Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/kZu0EO_8il5YNCCxTfnp7lEyJ0w.roa
File: kZu0EO_8il5YNCCxTfnp7lEyJ0w.roa (raw, json)
Hash identifier: o/fRB0PKxF2ZSiAemDPj2C3tn6nFTN53Mi308xKNtbc=
Subject key identifier: 91:9B:B4:10:EF:FC:8A:5E:58:34:20:B1:4D:F9:E9:EE:51:32:27:4C
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 01A1451D5D2C8A41934671EB4AFC5C34755B
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/kZu0EO_8il5YNCCxTfnp7lEyJ0w.roa
Signing time: Fri 16 Oct 2026 14:28:34 +0000
ROA not before: Fri 16 Oct 2026 14:28:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48108
IP address blocks: 2001:678:e30::/48 maxlen: 48
2a0a:2e80::/32 maxlen: 32
2a0a:2e81::/32 maxlen: 32
2a0a:2e81::/36 maxlen: 36
2a0a:2e82::/32 maxlen: 32
2a11:7e40::/32 maxlen: 32
2a11:7e40::/48 maxlen: 48
2a11:7e40:1::/48 maxlen: 48
2a11:7e40:2::/48 maxlen: 48
2a11:7e40:3::/48 maxlen: 48
2a11:7e40:4::/48 maxlen: 48
2a11:7e40:1000::/36 maxlen: 36
2a11:7e42::/36 maxlen: 36
2a11:7e44::/32 maxlen: 32
2a11:7e46::/32 maxlen: 32
2a11:7e47:1000::/48 maxlen: 48
2a11:7e47:2000::/48 maxlen: 48
2a11:7e47:3000::/48 maxlen: 48
2a11:7e47:4000::/48 maxlen: 48
2a11:7e47:5000::/48 maxlen: 48
2a11:7e47:6000::/48 maxlen: 48
2a11:7e47:7000::/48 maxlen: 48
2a11:7e47:8000::/48 maxlen: 48
2a11:7e47:9000::/48 maxlen: 48
2a11:7e47:a000::/48 maxlen: 48
2a11:7e47:b000::/48 maxlen: 48
2a11:7e47:b002::/48 maxlen: 48
2a11:7e47:b003::/48 maxlen: 48
2a11:8480::/32 maxlen: 32
2a11:8481::/32 maxlen: 32
2a11:8482::/32 maxlen: 32
2a11:8485::/32 maxlen: 32
2a12:6702::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:1d:5d:2c:8a:41:93:46:71:eb:4a:fc:5c:34:75:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Oct 16 14:28:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=919bb410effc8a5e583420b14df9e9ee5132274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:61:84:f8:7b:62:76:15:f0:f6:42:92:cb:
a2:3c:89:10:38:f6:b5:d5:e0:fa:d6:b4:24:59:c8:
73:a5:15:6e:8f:a7:3f:64:0f:18:14:82:bc:79:45:
30:22:32:6a:f0:97:0e:b1:2b:ed:ad:80:66:90:3a:
5c:66:b0:59:5d:d2:3e:8c:f9:94:28:13:49:03:8f:
3e:09:fa:7b:59:08:c9:bf:2f:c5:5a:8d:2f:3b:00:
00:63:64:4c:17:b1:3c:91:ef:57:8c:42:6a:9f:6a:
41:f7:b9:0d:fb:f8:6e:c1:c4:5f:0a:31:95:55:d4:
3e:1d:eb:d6:fc:f5:60:66:48:cd:81:19:71:81:dc:
e9:a6:43:71:ee:db:15:49:1d:42:f5:e1:7e:e3:19:
ea:e6:7b:58:df:6e:4a:26:41:78:c3:0e:f3:78:ff:
45:9f:50:02:28:21:7d:08:6d:16:5a:15:49:ca:05:
0b:8f:97:65:a2:ee:02:b7:ba:24:17:ed:59:1d:4e:
8b:d8:93:a6:a0:42:74:ff:bc:6a:e3:f6:e5:47:0c:
df:86:33:d8:cc:a2:b0:c7:06:92:55:6f:17:b8:e5:
64:42:2f:9c:e5:48:5d:6c:83:07:68:21:d2:80:61:
85:cf:a0:6f:3d:e1:5d:44:b1:9c:6e:ec:bb:36:1b:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:B4:10:EF:FC:8A:5E:58:34:20:B1:4D:F9:E9:EE:51:32:27:4C
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/kZu0EO_8il5YNCCxTfnp7lEyJ0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e30::/48
2a0a:2e80::-2a0a:2e82:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e40::/32
2a11:7e42::/36
2a11:7e44::/32
2a11:7e46::/32
2a11:7e47:1000::/48
2a11:7e47:2000::/48
2a11:7e47:3000::/48
2a11:7e47:4000::/48
2a11:7e47:5000::/48
2a11:7e47:6000::/48
2a11:7e47:7000::/48
2a11:7e47:8000::/48
2a11:7e47:9000::/48
2a11:7e47:a000::/48
2a11:7e47:b000::/48
2a11:7e47:b002::/47
2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8485::/32
2a12:6702::/32
Signature Algorithm: sha256WithRSAEncryption
32:d6:17:ed:b3:5f:12:cc:8a:cc:8d:12:04:58:47:95:13:6f:
1e:f3:a1:18:17:e2:f3:2f:8c:db:cb:d2:4d:3d:6c:e4:98:09:
25:42:77:51:36:56:a5:70:71:b6:62:ba:9e:c0:34:13:95:8f:
e4:80:ec:ea:1c:27:56:6e:88:80:e8:a5:e2:86:b9:66:eb:f1:
ed:e9:6f:ad:7a:85:ef:7d:03:8f:2d:26:95:81:f2:51:2c:b0:
32:c6:55:b5:0d:ac:2c:f1:0c:ae:80:60:f9:79:4e:53:6d:d1:
41:79:9b:5d:ec:43:0a:fc:87:20:44:7e:50:6e:a5:b1:0c:38:
7e:a5:37:cb:75:d7:b5:ef:4f:16:89:d7:53:9f:31:c4:b2:46:
a3:55:a7:7e:71:c4:d3:98:53:10:ec:dd:8c:99:f4:cf:0a:5d:
12:a8:7b:fb:2a:b7:a9:a7:54:05:e5:f0:5c:40:fd:88:3f:bf:
9c:ae:65:18:17:d6:28:e5:b5:84:37:d4:ef:2c:32:e5:81:64:
e9:5a:86:3e:4a:0c:82:f4:be:1a:e2:1e:29:44:6a:25:25:e6:
41:f0:dd:27:7e:11:7b:db:d0:07:fd:f6:e9:ce:ab:fa:d6:64:
4b:60:10:7c:d1:e5:8b:e9:4a:28:8e:49:56:09:3d:52:6a:ad:
df:40:f9:94
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAaFFHV0sikGTRnHrSvxcNHVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3
ZmY3MzYwHhcNMjYxMDE2MTQyODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTliYjQxMGVmZmM4YTVlNTgzNDIwYjE0ZGY5ZTllZTUxMzIyNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnxhhPh7YnYV8PZCksuiPIkQOPa1
1eD61rQkWchzpRVuj6c/ZA8YFIK8eUUwIjJq8JcOsSvtrYBmkDpcZrBZXdI+jPmU
KBNJA48+Cfp7WQjJvy/FWo0vOwAAY2RMF7E8ke9XjEJqn2pB97kN+/huwcRfCjGV
VdQ+HevW/PVgZkjNgRlxgdzppkNx7tsVSR1C9eF+4xnq5ntY325KJkF4ww7zeP9F
n1ACKCF9CG0WWhVJygULj5dlou4Ct7okF+1ZHU6L2JOmoEJ0/7xq4/blRwzfhjPY
zKKwxwaSVW8XuOVkQi+c5UhdbIMHaCHSgGGFz6BvPeFdRLGcbuy7NhtdJwIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFJGbtBDv/IpeWDQgsU356e5RMidMMB8GA1UdIwQY
MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut
YWYxZWYxZDdhZmI4LzEva1p1MEVPXzhpbDVZTkNDeFRmbnA3bEV5SjB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4
LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAIwgcADBwAg
AQZ4DjAwDgMFByoKLoADBQAqCi6CAwUAKhF+QAMGBCoRfkIAAwUAKhF+RAMFACoR
fkYDBwAqEX5HEAADBwAqEX5HIAADBwAqEX5HMAADBwAqEX5HQAADBwAqEX5HUAAD
BwAqEX5HYAADBwAqEX5HcAADBwAqEX5HgAADBwAqEX5HkAADBwAqEX5HoAADBwAq
EX5HsAADBwEqEX5HsAIwDgMFByoRhIADBQAqEYSCAwUAKhGEhQMFACoSZwIwDQYJ
KoZIhvcNAQELBQADggEBADLWF+2zXxLMisyNEgRYR5UTbx7zoRgX4vMvjNvL0k09
bOSYCSVCd1E2VqVwcbZiup7ANBOVj+SA7OocJ1ZuiIDopeKGuWbr8e3pb616he99
A48tJpWB8lEssDLGVbUNrCzxDK6AYPl5TlNt0UF5m13sQwr8hyBEflBupbEMOH6l
N8t117XvTxaJ11OfMcSyRqNVp35xxNOYUxDs3YyZ9M8KXRKoe/sqt6mnVAXl8FxA
/Yg/v5yuZRgX1ijltYQ31O8sMuWBZOlahj5KDIL0vhriHilEaiUl5kHw3Sd+EXvb
0Af99unOq/rWZEtgEHzR5YvpSiiOSVYJPVJqrd9A+ZQ=
-----END CERTIFICATE-----
Generated at Wed Oct 21 20:14:54 2026 by rpki-client