Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/AZy5s0oC56R4JUtZNL3ipypE7eU.roa
File: AZy5s0oC56R4JUtZNL3ipypE7eU.roa (raw, json)
Hash identifier: RJYCOfSbY4fvjNpRlgwCCxQPbULT73whwStnzQ7u2jA=
Subject key identifier: 01:9C:B9:B3:4A:02:E7:A4:78:25:4B:59:34:BD:E2:A7:2A:44:ED:E5
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019E272FAF565B8843D8BF99FD5856D82B57
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/AZy5s0oC56R4JUtZNL3ipypE7eU.roa
Signing time: Thu 14 May 2026 15:51:36 +0000
ROA not before: Thu 14 May 2026 15:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207745
IP address blocks: 2a03:5840:157::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:2f:af:56:5b:88:43:d8:bf:99:fd:58:56:d8:2b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: May 14 15:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=019cb9b34a02e7a478254b5934bde2a72a44ede5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:70:81:43:85:0a:a1:bc:72:51:79:7a:58:
a1:8f:5c:14:95:d1:de:ee:06:bb:59:b3:c1:0b:dc:
5e:a1:bf:9b:e9:1c:0d:55:bb:74:e7:97:6d:43:a9:
9f:76:03:69:0d:28:80:5d:c4:0e:8f:23:e5:41:3f:
e6:9b:0f:07:3c:af:8b:c7:22:42:72:7c:b2:f2:b3:
25:22:11:c1:16:b4:54:ce:85:0e:4d:8b:2a:b8:d0:
b0:8d:e7:72:5b:6d:a2:1c:cc:5a:72:56:14:f9:1d:
f1:77:8c:41:4b:97:ca:9d:9c:76:27:20:73:e3:f8:
f9:06:17:de:83:5e:f2:bf:2b:4d:64:8d:0d:0f:f6:
7f:b2:03:43:c2:2b:8d:a1:c9:ed:84:c8:72:ea:91:
22:52:8b:18:6e:38:48:7a:2b:6d:64:84:56:24:92:
5f:c4:a6:fb:c5:5a:de:d5:d3:70:56:b5:a5:c1:18:
e2:f3:a5:f1:05:34:6f:88:8b:64:59:e4:83:16:b1:
52:5e:4d:9f:2a:a3:f5:66:a4:c6:13:48:fa:3e:4c:
fa:0f:83:ec:0a:7e:7c:2f:f8:af:06:4c:0b:32:4b:
c3:e1:2e:91:8c:cf:1e:4e:de:bf:45:24:f6:29:5f:
4b:da:51:ac:db:e1:e0:1d:d9:20:29:33:0f:a2:e2:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9C:B9:B3:4A:02:E7:A4:78:25:4B:59:34:BD:E2:A7:2A:44:ED:E5
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/AZy5s0oC56R4JUtZNL3ipypE7eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:157::/48
Signature Algorithm: sha256WithRSAEncryption
62:21:16:34:b9:b4:d3:04:92:a9:50:18:51:7f:70:17:38:e0:
56:a2:c4:f7:6c:a0:8a:9b:c6:fa:b6:1f:97:b3:a6:41:29:04:
33:f4:1e:71:59:4b:d5:c5:a2:24:af:83:ae:bc:69:7b:67:8b:
e2:2e:a1:62:02:ad:9c:fb:42:42:d7:ff:88:72:6d:87:3e:ef:
cb:5f:1b:59:11:a4:24:f6:ef:9f:f4:08:99:57:05:c7:e5:c1:
b8:5a:aa:9c:2f:ae:59:1c:0c:36:d0:19:27:65:6d:97:78:a1:
e9:76:45:d7:f4:1e:f3:98:89:57:52:cf:52:ec:65:4a:35:69:
66:38:37:b0:81:0e:77:34:cd:66:56:3d:97:e6:f8:07:20:14:
0f:a2:64:ef:9b:68:da:a5:fd:a4:97:4f:5b:d6:dd:c9:69:20:
ef:6f:4d:7f:6c:e8:22:d5:fa:7a:f0:5a:fe:8c:a9:4d:7a:3d:
59:b0:fe:a5:2b:c5:89:76:0f:03:27:ed:de:7e:6d:42:3a:96:
e2:66:79:4e:a9:0e:20:e0:48:1d:e1:99:73:7f:fc:b9:74:fb:
82:ae:c9:43:cf:35:ae:b2:1c:8f:85:64:c5:4c:b7:6a:ea:a6:
2f:5b:d4:b7:c5:b1:fe:07:89:03:a2:44:be:9a:04:92:dd:1c:
72:83:68:11
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ4nL69WW4hD2L+Z/VhW2CtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjYwNTE0MTU1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTljYjliMzRhMDJlN2E0NzgyNTRiNTkzNGJkZTJhNzJhNDRlZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo5wgUOFCqG8clF5elihj1wUldHe
7ga7WbPBC9xeob+b6RwNVbt055dtQ6mfdgNpDSiAXcQOjyPlQT/mmw8HPK+LxyJC
cnyy8rMlIhHBFrRUzoUOTYsquNCwjedyW22iHMxaclYU+R3xd4xBS5fKnZx2JyBz
4/j5Bhfeg17yvytNZI0ND/Z/sgNDwiuNocnthMhy6pEiUosYbjhIeittZIRWJJJf
xKb7xVre1dNwVrWlwRji86XxBTRviItkWeSDFrFSXk2fKqP1ZqTGE0j6Pkz6D4Ps
Cn58L/ivBkwLMkvD4S6RjM8eTt6/RST2KV9L2lGs2+HgHdkgKTMPouJfgQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAGcubNKAuekeCVLWTS94qcqRO3lMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvQVp5NXMwb0M1NlI0SlV0Wk5MM2lweXBFN2VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAFX
MA0GCSqGSIb3DQEBCwUAA4IBAQBiIRY0ubTTBJKpUBhRf3AXOOBWosT3bKCKm8b6
th+Xs6ZBKQQz9B5xWUvVxaIkr4OuvGl7Z4viLqFiAq2c+0JC1/+Icm2HPu/LXxtZ
EaQk9u+f9AiZVwXH5cG4WqqcL65ZHAw20BknZW2XeKHpdkXX9B7zmIlXUs9S7GVK
NWlmODewgQ53NM1mVj2X5vgHIBQPomTvm2japf2kl09b1t3JaSDvb01/bOgi1fp6
8Fr+jKlNej1ZsP6lK8WJdg8DJ+3efm1COpbiZnlOqQ4g4Egd4Zlzf/y5dPuCrslD
zzWushyPhWTFTLdq6qYvW9S3xbH+B4kDokS+mgSS3Rxyg2gR
-----END CERTIFICATE-----
Generated at Thu Jun 11 20:07:03 2026 by rpki-client