Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/WFIitC1iC4SxaD-gROSFjGsIGEA.roa
File: WFIitC1iC4SxaD-gROSFjGsIGEA.roa (raw, json)
Hash identifier: tUjrSM/VRqbKLANp+j7DdS1R8QyDACe7TIIRQbZyYRc=
Subject key identifier: 58:52:22:B4:2D:62:0B:84:B1:68:3F:A0:44:E4:85:8C:6B:08:18:40
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 01A13A51F9D28B4167ABF6EDD4BFC12A4077
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/WFIitC1iC4SxaD-gROSFjGsIGEA.roa
Signing time: Wed 14 Oct 2026 12:10:13 +0000
ROA not before: Wed 14 Oct 2026 12:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198138
IP address blocks: 2a10:ab80:460::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:51:f9:d2:8b:41:67:ab:f6:ed:d4:bf:c1:2a:40:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Oct 14 12:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=585222b42d620b84b1683fa044e4858c6b081840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:c4:40:17:47:d8:fe:85:ad:b3:34:b0:16:
1a:45:7f:71:e3:ea:78:12:8a:8c:89:74:44:2b:8d:
44:ad:18:c9:72:67:91:6a:3f:11:6d:bc:e8:97:3b:
e9:ea:45:0d:58:7f:e8:53:18:1e:cd:93:03:41:96:
67:fd:5f:4f:66:e3:59:43:a8:2d:68:b9:b0:0a:28:
70:07:34:f4:88:96:04:ee:33:a1:86:be:b7:4f:eb:
d8:b4:2e:6e:00:eb:83:65:f9:58:62:3b:b0:0e:94:
67:5f:81:98:26:b9:8b:a5:e6:7a:5a:27:d4:68:23:
b0:02:85:2b:2f:4e:c2:5d:0c:d2:67:77:97:60:83:
01:c5:93:c8:8b:be:ac:50:24:37:11:76:65:27:95:
35:c1:d1:a8:44:95:d7:a0:48:a6:cf:8d:73:60:c1:
fb:f4:83:be:2d:83:0d:36:cf:28:ec:e0:ab:d9:08:
b5:a3:22:64:9e:04:2a:8c:86:16:b9:2a:7d:b4:72:
81:d9:fa:10:5c:7b:aa:24:43:d3:bc:3e:15:fc:fa:
ad:da:d2:5f:23:8d:6f:79:1e:05:97:9c:75:84:82:
f5:f4:b1:e5:7a:c0:f5:68:d9:d7:33:2e:23:3c:59:
b2:ee:a0:ba:7a:d1:10:08:c1:b3:14:7f:1c:13:7c:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:22:B4:2D:62:0B:84:B1:68:3F:A0:44:E4:85:8C:6B:08:18:40
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/WFIitC1iC4SxaD-gROSFjGsIGEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:460::/48
Signature Algorithm: sha256WithRSAEncryption
1c:c7:fb:1e:17:47:2e:88:1a:b9:0b:62:5c:15:9b:80:fa:66:
3a:31:37:55:48:e0:dc:dd:63:6b:6c:ab:ef:21:a2:07:ff:cf:
20:d1:a0:f9:96:dd:2f:f8:c3:ba:68:87:8a:a9:c7:11:ce:73:
88:aa:36:c3:4b:0f:fc:7e:f5:77:1e:6d:16:53:39:83:1d:f0:
d9:f4:4d:c9:46:5e:4b:e5:5f:1a:1d:25:0c:33:5d:11:8b:b1:
d5:68:d8:26:0b:17:e1:a5:2f:5c:19:e2:6f:e0:3e:c1:ae:2b:
ac:bc:6f:e4:ea:30:0c:be:f6:01:18:55:28:f9:36:07:63:d5:
00:e1:26:18:cf:c5:97:2c:84:4f:8c:a6:63:2e:a0:72:24:ba:
48:68:da:bc:e2:8a:a1:62:4f:bd:b7:46:38:d5:83:57:05:dd:
6c:77:42:41:ab:d4:78:39:f5:a0:fc:7e:5e:68:b4:c6:22:9c:
0e:2c:40:1b:5e:29:db:eb:66:d5:18:e1:40:88:9c:4c:33:d9:
44:6c:4e:94:16:90:8b:91:de:fe:62:01:78:19:e1:0c:b2:06:
6b:c5:94:45:44:50:2c:8f:1d:1f:29:9c:ad:c5:3c:ac:96:8b:
74:84:15:2a:ad:3b:97:f7:67:5a:fa:5c:59:a4:b3:eb:c9:b5:
75:6f:5b:e9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaE6UfnSi0Fnq/bt1L/BKkB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2
NGM2ZDEwHhcNMjYxMDE0MTIxMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODUyMjJiNDJkNjIwYjg0YjE2ODNmYTA0NGU0ODU4YzZiMDgxODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj3EQBdH2P6FrbM0sBYaRX9x4+p4
EoqMiXREK41ErRjJcmeRaj8Rbbzolzvp6kUNWH/oUxgezZMDQZZn/V9PZuNZQ6gt
aLmwCihwBzT0iJYE7jOhhr63T+vYtC5uAOuDZflYYjuwDpRnX4GYJrmLpeZ6WifU
aCOwAoUrL07CXQzSZ3eXYIMBxZPIi76sUCQ3EXZlJ5U1wdGoRJXXoEimz41zYMH7
9IO+LYMNNs8o7OCr2Qi1oyJkngQqjIYWuSp9tHKB2foQXHuqJEPTvD4V/Pqt2tJf
I41veR4Fl5x1hIL19LHlesD1aNnXMy4jPFmy7qC6etEQCMGzFH8cE3xPAwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFhSIrQtYguEsWg/oETkhYxrCBhAMB8GA1UdIwQY
MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt
Y2ZhNWE0Yjg5ODZiLzEvV0ZJaXRDMWlDNFN4YUQtZ1JPU0ZqR3NJR0VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi
LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhCrgARg
MA0GCSqGSIb3DQEBCwUAA4IBAQAcx/seF0cuiBq5C2JcFZuA+mY6MTdVSODc3WNr
bKvvIaIH/88g0aD5lt0v+MO6aIeKqccRznOIqjbDSw/8fvV3Hm0WUzmDHfDZ9E3J
Rl5L5V8aHSUMM10Ri7HVaNgmCxfhpS9cGeJv4D7BriusvG/k6jAMvvYBGFUo+TYH
Y9UA4SYYz8WXLIRPjKZjLqByJLpIaNq84oqhYk+9t0Y41YNXBd1sd0JBq9R4OfWg
/H5eaLTGIpwOLEAbXinb62bVGOFAiJxMM9lEbE6UFpCLkd7+YgF4GeEMsgZrxZRF
RFAsjx0fKZytxTyslot0hBUqrTuX92da+lxZpLPrybV1b1vp
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:53 2026 by rpki-client