Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HdRmJic22LI9ZYMaf4eDZuwUE_4.roa
File: HdRmJic22LI9ZYMaf4eDZuwUE_4.roa (raw, json)
Hash identifier: L/iimAwMA+6KJeJIlhFIp+Yqg7l3AzgacJRZgq0yw2w=
Subject key identifier: 1D:D4:66:26:27:36:D8:B2:3D:65:83:1A:7F:87:83:66:EC:14:13:FE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A17796AC2DE25B7E1A1093002A07779354
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HdRmJic22LI9ZYMaf4eDZuwUE_4.roa
Signing time: Mon 26 Oct 2026 09:42:05 +0000
ROA not before: Mon 26 Oct 2026 09:42:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205170
IP address blocks: 2001:4030:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:96:ac:2d:e2:5b:7e:1a:10:93:00:2a:07:77:93:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 26 09:42:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dd466262736d8b23d65831a7f878366ec1413fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:40:98:60:9e:14:0a:2c:ae:2f:1f:1c:77:
a0:55:cf:10:f4:9e:ef:2f:71:57:97:bc:92:20:f0:
16:8b:70:31:3d:63:7f:3e:e4:a6:14:b5:86:99:66:
35:07:df:98:53:ef:e5:f9:41:8d:f5:e9:e1:65:b2:
ab:a5:25:f0:8a:84:f7:91:7f:cd:50:79:7f:8d:6b:
11:10:8d:4f:d3:cc:1a:b4:4d:5a:a5:18:f4:b9:44:
64:28:5b:e7:53:ac:88:62:df:81:aa:0c:83:82:aa:
a2:90:f5:60:89:3d:54:c7:5c:6f:78:b8:a2:ed:3f:
1d:33:f8:69:56:3b:4e:37:26:9c:92:44:67:e3:a8:
3f:61:eb:bf:23:05:6d:10:e1:01:16:66:1d:fb:fb:
f7:8b:17:9f:e3:85:d5:0e:54:fa:f3:26:84:a5:8c:
c7:a8:7d:77:4a:d7:b4:ce:46:1f:cc:6d:ca:29:62:
b8:88:47:3e:63:9d:28:0a:8b:a9:8e:d0:a2:be:6d:
bd:2a:3c:33:0b:a4:53:d6:ee:79:75:03:8e:07:0c:
df:e0:b3:25:7a:c8:96:41:a9:56:9d:ac:ea:7a:bd:
34:ad:0a:cb:36:8d:fb:71:92:27:91:2f:d1:f9:e6:
76:fe:e0:db:45:f7:85:6e:b6:04:b5:65:cf:54:27:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:66:26:27:36:D8:B2:3D:65:83:1A:7F:87:83:66:EC:14:13:FE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HdRmJic22LI9ZYMaf4eDZuwUE_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4030:8000::/33
Signature Algorithm: sha256WithRSAEncryption
0d:c6:16:b4:d8:8a:f6:af:0f:46:00:b9:45:ea:4d:fc:61:e5:
22:7d:c2:8a:b1:30:24:bb:47:9e:31:01:56:6c:8c:fe:89:8e:
67:d7:bb:5d:18:56:ef:a2:91:d9:32:b6:7c:6b:72:bb:99:3d:
d6:28:bb:de:4a:a2:d4:50:38:67:4a:b9:5b:c0:cc:aa:37:6f:
7e:3b:5d:07:0e:5d:9b:56:4c:94:e8:53:73:45:f7:85:02:74:
b8:81:d6:7b:a7:0f:38:01:bf:53:3e:85:79:64:67:f9:d0:04:
65:1b:f2:1b:52:f7:bb:46:0d:82:60:6a:8d:94:ff:fa:a4:c9:
58:3b:7e:a2:c4:7d:2f:8b:6e:0f:c3:b8:6d:11:26:97:9e:75:
70:a5:fc:62:1d:77:a7:a3:9c:3b:c5:de:b1:62:08:e4:27:f1:
15:6b:a1:76:6f:72:38:3a:ee:fa:ca:ea:17:db:4e:03:56:f9:
2a:44:0a:30:51:54:9b:d0:21:e5:22:3e:fb:e4:2a:bf:a7:e3:
bd:6f:90:3c:57:01:26:2d:ae:db:73:73:47:23:a4:38:bb:28:
ca:11:aa:87:27:ea:57:59:60:ed:a9:7d:92:71:27:26:84:c4:
88:6e:71:f7:b5:83:85:cc:f8:7a:9d:9a:8b:5c:58:a2:77:70:
76:c1:11:be
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaF3lqwt4lt+GhCTACoHd5NUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYxMDI2MDk0MjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGQ0NjYyNjI3MzZkOGIyM2Q2NTgzMWE3Zjg3ODM2NmVjMTQxM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzRAmGCeFAosri8fHHegVc8Q9J7v
L3FXl7ySIPAWi3AxPWN/PuSmFLWGmWY1B9+YU+/l+UGN9enhZbKrpSXwioT3kX/N
UHl/jWsREI1P08watE1apRj0uURkKFvnU6yIYt+BqgyDgqqikPVgiT1Ux1xveLii
7T8dM/hpVjtONyackkRn46g/Yeu/IwVtEOEBFmYd+/v3ixef44XVDlT68yaEpYzH
qH13Ste0zkYfzG3KKWK4iEc+Y50oCoupjtCivm29KjwzC6RT1u55dQOOBwzf4LMl
esiWQalWnazqer00rQrLNo37cZInkS/R+eZ2/uDbRfeFbrYEtWXPVCcu4wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFB3UZiYnNtiyPWWDGn+Hg2bsFBP+MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvSGRSbUppYzIyTEk5WllNYWY0ZURadXdVRV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHIAFAMIAw
DQYJKoZIhvcNAQELBQADggEBAA3GFrTYivavD0YAuUXqTfxh5SJ9woqxMCS7R54x
AVZsjP6JjmfXu10YVu+ikdkytnxrcruZPdYou95KotRQOGdKuVvAzKo3b347XQcO
XZtWTJToU3NF94UCdLiB1nunDzgBv1M+hXlkZ/nQBGUb8htS97tGDYJgao2U//qk
yVg7fqLEfS+Lbg/DuG0RJpeedXCl/GIdd6ejnDvF3rFiCOQn8RVroXZvcjg67vrK
6hfbTgNW+SpECjBRVJvQIeUiPvvkKr+n471vkDxXASYtrttzc0cjpDi7KMoRqocn
6ldZYO2pfZJxJyaExIhucfe1g4XM+HqdmotcWKJ3cHbBEb4=
-----END CERTIFICATE-----
Generated at Thu Oct 29 08:38:20 2026 by rpki-client