Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/0G-eLglQO5astEK_2JotMb_4mBM.roa
File: 0G-eLglQO5astEK_2JotMb_4mBM.roa (raw, json)
Hash identifier: tqkl2/97KdyMYxkSCjVwYnibP1ZUwHQIiCwlrzieqHY=
Subject key identifier: D0:6F:9E:2E:09:50:3B:96:AC:B4:42:BF:D8:9A:2D:31:BF:F8:98:13
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A11122589E241E1F15AB68004DC5B3B15C
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/0G-eLglQO5astEK_2JotMb_4mBM.roa
Signing time: Tue 06 Oct 2026 12:13:45 +0000
ROA not before: Tue 06 Oct 2026 12:13:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 2a0f:5581::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:22:58:9e:24:1e:1f:15:ab:68:00:4d:c5:b3:b1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 6 12:13:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d06f9e2e09503b96acb442bfd89a2d31bff89813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:f9:2a:12:5f:78:07:2d:e8:02:0c:f3:98:
22:18:d7:92:06:6b:88:d0:28:8a:b5:18:7c:de:fe:
b2:db:03:6d:88:f3:2e:da:ef:53:9e:b5:e9:18:22:
70:c3:d1:3b:92:74:d7:09:50:85:50:9e:86:bd:cf:
23:eb:06:ad:93:37:0d:bc:7d:7a:7c:3f:58:23:bd:
dd:06:27:fc:d7:6f:2c:03:5b:8b:1b:6e:f0:2e:49:
25:a3:61:9c:82:fb:f2:ff:18:74:81:6d:17:84:76:
c4:dd:2a:86:ef:89:f5:4d:91:45:43:26:56:20:c1:
92:4b:6c:07:b8:a4:3d:a9:3d:dd:ae:16:56:9f:fd:
c0:89:08:c4:62:49:e9:16:6e:35:4c:07:72:c3:3a:
ab:a1:c9:27:a7:cb:81:a2:6d:3b:bb:e5:84:ab:85:
c7:8d:ab:77:59:79:a6:53:7c:33:4c:9d:03:31:d6:
9f:b2:e1:c9:ce:54:f8:68:c9:2e:59:29:9c:e3:84:
ab:61:8d:32:6b:86:7e:5f:74:05:13:c3:fd:93:16:
07:2f:b5:df:61:9b:ff:c4:58:e4:16:7f:ce:8c:92:
b2:3c:06:41:d0:d1:8b:17:6a:15:6b:09:2d:db:f9:
ca:61:e2:d5:0c:8b:e9:d2:d0:7b:24:32:c1:a9:a9:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6F:9E:2E:09:50:3B:96:AC:B4:42:BF:D8:9A:2D:31:BF:F8:98:13
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/0G-eLglQO5astEK_2JotMb_4mBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5581::/32
Signature Algorithm: sha256WithRSAEncryption
8a:0f:f4:6c:89:bc:0f:1d:a9:87:f0:0b:d1:f2:54:c5:8c:fd:
ae:6f:0d:d0:51:dc:ae:17:c2:06:99:43:23:da:b5:73:52:95:
c3:10:08:39:2f:78:1d:2e:ab:dd:b1:28:05:dc:bb:66:a8:9b:
e3:8f:9d:22:96:3f:94:49:69:77:94:e3:b1:67:5a:ff:77:8e:
52:b7:91:16:52:4d:29:17:f0:64:a3:48:89:3e:fc:e3:b3:7b:
85:7f:34:97:5e:83:c5:f8:e6:89:7a:e6:30:68:05:03:ad:64:
97:75:56:69:c4:95:0b:f2:fa:85:ca:12:85:d2:2f:9d:b0:73:
95:be:0b:39:8e:50:67:5c:8f:ce:c1:6a:df:ce:6f:0b:46:84:
bb:2b:97:c1:b6:4f:49:cf:59:38:c6:64:bc:6c:4b:0e:ab:e5:
89:92:50:c2:17:fe:d3:bf:69:c4:da:f8:e1:07:2b:c8:80:5b:
a2:d9:cc:2c:74:70:20:05:f4:9b:32:ef:75:fe:ec:74:83:3c:
f2:98:27:91:58:92:a2:09:eb:10:02:e1:ae:98:b7:d6:1d:d1:
79:50:30:1e:99:f8:17:2b:fd:2b:3a:4a:65:55:29:e4:ab:16:
3d:db:be:26:43:35:38:53:de:cf:8a:32:d6:02:87:9b:09:ab:
58:f6:69:d2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaERIlieJB4fFatoAE3Fs7FcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYxMDA2MTIxMzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDZmOWUyZTA5NTAzYjk2YWNiNDQyYmZkODlhMmQzMWJmZjg5ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusv5KhJfeAct6AIM85giGNeSBmuI
0CiKtRh83v6y2wNtiPMu2u9TnrXpGCJww9E7knTXCVCFUJ6Gvc8j6watkzcNvH16
fD9YI73dBif8128sA1uLG27wLkklo2Gcgvvy/xh0gW0XhHbE3SqG74n1TZFFQyZW
IMGSS2wHuKQ9qT3drhZWn/3AiQjEYknpFm41TAdywzqrocknp8uBom07u+WEq4XH
jat3WXmmU3wzTJ0DMdafsuHJzlT4aMkuWSmc44SrYY0ya4Z+X3QFE8P9kxYHL7Xf
YZv/xFjkFn/OjJKyPAZB0NGLF2oVawkt2/nKYeLVDIvp0tB7JDLBqakHawIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNBvni4JUDuWrLRCv9iaLTG/+JgTMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvMEctZUxnbFFPNWFzdEVLXzJKb3RNYl80bUJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg9VgTAN
BgkqhkiG9w0BAQsFAAOCAQEAig/0bIm8Dx2ph/AL0fJUxYz9rm8N0FHcrhfCBplD
I9q1c1KVwxAIOS94HS6r3bEoBdy7Zqib44+dIpY/lElpd5TjsWda/3eOUreRFlJN
KRfwZKNIiT7847N7hX80l16DxfjmiXrmMGgFA61kl3VWacSVC/L6hcoShdIvnbBz
lb4LOY5QZ1yPzsFq385vC0aEuyuXwbZPSc9ZOMZkvGxLDqvliZJQwhf+079pxNr4
4QcryIBbotnMLHRwIAX0mzLvdf7sdIM88pgnkViSognrEALhrpi31h3ReVAwHpn4
Fyv9KzpKZVUp5KsWPdu+JkM1OFPez4oy1gKHmwmrWPZp0g==
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:18 2026 by rpki-client