Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/hRPNoluiOXxMcQbKQga4rZMV_fU.roa
File: hRPNoluiOXxMcQbKQga4rZMV_fU.roa (raw, json)
Hash identifier: B93EnBM7j6dqXkgSTXl4tJkyDThMIWMUyU4+3kb8KA8=
Subject key identifier: 85:13:CD:A2:5B:A2:39:7C:4C:71:06:CA:42:06:B8:AD:93:15:FD:F5
Certificate issuer: /CN=3da03a173049bf485071c0fc0263ef6f40add54a
Certificate serial: 01A15E68F55DBB8C59492CA99A07258955DC
Authority key identifier: 3D:A0:3A:17:30:49:BF:48:50:71:C0:FC:02:63:EF:6F:40:AD:D5:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/hRPNoluiOXxMcQbKQga4rZMV_fU.roa
Signing time: Wed 21 Oct 2026 12:21:39 +0000
ROA not before: Wed 21 Oct 2026 12:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218431
IP address blocks: 2001:678:1368::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:68:f5:5d:bb:8c:59:49:2c:a9:9a:07:25:89:55:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da03a173049bf485071c0fc0263ef6f40add54a
Validity
Not Before: Oct 21 12:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8513cda25ba2397c4c7106ca4206b8ad9315fdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:74:fb:a6:10:4d:f2:4c:fe:a0:4e:de:1a:
66:58:de:b5:5a:03:be:e2:1e:be:28:49:a7:db:c5:
73:1e:9e:3e:fb:37:2c:02:da:7b:eb:d7:5c:ba:4b:
a7:d6:d3:54:45:df:d6:7a:43:fd:13:63:58:d9:75:
72:4e:f2:9a:21:e2:f9:b2:5a:21:6f:ac:95:9f:0d:
dd:bb:66:f4:37:1b:0e:3d:d6:e6:ef:0e:12:0b:be:
5a:f1:03:0e:74:56:bd:82:c5:13:42:64:86:0b:ea:
e5:7a:22:a2:5c:a9:a8:f3:e6:eb:db:20:18:b6:fd:
8d:c3:d0:3a:4d:7e:1e:f6:d6:eb:ff:f8:eb:72:cf:
cb:47:58:09:f5:d3:95:94:6c:74:0b:fb:82:a8:aa:
51:1d:1d:1b:37:39:98:6a:4c:26:54:6c:ae:73:55:
5d:59:fe:d2:e1:55:5b:eb:39:39:dc:34:4f:a8:67:
6c:7e:8c:9d:6f:84:10:26:46:8f:b5:b3:ab:42:4a:
8e:18:a4:e3:10:25:d5:10:d6:8c:5e:65:9e:c5:3b:
9f:5d:1b:da:a5:e7:10:63:b8:83:55:43:4a:80:33:
b6:0b:96:a2:88:2e:ba:ed:e5:4f:57:7c:17:8f:6e:
c8:a8:5c:5e:ea:6a:15:95:66:ab:08:e4:48:5c:8c:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:13:CD:A2:5B:A2:39:7C:4C:71:06:CA:42:06:B8:AD:93:15:FD:F5
X509v3 Authority Key Identifier:
keyid:3D:A0:3A:17:30:49:BF:48:50:71:C0:FC:02:63:EF:6F:40:AD:D5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/hRPNoluiOXxMcQbKQga4rZMV_fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ae925-5caa-4a80-abec-0c10df8ab9eb/1/PaA6FzBJv0hQccD8AmPvb0Ct1Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1368::/48
Signature Algorithm: sha256WithRSAEncryption
34:52:18:91:4c:0e:7f:cb:45:3c:a5:d3:b0:9a:9f:b1:c5:2c:
5e:1e:4b:8f:93:f1:c8:35:55:a2:7d:6e:dc:d3:4a:6d:6a:c8:
5d:f8:1f:bb:6f:ab:45:d7:58:c5:0d:3e:02:f7:7c:4e:a5:4c:
65:a0:24:1a:c4:89:60:60:d8:79:8f:ee:2e:a5:10:06:43:f0:
4b:7e:1a:13:43:02:f2:16:64:39:1f:de:14:b5:76:97:55:fa:
71:1b:5c:1a:fc:8e:a7:27:3e:44:55:20:1e:25:1b:9c:4f:5c:
af:a6:ca:c1:d6:ef:de:c8:93:cc:cc:b9:84:51:c8:39:c5:75:
b7:4f:2a:61:23:ef:7b:f0:11:56:22:52:f5:38:98:0b:b1:0d:
e3:33:cc:5a:21:5e:d6:35:27:22:50:61:c4:e2:f6:e3:be:07:
ef:39:e9:c1:21:4e:0d:d3:22:48:fd:0e:3a:14:b3:15:22:5a:
30:94:61:87:ff:f7:a7:6a:58:de:f7:eb:a0:69:52:16:66:57:
71:16:70:42:a0:e2:f7:cc:ec:d3:d4:8c:a5:65:bc:75:32:a6:
10:c8:b0:d0:34:c2:19:ae:0d:95:9a:de:97:9f:83:a4:35:28:
04:c3:c5:0d:1e:19:c1:7c:dd:14:b7:e6:aa:13:09:3f:df:72:
a9:a4:c5:0b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaFeaPVdu4xZSSypmgcliVXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTAzYTE3MzA0OWJmNDg1MDcxYzBmYzAyNjNlZjZmNDBh
ZGQ1NGEwHhcNMjYxMDIxMTIyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTEzY2RhMjViYTIzOTdjNGM3MTA2Y2E0MjA2YjhhZDkzMTVmZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKN0+6YQTfJM/qBO3hpmWN61WgO+
4h6+KEmn28VzHp4++zcsAtp769dcukun1tNURd/WekP9E2NY2XVyTvKaIeL5sloh
b6yVnw3du2b0NxsOPdbm7w4SC75a8QMOdFa9gsUTQmSGC+rleiKiXKmo8+br2yAY
tv2Nw9A6TX4e9tbr//jrcs/LR1gJ9dOVlGx0C/uCqKpRHR0bNzmYakwmVGyuc1Vd
Wf7S4VVb6zk53DRPqGdsfoydb4QQJkaPtbOrQkqOGKTjECXVENaMXmWexTufXRva
pecQY7iDVUNKgDO2C5aiiC667eVPV3wXj27IqFxe6moVlWarCORIXIzeVwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIUTzaJbojl8THEGykIGuK2TFf31MB8GA1UdIwQY
MBaAFD2gOhcwSb9IUHHA/AJj729ArdVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFBNkZ6Qkp2MGhRY2NEOEFtUHZiMEN0MVVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xYWU5MjUtNWNhYS00YTgwLWFiZWMt
MGMxMGRmOGFiOWViLzEvaFJQTm9sdWlPWHhNY1FiS1FnYTRyWk1WX2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xYWU5MjUtNWNhYS00YTgwLWFiZWMtMGMxMGRmOGFiOWVi
LzEvUGFBNkZ6Qkp2MGhRY2NEOEFtUHZiMEN0MVVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBNo
MA0GCSqGSIb3DQEBCwUAA4IBAQA0UhiRTA5/y0U8pdOwmp+xxSxeHkuPk/HINVWi
fW7c00ptashd+B+7b6tF11jFDT4C93xOpUxloCQaxIlgYNh5j+4upRAGQ/BLfhoT
QwLyFmQ5H94UtXaXVfpxG1wa/I6nJz5EVSAeJRucT1yvpsrB1u/eyJPMzLmEUcg5
xXW3TyphI+978BFWIlL1OJgLsQ3jM8xaIV7WNSciUGHE4vbjvgfvOenBIU4N0yJI
/Q46FLMVIlowlGGH//enalje9+ugaVIWZldxFnBCoOL3zOzT1IylZbx1MqYQyLDQ
NMIZrg2Vmt6Xn4OkNSgEw8UNHhnBfN0Ut+aqEwk/33KppMUL
-----END CERTIFICATE-----
Generated at Mon Nov 2 14:28:29 2026 by rpki-client