Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/m88qIfHILGTDwTPNgbSj9kEvyHM.roa
File: m88qIfHILGTDwTPNgbSj9kEvyHM.roa (raw, json)
Hash identifier: 7kMxZMOiWpHwaTRBYo7hwnOelQgxJVT++YBjDRV6bEc=
Subject key identifier: 9B:CF:2A:21:F1:C8:2C:64:C3:C1:33:CD:81:B4:A3:F6:41:2F:C8:73
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A11CF90DDE10573C47C6F4D5B48E30A397
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/m88qIfHILGTDwTPNgbSj9kEvyHM.roa
Signing time: Thu 08 Oct 2026 19:24:06 +0000
ROA not before: Thu 08 Oct 2026 19:24:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206533
IP address blocks: 2a0f:5580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:f9:0d:de:10:57:3c:47:c6:f4:d5:b4:8e:30:a3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 8 19:24:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bcf2a21f1c82c64c3c133cd81b4a3f6412fc873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:c5:18:b7:ba:f7:8c:6e:e6:5a:0f:74:88:
d5:26:b8:d6:82:c7:84:94:0c:44:46:25:97:e8:28:
2d:ed:6d:04:cb:7f:5f:b0:f0:46:a0:10:c3:59:53:
ee:94:c5:2f:cd:97:82:35:ec:76:2d:f7:fd:d2:76:
d5:3d:bd:b0:38:de:9f:96:bc:96:0d:66:ca:8a:a6:
4f:18:9f:4d:97:df:3f:e8:07:f6:0b:67:d1:9c:83:
62:dd:1c:75:8f:66:3a:1f:d9:0a:97:b4:1e:60:96:
df:1f:d2:b7:e1:3c:03:a0:1e:b0:bf:3c:96:95:7d:
1b:76:78:66:ff:78:05:df:73:90:89:60:de:86:2d:
f2:bd:db:dc:75:f6:19:71:17:6c:88:88:00:6f:fc:
f4:bc:d7:56:61:ef:36:0e:a4:8f:a2:46:5d:ee:40:
ac:a3:79:01:a6:4a:a3:30:16:f7:db:df:26:89:7e:
53:0e:52:f2:66:18:e5:6d:e5:02:a7:a4:96:bd:94:
36:8b:ee:70:8d:00:1c:7c:c6:5a:c4:1c:a7:95:37:
49:8d:1f:86:16:af:9b:03:de:90:2c:7f:f5:f3:47:
31:f0:f3:7c:42:91:8e:ce:69:75:0d:fd:25:6c:9a:
47:e7:04:61:e7:95:b7:0a:f4:0e:59:ee:8a:ae:c2:
93:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:2A:21:F1:C8:2C:64:C3:C1:33:CD:81:B4:A3:F6:41:2F:C8:73
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/m88qIfHILGTDwTPNgbSj9kEvyHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5580::/32
Signature Algorithm: sha256WithRSAEncryption
87:19:cc:44:ff:5e:aa:62:dc:02:37:e8:a6:2f:af:14:79:19:
c4:f2:a9:9b:f9:1d:2b:6e:ae:84:ed:c3:48:b0:fc:e5:db:0a:
4d:3d:72:39:7a:85:fb:16:1d:19:85:8a:01:a8:6f:30:45:00:
69:3f:fe:f7:8e:9b:56:dc:1c:74:d4:28:b1:56:bf:b1:43:5c:
d5:9a:d7:cb:a0:ea:13:ae:11:50:18:73:db:08:76:c3:6d:81:
38:66:ad:f8:ca:3e:64:b6:02:1a:2a:61:65:02:5e:b2:ba:b6:
9e:c5:a4:df:1e:cb:72:6a:18:4c:17:5b:f4:b5:73:ed:7b:31:
29:3c:c5:f2:56:2d:3a:29:7a:97:4b:31:ef:80:23:60:17:83:
35:b4:9b:8e:3b:42:e1:15:28:f8:c9:85:cc:4a:70:63:f7:fc:
9b:94:50:2a:b5:4d:43:58:61:5f:dc:a1:56:15:e2:39:bd:2f:
68:a2:e2:89:cb:ff:8c:5a:8b:59:91:96:2d:0b:cc:42:1f:b4:
13:63:d5:58:45:a8:23:45:84:03:85:2b:ef:56:dc:d4:3e:53:
6c:a3:af:63:62:ad:74:36:de:2e:e9:ab:7b:d9:8c:67:2d:f5:
a8:6c:97:ff:ce:e6:63:5a:cd:29:bb:59:89:3d:0d:af:fc:ae:
f2:60:c0:6c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaEc+Q3eEFc8R8b01bSOMKOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYxMDA4MTkyNDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmNmMmEyMWYxYzgyYzY0YzNjMTMzY2Q4MWI0YTNmNjQxMmZjODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA7FGLe694xu5loPdIjVJrjWgseE
lAxERiWX6Cgt7W0Ey39fsPBGoBDDWVPulMUvzZeCNex2Lff90nbVPb2wON6flryW
DWbKiqZPGJ9Nl98/6Af2C2fRnINi3Rx1j2Y6H9kKl7QeYJbfH9K34TwDoB6wvzyW
lX0bdnhm/3gF33OQiWDehi3yvdvcdfYZcRdsiIgAb/z0vNdWYe82DqSPokZd7kCs
o3kBpkqjMBb3298miX5TDlLyZhjlbeUCp6SWvZQ2i+5wjQAcfMZaxBynlTdJjR+G
Fq+bA96QLH/180cx8PN8QpGOzml1Df0lbJpH5wRh55W3CvQOWe6KrsKTsQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJvPKiHxyCxkw8EzzYG0o/ZBL8hzMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvbTg4cUlmSElMR1REd1RQTmdiU2o5a0V2eUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg9VgDAN
BgkqhkiG9w0BAQsFAAOCAQEAhxnMRP9eqmLcAjfopi+vFHkZxPKpm/kdK26uhO3D
SLD85dsKTT1yOXqF+xYdGYWKAahvMEUAaT/+946bVtwcdNQosVa/sUNc1ZrXy6Dq
E64RUBhz2wh2w22BOGat+Mo+ZLYCGiphZQJesrq2nsWk3x7LcmoYTBdb9LVz7Xsx
KTzF8lYtOil6l0sx74AjYBeDNbSbjjtC4RUo+MmFzEpwY/f8m5RQKrVNQ1hhX9yh
VhXiOb0vaKLiicv/jFqLWZGWLQvMQh+0E2PVWEWoI0WEA4Ur71bc1D5TbKOvY2Kt
dDbeLumre9mMZy31qGyX/87mY1rNKbtZiT0Nr/yu8mDAbA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 03:13:35 2026 by rpki-client