Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/1zfB5jDtnQRF_MIcqFZkE7IR_qI.roa
File: 1zfB5jDtnQRF_MIcqFZkE7IR_qI.roa (raw, json)
Hash identifier: m5cab30eS4IUCBA34rVdiOg36kmhU6EhGNn7oiHv0FY=
Subject key identifier: D7:37:C1:E6:30:ED:9D:04:45:FC:C2:1C:A8:56:64:13:B2:11:FE:A2
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01A0F68EF468058E18231287EE2F8D086772
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/1zfB5jDtnQRF_MIcqFZkE7IR_qI.roa
Signing time: Thu 01 Oct 2026 08:22:38 +0000
ROA not before: Thu 01 Oct 2026 08:22:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44894
IP address blocks: 2a02:c6c1:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:8e:f4:68:05:8e:18:23:12:87:ee:2f:8d:08:67:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Oct 1 08:22:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d737c1e630ed9d0445fcc21ca8566413b211fea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:d5:ae:ec:85:ac:7a:b9:ff:49:cc:72:19:
a0:ea:64:a7:f0:8a:d0:4b:f4:77:2a:2c:db:6a:64:
18:95:49:b5:bd:6e:d5:89:ba:5e:f7:98:68:40:2a:
f6:6f:ac:28:31:f0:5b:1e:19:72:d7:ff:85:b1:4c:
ee:4e:71:24:29:6a:63:96:ba:2a:8f:2f:3e:47:c8:
ed:5d:0e:d8:f4:6c:83:84:3a:c6:c5:17:0f:e5:d5:
45:af:b2:21:ec:3e:35:59:f7:70:41:4a:e6:af:28:
7c:f6:e7:7d:9d:43:b3:ae:65:50:46:e7:06:b3:fa:
13:3e:fd:a4:0f:e2:db:f3:3c:af:6c:9a:13:21:58:
74:d9:87:b9:90:3b:8c:93:7f:1e:a5:b7:13:68:1f:
68:4a:fc:3b:32:be:5c:4e:92:de:3b:bd:b5:a4:da:
6b:ab:17:11:1d:5d:2c:9b:ac:a9:3d:34:00:0a:99:
bf:73:00:ea:31:84:9b:bb:c1:b3:2b:e0:27:7e:bf:
c2:2f:26:57:76:95:fa:7d:e3:58:9b:c6:39:3e:a3:
cb:9b:a3:eb:a0:5d:5d:ab:64:6b:fc:fd:6f:20:08:
28:1e:95:9d:db:67:2b:1a:ee:76:20:b0:55:14:73:
72:f5:0c:84:43:a7:2a:02:0d:d2:18:91:19:0e:09:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:37:C1:E6:30:ED:9D:04:45:FC:C2:1C:A8:56:64:13:B2:11:FE:A2
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/1zfB5jDtnQRF_MIcqFZkE7IR_qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c6c1:c::/48
Signature Algorithm: sha256WithRSAEncryption
40:d5:fe:7e:ec:80:f1:48:42:e2:ed:72:f0:dc:db:dd:d3:48:
76:58:e2:e9:b6:bb:52:a5:59:88:3e:cc:b5:e9:5a:2e:42:93:
fc:31:9a:07:41:cf:bf:87:26:52:12:a5:93:46:6b:8d:06:11:
75:00:cb:10:1d:12:f1:49:7c:81:61:a6:86:9b:97:b2:80:12:
90:01:f0:b5:a5:de:d4:c8:97:94:ac:42:7f:33:81:ab:d2:93:
c1:b1:c0:16:c2:3f:ae:32:37:1d:39:a8:52:2f:45:8b:1b:79:
7c:98:d3:d8:7c:eb:a1:bf:51:13:ea:9f:32:a3:cb:08:f2:ab:
e3:62:bc:03:28:c4:75:fb:5e:67:31:15:30:d7:3f:c6:79:63:
ad:e9:4d:cb:51:f1:24:27:99:4f:f0:15:3a:42:62:c2:c3:c3:
4c:80:8d:a8:5c:b6:6f:a0:0b:6b:79:cd:af:f3:ba:19:bb:28:
ec:b3:13:49:90:11:fa:5a:46:56:9f:bb:23:ba:3f:d0:0d:41:
7c:50:27:1e:7b:80:90:b7:14:5a:50:40:a2:32:7d:c4:30:b4:
ed:5b:33:01:4e:56:60:a4:c7:bf:4b:1e:56:e0:c6:3f:4b:75:
e4:46:2b:4a:65:02:87:83:4c:c8:8d:81:37:01:00:f2:04:fe:
08:f5:35:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaD2jvRoBY4YIxKH7i+NCGdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjYxMDAxMDgyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzM3YzFlNjMwZWQ5ZDA0NDVmY2MyMWNhODU2NjQxM2IyMTFmZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PXVruyFrHq5/0nMchmg6mSn8IrQ
S/R3KizbamQYlUm1vW7Vibpe95hoQCr2b6woMfBbHhly1/+FsUzuTnEkKWpjlroq
jy8+R8jtXQ7Y9GyDhDrGxRcP5dVFr7Ih7D41WfdwQUrmryh89ud9nUOzrmVQRucG
s/oTPv2kD+Lb8zyvbJoTIVh02Ye5kDuMk38epbcTaB9oSvw7Mr5cTpLeO721pNpr
qxcRHV0sm6ypPTQACpm/cwDqMYSbu8GzK+Anfr/CLyZXdpX6feNYm8Y5PqPLm6Pr
oF1dq2Rr/P1vIAgoHpWd22crGu52ILBVFHNy9QyEQ6cqAg3SGJEZDgmtCwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNc3weYw7Z0ERfzCHKhWZBOyEf6iMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvMXpmQjVqRHRuUVJGX01JY3FGWmtFN0lSX3FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgLGwQAM
MA0GCSqGSIb3DQEBCwUAA4IBAQBA1f5+7IDxSELi7XLw3Nvd00h2WOLptrtSpVmI
Psy16VouQpP8MZoHQc+/hyZSEqWTRmuNBhF1AMsQHRLxSXyBYaaGm5eygBKQAfC1
pd7UyJeUrEJ/M4Gr0pPBscAWwj+uMjcdOahSL0WLG3l8mNPYfOuhv1ET6p8yo8sI
8qvjYrwDKMR1+15nMRUw1z/GeWOt6U3LUfEkJ5lP8BU6QmLCw8NMgI2oXLZvoAtr
ec2v87oZuyjssxNJkBH6WkZWn7sjuj/QDUF8UCcee4CQtxRaUECiMn3EMLTtWzMB
TlZgpMe/Sx5W4MY/S3XkRitKZQKHg0zIjYE3AQDyBP4I9TU/
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:49 2026 by rpki-client