Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/fDCstNuWSUWg05RGAGozceSc5Ko.roa
File: fDCstNuWSUWg05RGAGozceSc5Ko.roa (raw, json)
Hash identifier: Z0/yaotH7AkmvBiSt0pUmAxXJzD4/hgdwzDVcCLey2w=
Subject key identifier: 7C:30:AC:B4:DB:96:49:45:A0:D3:94:46:00:6A:33:71:E4:9C:E4:AA
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A13A376D93B77FA2E9C06C39FCD4EB10E4
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/fDCstNuWSUWg05RGAGozceSc5Ko.roa
Signing time: Wed 14 Oct 2026 11:41:13 +0000
ROA not before: Wed 14 Oct 2026 11:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a0b:9800::/29 maxlen: 48
2a0b:a280::/29 maxlen: 48
2a0f:1180::/29 maxlen: 48
2a0f:2380::/29 maxlen: 48
2a0f:4680::/29 maxlen: 48
2a0f:9fc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:37:6d:93:b7:7f:a2:e9:c0:6c:39:fc:d4:eb:10:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 14 11:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c30acb4db964945a0d39446006a3371e49ce4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:27:3d:be:55:a1:36:fd:06:a7:1a:07:bc:
60:8c:51:6e:56:f9:81:df:4f:75:ae:e7:c7:c1:58:
77:97:3f:a2:e1:40:d0:b0:68:66:b6:86:0c:25:3c:
0d:a4:87:66:f3:ef:80:5a:7f:a4:29:5a:5b:0e:7d:
db:3c:c3:70:0d:61:9d:37:98:3a:3d:d8:f6:0f:55:
51:74:ee:39:e4:2c:00:f3:7f:35:8a:fc:fa:d3:88:
44:c6:0a:cc:9f:35:e8:c7:70:90:2c:e1:95:40:2e:
d5:95:22:12:f0:d5:19:ea:a9:3d:de:f4:b2:77:ff:
66:bf:34:05:78:3f:10:cb:8e:e4:ef:67:58:ee:af:
14:7a:e3:64:87:82:a4:e9:dd:b0:ba:9d:0c:dd:8f:
e1:c4:7b:ea:f4:35:56:fe:b3:59:27:a6:2b:af:4b:
c6:89:8c:eb:69:16:f2:2f:e3:e0:b4:6e:5c:15:d3:
13:e6:06:e9:5c:cd:d4:be:f9:52:c3:f5:5f:11:5e:
ab:d5:21:86:94:d7:95:1c:6a:45:3d:37:4b:c6:34:
3a:ff:df:79:bd:a8:c2:28:f2:95:b0:c9:d6:8e:9d:
e7:76:85:b1:0d:d7:01:12:ff:5a:42:c1:c7:37:ff:
41:f7:17:d3:ca:1c:db:60:25:75:8e:70:d4:cd:05:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:30:AC:B4:DB:96:49:45:A0:D3:94:46:00:6A:33:71:E4:9C:E4:AA
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/fDCstNuWSUWg05RGAGozceSc5Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9800::/29
2a0b:a280::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:4680::/29
2a0f:9fc0::/29
Signature Algorithm: sha256WithRSAEncryption
26:14:94:62:88:20:df:0b:45:cd:58:7e:23:04:fe:3d:51:0c:
61:ab:f2:9d:8e:06:93:9a:7f:c2:42:aa:9f:6a:c0:e8:66:a8:
bc:e0:c3:1c:48:79:e5:71:53:0f:10:b1:75:7a:d8:70:a1:d3:
c7:43:af:87:18:01:57:9c:d4:0c:5b:57:c1:11:f1:58:7d:db:
8f:fe:1c:28:7f:db:df:4e:bc:3f:6d:94:51:bc:02:ed:4a:9e:
6b:b8:8c:6e:b8:ac:9c:81:6f:1d:4e:c5:14:3c:8c:c9:08:45:
69:ce:48:5c:7e:af:55:b1:a2:c5:cb:f5:7f:55:f4:84:cd:a2:
68:9e:2c:7e:70:5b:0e:24:7d:e3:68:46:9c:d8:94:30:61:e7:
17:a7:0a:4d:cb:d3:52:1b:be:42:eb:e0:a9:78:33:91:21:52:
bf:22:02:70:1e:ee:9a:4d:06:1d:70:7c:47:0a:6c:1b:73:cd:
9d:b6:23:10:bf:86:5f:98:e0:4b:54:de:b4:16:51:e3:56:2b:
ad:bd:aa:a2:88:fd:1f:2e:c9:30:a4:9f:55:46:e5:c6:a4:de:
5d:74:17:6f:30:16:99:eb:50:b2:3c:39:d5:4e:83:b7:21:08:
64:87:81:69:db:fc:62:f6:7d:70:59:02:ac:2c:94:87:fb:45:
69:f6:3a:e8
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaE6N22Tt3+i6cBsOfzU6xDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYxMDE0MTE0MTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzMwYWNiNGRiOTY0OTQ1YTBkMzk0NDYwMDZhMzM3MWU0OWNlNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VgnPb5VoTb9BqcaB7xgjFFuVvmB
3091rufHwVh3lz+i4UDQsGhmtoYMJTwNpIdm8++AWn+kKVpbDn3bPMNwDWGdN5g6
Pdj2D1VRdO455CwA8381ivz604hExgrMnzXox3CQLOGVQC7VlSIS8NUZ6qk93vSy
d/9mvzQFeD8Qy47k72dY7q8UeuNkh4Kk6d2wup0M3Y/hxHvq9DVW/rNZJ6Yrr0vG
iYzraRbyL+PgtG5cFdMT5gbpXM3UvvlSw/VfEV6r1SGGlNeVHGpFPTdLxjQ6/995
vajCKPKVsMnWjp3ndoWxDdcBEv9aQsHHN/9B9xfTyhzbYCV1jnDUzQX78wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFHwwrLTblklFoNOURgBqM3HknOSqMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvZkRDc3ROdVdTVVdnMDVSR0FHb3pjZVNjNUtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKguYAAMF
AyoLooADBQMqDxGAAwUDKg8jgAMFAyoPRoADBQMqD5/AMA0GCSqGSIb3DQEBCwUA
A4IBAQAmFJRiiCDfC0XNWH4jBP49UQxhq/KdjgaTmn/CQqqfasDoZqi84MMcSHnl
cVMPELF1ethwodPHQ6+HGAFXnNQMW1fBEfFYfduP/hwof9vfTrw/bZRRvALtSp5r
uIxuuKycgW8dTsUUPIzJCEVpzkhcfq9VsaLFy/V/VfSEzaJonix+cFsOJH3jaEac
2JQwYecXpwpNy9NSG75C6+CpeDORIVK/IgJwHu6aTQYdcHxHCmwbc82dtiMQv4Zf
mOBLVN60FlHjViutvaqiiP0fLskwpJ9VRuXGpN5ddBdvMBaZ61CyPDnVToO3IQhk
h4Fp2/xi9n1wWQKsLJSH+0Vp9jro
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:12:05 2026 by rpki-client