Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/Rek38BUj6o-PMKkRWcWjHQiSf-s.roa
File: Rek38BUj6o-PMKkRWcWjHQiSf-s.roa (raw, json)
Hash identifier: Gid9Zvjlv/bFEx26YcemrtJTOgUIaBBwxfGZVGoiiUs=
Subject key identifier: 45:E9:37:F0:15:23:EA:8F:8F:30:A9:11:59:C5:A3:1D:08:92:7F:EB
Certificate issuer: /CN=a56e54ffe74cb7e5a02ebd256ce9425af36e3911
Certificate serial: 01A0F1653F57307501C16A404D291662E3A5
Authority key identifier: A5:6E:54:FF:E7:4C:B7:E5:A0:2E:BD:25:6C:E9:42:5A:F3:6E:39:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW5U_-dMt-WgLr0lbOlCWvNuORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/Rek38BUj6o-PMKkRWcWjHQiSf-s.roa
Signing time: Wed 30 Sep 2026 08:18:59 +0000
ROA not before: Wed 30 Sep 2026 08:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218547
IP address blocks: 2a0f:b000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/pW5U_-dMt-WgLr0lbOlCWvNuORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/pW5U_-dMt-WgLr0lbOlCWvNuORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW5U_-dMt-WgLr0lbOlCWvNuORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:65:3f:57:30:75:01:c1:6a:40:4d:29:16:62:e3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e54ffe74cb7e5a02ebd256ce9425af36e3911
Validity
Not Before: Sep 30 08:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45e937f01523ea8f8f30a91159c5a31d08927feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:b0:4d:c8:f3:55:88:3f:be:e6:0e:42:98:
56:bf:d5:f5:f7:94:2e:6c:a9:f2:9f:dd:4e:01:7b:
f6:32:5d:f7:e4:20:c6:b6:0e:0d:50:b4:00:62:ac:
f6:93:ca:c8:c4:46:12:a8:6e:5f:bd:47:b0:2c:33:
ab:f1:85:09:5a:82:12:cc:b9:dc:1d:bc:ba:27:bf:
2e:4e:ee:67:6b:c0:89:41:17:2e:ff:a7:6f:54:ec:
fe:82:87:c2:70:99:31:57:9a:1e:8c:69:fd:b6:f0:
3c:83:ff:de:cf:e4:31:a6:a8:89:d5:c5:66:de:18:
7e:51:a0:2f:e5:01:24:ce:d0:a8:40:23:0b:c3:1c:
56:d9:54:3a:b1:ad:b5:e5:23:0b:4c:88:50:1b:2a:
da:a0:a3:ed:d9:67:65:e3:a6:64:4a:eb:d3:c0:e5:
86:07:03:18:58:7f:98:bf:7b:54:61:01:84:69:63:
fc:57:35:cb:b7:37:fa:cf:01:ea:1b:fe:18:34:6f:
b9:c7:b0:11:35:09:6f:18:f4:6f:6b:23:1c:ca:27:
9a:27:9e:9e:b2:2e:b9:17:87:5d:5e:c8:17:d4:e4:
5b:4e:b0:6b:82:e2:3b:64:0f:d4:1e:16:43:da:76:
d2:93:4c:01:ea:cc:b0:da:cb:68:d1:08:21:c2:34:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:37:F0:15:23:EA:8F:8F:30:A9:11:59:C5:A3:1D:08:92:7F:EB
X509v3 Authority Key Identifier:
keyid:A5:6E:54:FF:E7:4C:B7:E5:A0:2E:BD:25:6C:E9:42:5A:F3:6E:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW5U_-dMt-WgLr0lbOlCWvNuORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/Rek38BUj6o-PMKkRWcWjHQiSf-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/86354e-944a-4afb-9ba0-daa8d7331afe/1/pW5U_-dMt-WgLr0lbOlCWvNuORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b000::/29
Signature Algorithm: sha256WithRSAEncryption
1c:94:81:38:b4:c0:bc:6a:ec:88:52:57:f3:fd:5f:03:8c:58:
87:47:85:10:0e:53:6c:64:70:60:f2:d4:87:c9:16:8e:c4:af:
33:05:2d:cb:47:1e:34:67:fa:79:54:43:99:89:10:6c:c5:55:
90:97:56:13:39:01:6b:c7:2b:01:89:f8:63:dc:41:10:5e:3e:
3c:a0:aa:73:97:76:f8:db:23:fa:41:31:d6:83:91:aa:50:df:
46:f4:20:a2:e8:18:e9:f4:4e:fc:bf:dc:d6:62:a6:76:48:b1:
88:c7:3f:be:27:6a:ca:95:57:42:70:a6:32:89:d7:e2:b6:d4:
11:95:e3:1b:6d:73:3f:ef:0c:9b:e6:fa:ab:05:4b:36:e9:45:
22:3e:3b:1a:c9:52:98:ab:65:0d:6a:5a:8d:5c:81:ac:de:6f:
58:39:36:c4:78:f3:20:3b:26:a8:f2:78:9c:a6:b4:21:8a:6d:
d4:96:6b:25:90:7f:c8:91:71:2f:2a:8a:c2:58:a8:67:30:0a:
23:0d:24:e7:7c:23:0d:1d:8d:bd:f3:40:7d:85:0a:37:bb:09:
02:85:b1:3a:09:83:c1:a5:64:ff:1c:87:30:28:a3:d2:db:35:
c3:e1:82:f6:5f:f3:6a:24:0b:38:b5:56:88:fc:bd:34:c7:bd:
08:da:ca:e9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDxZT9XMHUBwWpATSkWYuOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NmU1NGZmZTc0Y2I3ZTVhMDJlYmQyNTZjZTk0MjVhZjM2
ZTM5MTEwHhcNMjYwOTMwMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWU5MzdmMDE1MjNlYThmOGYzMGE5MTE1OWM1YTMxZDA4OTI3ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIGwTcjzVYg/vuYOQphWv9X195Qu
bKnyn91OAXv2Ml335CDGtg4NULQAYqz2k8rIxEYSqG5fvUewLDOr8YUJWoISzLnc
Hby6J78uTu5na8CJQRcu/6dvVOz+gofCcJkxV5oejGn9tvA8g//ez+QxpqiJ1cVm
3hh+UaAv5QEkztCoQCMLwxxW2VQ6sa215SMLTIhQGyraoKPt2Wdl46ZkSuvTwOWG
BwMYWH+Yv3tUYQGEaWP8VzXLtzf6zwHqG/4YNG+5x7ARNQlvGPRvayMcyieaJ56e
si65F4ddXsgX1ORbTrBrguI7ZA/UHhZD2nbSk0wB6syw2sto0QghwjQUiQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEXpN/AVI+qPjzCpEVnFox0Ikn/rMB8GA1UdIwQY
MBaAFKVuVP/nTLfloC69JWzpQlrzbjkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFc1VV8tZE10LVdnTHIwbGJPbENXdk51T1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84NjM1NGUtOTQ0YS00YWZiLTliYTAt
ZGFhOGQ3MzMxYWZlLzEvUmVrMzhCVWo2by1QTUtrUldjV2pIUWlTZi1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84NjM1NGUtOTQ0YS00YWZiLTliYTAtZGFhOGQ3MzMxYWZl
LzEvcFc1VV8tZE10LVdnTHIwbGJPbENXdk51T1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg+wADAN
BgkqhkiG9w0BAQsFAAOCAQEAHJSBOLTAvGrsiFJX8/1fA4xYh0eFEA5TbGRwYPLU
h8kWjsSvMwUty0ceNGf6eVRDmYkQbMVVkJdWEzkBa8crAYn4Y9xBEF4+PKCqc5d2
+Nsj+kEx1oORqlDfRvQgougY6fRO/L/c1mKmdkixiMc/vidqypVXQnCmMonX4rbU
EZXjG21zP+8Mm+b6qwVLNulFIj47GslSmKtlDWpajVyBrN5vWDk2xHjzIDsmqPJ4
nKa0IYpt1JZrJZB/yJFxLyqKwlioZzAKIw0k53wjDR2NvfNAfYUKN7sJAoWxOgmD
waVk/xyHMCij0ts1w+GC9l/zaiQLOLVWiPy9NMe9CNrK6Q==
-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:10 2026 by rpki-client