Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/trZSzJ-xXi2nM88WYpE4US6Sgo4.roa
File: trZSzJ-xXi2nM88WYpE4US6Sgo4.roa (raw, json)
Hash identifier: YoKYGUZ//wtLJwZDZogQeONuUBkHCTL/cs1R4arwmAE=
Subject key identifier: B6:B6:52:CC:9F:B1:5E:2D:A7:33:CF:16:62:91:38:51:2E:92:82:8E
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 01A1413C64C21FDFD1532B23947F94060291
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/trZSzJ-xXi2nM88WYpE4US6Sgo4.roa
Signing time: Thu 15 Oct 2026 20:23:59 +0000
ROA not before: Thu 15 Oct 2026 20:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a04:8cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:3c:64:c2:1f:df:d1:53:2b:23:94:7f:94:06:02:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Oct 15 20:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6b652cc9fb15e2da733cf16629138512e92828e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:c2:05:a6:80:58:a1:a5:0b:6f:65:01:39:
c8:cc:db:d6:44:ea:de:2b:a1:78:8e:72:c0:b9:bb:
ef:94:c0:50:d8:47:9e:9b:a6:b7:c8:3b:8b:32:06:
75:ef:8e:75:c2:87:aa:1a:19:ad:cc:83:14:5a:81:
ef:6b:b9:c1:71:8f:f1:46:ab:6c:86:0c:0f:7e:02:
03:3b:7b:2e:d8:d1:c8:29:d7:66:44:27:c7:38:7f:
e7:3a:62:36:0f:3d:b2:ed:c7:3c:f6:9c:b0:16:a3:
de:76:f4:81:da:62:2c:07:3e:0a:13:86:f6:2b:30:
63:a7:9e:41:64:30:a2:d6:08:2d:bc:da:8d:99:95:
9b:e4:3e:35:9a:31:e9:1a:46:73:95:70:d9:2a:28:
0d:17:90:70:21:7b:56:b7:25:fb:ff:83:f4:43:18:
53:81:f0:44:33:69:b5:e6:54:6d:6b:40:fc:5c:af:
ec:35:a4:96:62:fd:98:03:bc:a2:61:be:b9:f7:5f:
1b:e7:49:91:7c:1a:bd:8a:b2:71:e3:82:b1:ef:a6:
8a:31:2f:b7:fe:34:6e:de:45:50:9c:79:a3:2c:1e:
9b:41:7f:0d:ad:ca:18:48:2c:1b:2c:76:9c:8d:bd:
f8:10:b5:a8:10:ab:60:49:49:eb:e3:04:67:d1:a6:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B6:52:CC:9F:B1:5E:2D:A7:33:CF:16:62:91:38:51:2E:92:82:8E
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/trZSzJ-xXi2nM88WYpE4US6Sgo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:8cc0::/29
Signature Algorithm: sha256WithRSAEncryption
18:78:8c:45:ed:9a:62:f2:bd:8c:3b:9e:5f:66:08:d0:23:57:
09:e6:62:e6:2b:fc:c4:4c:1a:84:b0:85:7e:23:fc:a9:ff:75:
97:14:e4:61:23:65:ad:83:17:61:4b:fc:b1:eb:a2:8b:92:19:
19:de:bd:73:99:19:52:cd:e3:68:e8:0f:32:09:23:04:d8:b2:
ed:39:53:81:81:d6:7f:2c:5a:f8:99:73:a5:19:ee:64:6a:c9:
29:26:5a:58:74:23:a4:5d:fd:60:89:74:27:20:92:d7:91:4c:
6d:b5:41:6d:b3:6a:1f:73:1e:d9:d2:99:d6:cb:15:28:00:12:
c8:f9:b7:92:36:bf:a4:c3:c8:fb:e6:bf:39:b4:87:53:f7:f1:
2f:9a:43:ca:5d:93:4c:6a:22:31:55:6f:f4:cf:21:38:06:9a:
85:25:44:90:f1:23:d3:c2:ec:4b:b4:18:9d:57:1f:ce:fe:8f:
ea:f2:9b:35:2e:55:b3:48:3c:9c:c3:12:42:54:33:4f:5f:d5:
aa:83:a2:92:e1:31:ee:51:a3:6b:49:e1:a2:0d:f2:87:52:a8:
60:7a:65:c5:0e:ce:43:62:1a:51:6a:2d:5b:cf:77:b7:33:f2:
48:17:90:74:17:8e:7e:23:6b:93:c6:42:2c:9e:9d:fe:3c:28:
fd:c2:c9:61
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaFBPGTCH9/RUysjlH+UBgKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWY5MjVlMTczOGJjMzUyYmM2YjVjZjVmZjk1MWIzZDgx
M2FlMzkwHhcNMjYxMDE1MjAyMzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmI2NTJjYzlmYjE1ZTJkYTczM2NmMTY2MjkxMzg1MTJlOTI4MjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZTCBaaAWKGlC29lATnIzNvWROre
K6F4jnLAubvvlMBQ2Eeem6a3yDuLMgZ17451woeqGhmtzIMUWoHva7nBcY/xRqts
hgwPfgIDO3su2NHIKddmRCfHOH/nOmI2Dz2y7cc89pywFqPedvSB2mIsBz4KE4b2
KzBjp55BZDCi1ggtvNqNmZWb5D41mjHpGkZzlXDZKigNF5BwIXtWtyX7/4P0QxhT
gfBEM2m15lRta0D8XK/sNaSWYv2YA7yiYb65918b50mRfBq9irJx44Kx76aKMS+3
/jRu3kVQnHmjLB6bQX8NrcoYSCwbLHacjb34ELWoEKtgSUnr4wRn0aZtCwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLa2UsyfsV4tpzPPFmKROFEukoKOMB8GA1UdIwQY
MBaAFNefkl4XOLw1K8a1z1/5UbPYE645MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjIt
OTZhMzRiMDIyZjg5LzEvdHJaU3pKLXhYaTJuTTg4V1lwRTRVUzZTZ280LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjItOTZhMzRiMDIyZjg5
LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgSMwDAN
BgkqhkiG9w0BAQsFAAOCAQEAGHiMRe2aYvK9jDueX2YI0CNXCeZi5iv8xEwahLCF
fiP8qf91lxTkYSNlrYMXYUv8seuii5IZGd69c5kZUs3jaOgPMgkjBNiy7TlTgYHW
fyxa+JlzpRnuZGrJKSZaWHQjpF39YIl0JyCS15FMbbVBbbNqH3Me2dKZ1ssVKAAS
yPm3kja/pMPI++a/ObSHU/fxL5pDyl2TTGoiMVVv9M8hOAaahSVEkPEj08LsS7QY
nVcfzv6P6vKbNS5Vs0g8nMMSQlQzT1/VqoOikuEx7lGja0nhog3yh1KoYHplxQ7O
Q2IaUWotW893tzPySBeQdBeOfiNrk8ZCLJ6d/jwo/cLJYQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:34 2026 by rpki-client