Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/uTr13Te3pwYYdTFAT-0rxl4K2a4.roa
File: uTr13Te3pwYYdTFAT-0rxl4K2a4.roa (raw, json)
Hash identifier: oQV4cNUdbV2vNfYqR3e7xR1qkeePDkN6t+oSOnNTZ8M=
Subject key identifier: B9:3A:F5:DD:37:B7:A7:06:18:75:31:40:4F:ED:2B:C6:5E:0A:D9:AE
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 019FC3E1142FBD661B6B7EEEB2B9E56AAF8A
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/uTr13Te3pwYYdTFAT-0rxl4K2a4.roa
Signing time: Sun 02 Aug 2026 19:08:55 +0000
ROA not before: Sun 02 Aug 2026 19:08:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 2a07:2486:400f::/48 maxlen: 48
2a07:2486:4e00::/40 maxlen: 40
2a07:2486:4e01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:e1:14:2f:bd:66:1b:6b:7e:ee:b2:b9:e5:6a:af:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Aug 2 19:08:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b93af5dd37b7a706187531404fed2bc65e0ad9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:f0:d8:e4:ff:a5:72:09:a9:37:e3:f6:1e:
cb:80:ab:71:98:c4:89:8f:0c:12:a5:01:da:09:61:
b2:aa:41:0c:3a:74:f7:05:f7:08:37:72:35:39:2d:
35:b2:bf:b7:5d:f3:7c:b3:b7:5d:e0:02:6d:f3:c0:
10:01:25:c1:36:f5:d3:cc:7b:46:84:55:dc:2b:d9:
ed:d6:7a:15:d3:e1:16:9e:7e:b2:10:f3:e3:a9:ca:
10:3a:f5:2f:76:9b:69:c2:94:3d:bc:7d:bd:a2:11:
fb:8d:28:55:c9:db:ab:45:79:18:03:68:4a:b5:d7:
fc:3c:ce:ec:ca:68:3c:71:c7:d1:44:79:0c:38:6b:
fe:fb:74:65:44:f0:75:0d:dc:f7:56:24:c1:fa:50:
50:70:2c:7c:26:88:88:4c:99:d9:90:5d:4a:eb:eb:
88:a0:d3:6d:0f:37:f0:0b:b2:50:e5:89:5a:67:1c:
20:68:bf:18:03:3f:6f:43:cf:ae:23:77:8f:78:cc:
3d:8a:11:34:a3:3f:94:fd:0a:4e:1c:a0:1d:4a:93:
d8:51:c4:ab:dd:28:0d:0b:f6:82:69:79:6b:8a:a7:
2c:13:c4:95:2c:07:ea:26:3c:5e:7c:11:8e:56:79:
52:37:db:39:45:35:8d:53:1e:13:66:fe:2c:99:fc:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3A:F5:DD:37:B7:A7:06:18:75:31:40:4F:ED:2B:C6:5E:0A:D9:AE
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/uTr13Te3pwYYdTFAT-0rxl4K2a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:400f::/48
2a07:2486:4e00::/40
Signature Algorithm: sha256WithRSAEncryption
9d:5f:5d:e8:3c:89:71:22:f1:11:ce:40:79:71:37:f1:70:36:
bb:93:ee:af:a1:82:ce:9a:86:a1:81:50:d4:28:b8:33:17:fd:
ab:fc:f0:fe:03:14:d0:e8:c1:26:62:5b:a5:2f:ef:3d:c2:93:
b7:63:ec:8a:78:c6:49:e8:bd:fd:32:83:68:4c:25:ff:5a:4b:
f3:06:92:bc:b8:03:54:7b:c7:92:b8:f2:c6:de:19:28:1e:dc:
c7:18:43:0d:fb:18:49:b2:2a:36:bb:a2:2a:73:83:bd:1d:13:
bb:55:58:09:c4:c8:66:ab:f3:7e:50:e4:72:db:72:67:07:85:
7a:b8:e0:39:03:50:ac:03:e5:19:e6:76:21:0e:a2:ab:1e:7e:
b0:be:dc:41:42:03:38:57:2f:b2:58:de:55:dc:79:67:4b:b9:
29:0b:86:94:4f:61:3a:47:a4:f2:0a:4e:08:12:89:6e:48:94:
d2:c5:28:a7:40:b2:78:2e:fa:45:a7:82:c6:7f:50:3c:2c:a7:
49:b9:a4:75:69:3d:30:20:99:ee:f8:42:17:ea:78:b7:dc:98:
ed:a4:ec:05:17:19:dc:ff:73:4f:0a:0c:79:e1:59:b2:7a:59:
9c:06:f1:18:86:7f:71:5e:36:cc:61:04:9b:68:ef:26:c4:03:
a1:7f:c8:8b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZ/D4RQvvWYba37usrnlaq+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzZlOGMyMTZmMDVhOWQ5ZTAzMjdmMTIyMmJmMTIxOThh
YmE1ZGEwHhcNMjYwODAyMTkwODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTNhZjVkZDM3YjdhNzA2MTg3NTMxNDA0ZmVkMmJjNjVlMGFkOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYvw2OT/pXIJqTfj9h7LgKtxmMSJ
jwwSpQHaCWGyqkEMOnT3BfcIN3I1OS01sr+3XfN8s7dd4AJt88AQASXBNvXTzHtG
hFXcK9nt1noV0+EWnn6yEPPjqcoQOvUvdptpwpQ9vH29ohH7jShVydurRXkYA2hK
tdf8PM7symg8ccfRRHkMOGv++3RlRPB1Ddz3ViTB+lBQcCx8JoiITJnZkF1K6+uI
oNNtDzfwC7JQ5YlaZxwgaL8YAz9vQ8+uI3ePeMw9ihE0oz+U/QpOHKAdSpPYUcSr
3SgNC/aCaXlriqcsE8SVLAfqJjxefBGOVnlSN9s5RTWNUx4TZv4smfwPywIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFLk69d03t6cGGHUxQE/tK8ZeCtmuMB8GA1UdIwQY
MBaAFMI26MIW8FqdngMn8SIr8SGYq6XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgt
Mzg0ZmZjZTc3ZjUyLzEvdVRyMTNUZTNwd1lZZFRGQVQtMHJ4bDRLMmE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgtMzg0ZmZjZTc3ZjUy
LzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgckhkAP
AwYAKgckhk4wDQYJKoZIhvcNAQELBQADggEBAJ1fXeg8iXEi8RHOQHlxN/FwNruT
7q+hgs6ahqGBUNQouDMX/av88P4DFNDowSZiW6Uv7z3Ck7dj7Ip4xknovf0yg2hM
Jf9aS/MGkry4A1R7x5K48sbeGSge3McYQw37GEmyKja7oipzg70dE7tVWAnEyGar
835Q5HLbcmcHhXq44DkDUKwD5RnmdiEOoqsefrC+3EFCAzhXL7JY3lXceWdLuSkL
hpRPYTpHpPIKTggSiW5IlNLFKKdAsngu+kWngsZ/UDwsp0m5pHVpPTAgme74Qhfq
eLfcmO2k7AUXGdz/c08KDHnhWbJ6WZwG8RiGf3FeNsxhBJto7ybEA6F/yIs=
-----END CERTIFICATE-----
Generated at Wed Aug 12 19:39:32 2026 by rpki-client