLRDVSUMKvdmYI.roa (raw, json)
Hash identifier: xzNlu6pY9/ZAY7vFZPhiq0mdEfvBQz5vlOUrbKjOclM=
Subject key identifier: 44:B6:26:9F:72:B3:58:48:E2:1E:42:D1:0D:54:94:30:AB:DD:99:82
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019FF2311697C7FA6B1C958C77B28DC904B6
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/RLYmn3KzWEjiHkLRDVSUMKvdmYI.roa
Signing time: Tue 11 Aug 2026 18:58:51 +0000
ROA not before: Tue 11 Aug 2026 18:58:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 2a09:bb00::/29 maxlen: 29
2a0e:4fc0::/29 maxlen: 29
2a0e:5381::/32 maxlen: 32
2a0e:8080::/32 maxlen: 32
2a0f:6fc1::/32 maxlen: 32
2a0f:6fc3::/32 maxlen: 32
2a0f:6fc4::/32 maxlen: 32
2a0f:b4c0::/32 maxlen: 32
2a0f:b4c1::/32 maxlen: 32
2a0f:b4c2::/32 maxlen: 32
2a0f:c080::/32 maxlen: 32
2a0f:c081::/32 maxlen: 32
2a14:e602::/32 maxlen: 32
2a14:e604::/32 maxlen: 32
2a14:e606::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 12:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:31:16:97:c7:fa:6b:1c:95:8c:77:b2:8d:c9:04:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Aug 11 18:58:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44b6269f72b35848e21e42d10d549430abdd9982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:26:32:98:ac:43:03:11:a7:a5:c5:51:79:
e4:1a:40:80:36:cb:c4:96:b1:81:44:2e:5c:70:ee:
49:e6:eb:0a:69:d1:20:72:90:b5:b7:7b:3d:1a:8f:
98:65:f9:e5:c8:18:26:85:da:2d:ff:5d:28:f5:b7:
b7:d7:87:ca:54:f3:2c:e4:68:a9:ee:70:28:33:69:
28:ac:c8:37:6f:0f:8b:11:24:63:d3:ef:4f:51:e4:
a1:0c:52:11:58:68:b0:59:fc:1d:2b:a7:39:00:27:
15:2a:f2:46:1b:d5:0e:cc:2c:c9:b6:a0:62:2c:8a:
e4:18:76:71:17:00:cf:26:db:46:86:bd:33:27:82:
eb:cf:c9:41:59:be:80:44:c3:93:d6:43:a8:ca:45:
7c:70:8d:2c:00:1d:03:bf:cc:6a:86:6d:86:db:08:
94:d7:4c:d1:fe:65:01:b8:c7:99:d3:a4:7f:7b:54:
9c:c6:3e:42:c6:58:a1:af:f4:f6:37:52:e2:64:0e:
dd:ae:bc:f9:98:8d:48:12:cf:28:88:d5:4e:1d:a8:
5c:25:81:33:a2:73:80:15:4e:66:46:e0:2b:45:8c:
97:9f:c1:a7:ff:c3:d3:4a:4b:b4:31:0d:05:e2:3d:
76:8d:05:46:fe:2e:91:87:14:34:ce:96:30:a7:ec:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B6:26:9F:72:B3:58:48:E2:1E:42:D1:0D:54:94:30:AB:DD:99:82
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/RLYmn3KzWEjiHkLRDVSUMKvdmYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bb00::/29
2a0e:4fc0::/29
2a0e:5381::/32
2a0e:8080::/32
2a0f:6fc1::/32
2a0f:6fc3::-2a0f:6fc4:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:b4c0::-2a0f:b4c2:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:c080::/31
2a14:e602::/32
2a14:e604::/32
2a14:e606::/32
Signature Algorithm: sha256WithRSAEncryption
58:ff:8d:dd:eb:26:eb:de:87:f9:eb:9f:34:f5:ae:73:13:20:
9a:16:c0:19:65:2e:66:c2:22:8b:98:f7:79:0c:c4:71:c1:ea:
14:5c:27:4b:9f:0b:56:c4:93:85:70:d1:8f:ab:57:19:1c:a0:
46:fa:92:7a:41:47:b5:0b:f5:12:69:6f:dc:34:12:24:0f:c7:
5e:49:2e:cd:e8:11:24:7b:75:67:17:73:f6:27:8d:c5:01:58:
20:4d:49:50:1b:39:ad:7f:14:2b:9c:ca:a9:c0:25:cd:b3:04:
0e:6c:dd:f8:c2:9f:54:28:5a:b8:00:24:00:14:cd:00:76:97:
d4:8d:2b:3f:e4:7d:6a:02:57:91:a1:13:e2:96:66:91:c9:58:
bc:91:9c:cd:34:cb:60:16:c9:b8:0e:7b:c7:fc:67:24:df:37:
6f:2d:9a:3a:df:33:03:42:cb:3f:b6:3a:99:f2:20:b8:83:cf:
6b:92:06:58:34:82:5a:6e:07:e4:63:62:02:10:d1:bf:8f:55:
63:af:d8:15:e2:4d:c3:cb:c7:e4:51:3c:d6:09:c8:ac:5f:87:
00:cd:c2:c2:02:c5:f6:29:0e:ce:f3:3c:21:c4:10:80:80:08:
c9:dd:21:43:5d:a1:9a:21:01:67:71:af:fe:6a:d5:80:0e:05:
9e:56:47:23
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZ/yMRaXx/prHJWMd7KNyQS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy
MWY2OTAwHhcNMjYwODExMTg1ODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGI2MjY5ZjcyYjM1ODQ4ZTIxZTQyZDEwZDU0OTQzMGFiZGQ5OTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxQmMpisQwMRp6XFUXnkGkCANsvE
lrGBRC5ccO5J5usKadEgcpC1t3s9Go+YZfnlyBgmhdot/10o9be314fKVPMs5Gip
7nAoM2korMg3bw+LESRj0+9PUeShDFIRWGiwWfwdK6c5ACcVKvJGG9UOzCzJtqBi
LIrkGHZxFwDPJttGhr0zJ4Lrz8lBWb6ARMOT1kOoykV8cI0sAB0Dv8xqhm2G2wiU
10zR/mUBuMeZ06R/e1Scxj5Cxlihr/T2N1LiZA7drrz5mI1IEs8oiNVOHahcJYEz
onOAFU5mRuArRYyXn8Gn/8PTSku0MQ0F4j12jQVG/i6RhxQ0zpYwp+y3KwIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFES2Jp9ys1hI4h5C0Q1UlDCr3ZmCMB8GA1UdIwQY
MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt
NThmMWNiZjNjYWMzLzEvUkxZbW4zS3pXRWppSGtMUkRWU1VNS3ZkbVlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz
LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBlBAIAAjBfAwUDKgm7AAMF
AyoOT8ADBQAqDlOBAwUAKg6AgAMFACoPb8EwDgMFACoPb8MDBQAqD2/EMA4DBQYq
D7TAAwUAKg+0wgMFASoPwIADBQAqFOYCAwUAKhTmBAMFACoU5gYwDQYJKoZIhvcN
AQELBQADggEBAFj/jd3rJuveh/nrnzT1rnMTIJoWwBllLmbCIouY93kMxHHB6hRc
J0ufC1bEk4Vw0Y+rVxkcoEb6knpBR7UL9RJpb9w0EiQPx15JLs3oESR7dWcXc/Yn
jcUBWCBNSVAbOa1/FCucyqnAJc2zBA5s3fjCn1QoWrgAJAAUzQB2l9SNKz/kfWoC
V5GhE+KWZpHJWLyRnM00y2AWybgOe8f8ZyTfN28tmjrfMwNCyz+2OpnyILiDz2uS
Blg0glpuB+RjYgIQ0b+PVWOv2BXiTcPLx+RRPNYJyKxfhwDNwsICxfYpDs7zPCHE
EICACMndIUNdoZohAWdxr/5q1YAOBZ5WRyM=
-----END CERTIFICATE-----
Generated at Wed Aug 12 19:23:25 2026 by rpki-client