Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/cLwsvL062UHY2NWasAhe0el2t4g.roa
File: cLwsvL062UHY2NWasAhe0el2t4g.roa (raw, json)
Hash identifier: CImORy1DAVhb5txV/FdsWzrP7esG2NdvlSEYTEDPBuY=
Subject key identifier: 70:BC:2C:BC:BD:3A:D9:41:D8:D8:D5:9A:B0:08:5E:D1:E9:76:B7:88
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A0614274B1B4AF7DA43710110108053FE4
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/cLwsvL062UHY2NWasAhe0el2t4g.roa
Signing time: Wed 02 Sep 2026 08:35:40 +0000
ROA not before: Wed 02 Sep 2026 08:35:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209503
IP address blocks: 2a0c:6d87:f2e7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:42:74:b1:b4:af:7d:a4:37:10:11:01:08:05:3f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Sep 2 08:35:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70bc2cbcbd3ad941d8d8d59ab0085ed1e976b788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:9f:9e:44:77:0d:bc:52:54:9d:58:14:49:
51:a5:ab:a1:c7:ec:82:06:aa:ad:3e:15:e2:1e:48:
a9:96:16:e9:d0:c3:28:56:68:58:c8:06:42:91:35:
f2:6b:2d:b1:14:b5:c2:29:ca:0a:0f:29:7f:52:18:
8f:7f:84:a5:32:60:c3:38:47:f3:3e:cf:49:bd:a2:
bb:40:4b:75:91:03:37:c8:ab:6e:19:50:2b:eb:4c:
14:36:9a:f6:4f:c2:38:bf:11:f4:e5:43:aa:34:41:
54:bd:ff:3d:5e:50:1b:68:df:a3:46:36:a3:2e:2f:
fb:0c:14:53:bb:78:2a:8f:bd:59:a0:09:23:ca:76:
98:5b:64:ec:aa:59:9b:e2:8d:db:f7:1f:d5:5b:7f:
e5:5b:75:f5:b6:e3:9a:16:92:d3:7b:93:44:08:7f:
a2:f0:17:61:40:24:29:ca:f3:c6:25:32:96:bf:0e:
85:24:1e:32:41:fe:e3:1c:0a:61:2c:dc:4b:d5:69:
17:05:21:39:9b:81:12:40:b7:0e:ae:99:39:7e:60:
ff:73:3a:37:e8:2b:e4:2b:7b:33:36:03:b5:b6:5f:
da:e8:df:31:bd:c2:5b:58:1c:05:f4:e9:55:37:76:
a1:e5:5e:ec:ee:c1:59:a4:c5:e3:f6:ae:d2:c7:84:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:2C:BC:BD:3A:D9:41:D8:D8:D5:9A:B0:08:5E:D1:E9:76:B7:88
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/cLwsvL062UHY2NWasAhe0el2t4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6d87:f2e7::/48
Signature Algorithm: sha256WithRSAEncryption
51:a7:04:65:c0:12:38:ee:04:dc:88:61:5e:59:a0:46:dc:1c:
d9:e3:c4:0c:22:8b:1e:8a:2d:90:c0:5c:75:8f:a4:4f:ea:57:
8a:55:b5:80:5b:44:88:a1:27:65:7a:8d:8d:bf:bc:8d:3f:e0:
bf:b9:41:b3:41:2c:41:01:eb:47:94:a9:d8:05:0f:00:b8:49:
d1:d9:4e:c2:9e:c8:26:21:39:8e:01:3f:59:32:8d:62:0f:c9:
e5:95:c7:29:4c:65:23:36:a9:06:4b:ec:8d:0f:99:0e:51:41:
dd:9d:d6:ac:e4:e9:fb:d9:f2:26:82:4a:c5:20:47:d8:d3:64:
59:b3:4e:a9:ae:7f:7b:9c:9c:2d:fe:10:43:88:3a:89:82:eb:
ac:34:26:12:1f:a0:50:b7:8b:b9:bf:dc:c2:fb:3d:7a:e2:eb:
41:18:98:53:5a:06:f9:95:dc:4e:17:07:f8:13:df:3f:27:af:
9b:e1:2d:58:91:a0:5f:b2:4c:b5:00:87:b2:52:b9:e2:f9:7e:
27:9b:9d:53:6d:fa:ac:86:bf:d3:00:58:32:0f:7f:88:90:b4:
d2:ff:99:f8:5f:08:c1:60:f0:47:b0:ae:31:1d:70:30:9c:9b:
95:d3:29:62:88:db:ae:26:56:47:7f:ab:1c:c5:43:74:83:51:
0c:c6:c9:f9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBhQnSxtK99pDcQEQEIBT/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzY3Njc3YTMzZDNhNzk5ZjM2NDM4NDI5NmRmNDZhOTFk
MzkyN2YwHhcNMjYwOTAyMDgzNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGJjMmNiY2JkM2FkOTQxZDhkOGQ1OWFiMDA4NWVkMWU5NzZiNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrifnkR3DbxSVJ1YFElRpauhx+yC
BqqtPhXiHkiplhbp0MMoVmhYyAZCkTXyay2xFLXCKcoKDyl/UhiPf4SlMmDDOEfz
Ps9JvaK7QEt1kQM3yKtuGVAr60wUNpr2T8I4vxH05UOqNEFUvf89XlAbaN+jRjaj
Li/7DBRTu3gqj71ZoAkjynaYW2Tsqlmb4o3b9x/VW3/lW3X1tuOaFpLTe5NECH+i
8BdhQCQpyvPGJTKWvw6FJB4yQf7jHAphLNxL1WkXBSE5m4ESQLcOrpk5fmD/czo3
6CvkK3szNgO1tl/a6N8xvcJbWBwF9OlVN3ah5V7s7sFZpMXj9q7Sx4TSmwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHC8LLy9OtlB2NjVmrAIXtHpdreIMB8GA1UdIwQY
MBaAFBp2dnejPTp5nzZDhClt9GqR05J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25aMmQ2TTlPbm1mTmtPRUtXMzBhcEhUa244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYzY2OTYtOGI4Ny00N2U2LWEyOGMt
MDYyNDI5MzYwNzVlLzEvY0x3c3ZMMDYyVUhZMk5XYXNBaGUwZWwydDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lYzY2OTYtOGI4Ny00N2U2LWEyOGMtMDYyNDI5MzYwNzVl
LzEvR25aMmQ2TTlPbm1mTmtPRUtXMzBhcEhUa244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxth/Ln
MA0GCSqGSIb3DQEBCwUAA4IBAQBRpwRlwBI47gTciGFeWaBG3BzZ48QMIoseii2Q
wFx1j6RP6leKVbWAW0SIoSdleo2Nv7yNP+C/uUGzQSxBAetHlKnYBQ8AuEnR2U7C
nsgmITmOAT9ZMo1iD8nllccpTGUjNqkGS+yND5kOUUHdndas5On72fImgkrFIEfY
02RZs06prn97nJwt/hBDiDqJguusNCYSH6BQt4u5v9zC+z164utBGJhTWgb5ldxO
Fwf4E98/J6+b4S1YkaBfsky1AIeyUrni+X4nm51Tbfqshr/TAFgyD3+IkLTS/5n4
XwjBYPBHsK4xHXAwnJuV0yliiNuuJlZHf6scxUN0g1EMxsn5
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:33 2026 by rpki-client