Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/bIX0tHr0jNswqPbh1gH8l-5GqA8.roa
File: bIX0tHr0jNswqPbh1gH8l-5GqA8.roa (raw, json)
Hash identifier: 5BjYOxvY1gubdV0c42SuZfXnljPiDdTy3UNiDoGVdu4=
Subject key identifier: 6C:85:F4:B4:7A:F4:8C:DB:30:A8:F6:E1:D6:01:FC:97:EE:46:A8:0F
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 01A0CE34A0BEB0A75F4AFC601513D4016282
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/bIX0tHr0jNswqPbh1gH8l-5GqA8.roa
Signing time: Wed 23 Sep 2026 12:19:10 +0000
ROA not before: Wed 23 Sep 2026 12:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218609
IP address blocks: 2a10:ab80:448::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:34:a0:be:b0:a7:5f:4a:fc:60:15:13:d4:01:62:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Sep 23 12:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c85f4b47af48cdb30a8f6e1d601fc97ee46a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:a5:3d:61:95:77:66:2d:72:35:c3:f5:58:
a1:22:e8:40:32:db:72:2b:90:8a:98:92:01:05:17:
08:20:b5:ce:86:49:2c:27:3d:b4:57:ad:b7:97:d8:
04:72:d5:45:3c:08:72:b8:db:a6:f1:cb:a3:31:b0:
07:e8:a4:71:c7:8f:18:c5:4b:26:35:2d:7f:13:cb:
7d:8d:aa:ea:19:af:26:96:0d:34:e2:17:7d:41:60:
87:9e:39:51:94:2a:96:7c:08:61:a6:2e:c6:5b:9a:
3e:47:52:10:7c:f2:de:18:4d:eb:52:d8:d6:3c:97:
f8:cb:e4:e3:20:70:de:90:8d:3d:50:a6:97:ad:ba:
77:87:df:21:b0:48:73:c9:5c:bb:da:8a:d8:88:43:
74:48:4d:14:8f:ec:29:31:f7:b6:a8:44:52:2e:89:
63:1d:7b:1d:53:81:09:be:14:ea:67:8b:3b:ec:6c:
93:6a:91:e6:22:55:65:e7:e9:6a:6c:08:33:85:84:
0b:fc:77:80:3c:d0:51:48:58:bd:47:d8:e1:56:a6:
7d:20:9c:9f:5e:c8:6f:66:bd:ac:c0:3c:55:4d:82:
37:3f:7f:45:75:a5:c8:f6:ad:32:66:a4:c5:73:18:
c5:83:b2:80:e2:34:30:3e:ce:fa:88:a8:02:11:8d:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:85:F4:B4:7A:F4:8C:DB:30:A8:F6:E1:D6:01:FC:97:EE:46:A8:0F
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/bIX0tHr0jNswqPbh1gH8l-5GqA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:448::/48
Signature Algorithm: sha256WithRSAEncryption
7e:0e:86:ea:07:9f:c0:38:d0:e0:58:b4:b0:3e:51:83:74:89:
7a:d6:0d:6b:67:18:4d:8f:6f:7b:ed:75:31:86:5b:ad:57:22:
75:2e:24:f2:d6:3a:49:a3:00:4c:66:39:34:0f:b5:6b:00:43:
3d:1d:b6:b5:db:b5:1e:eb:92:22:22:c6:71:34:3f:7b:0f:7a:
62:47:f2:4e:2a:74:40:94:30:65:99:aa:66:85:8b:b9:be:93:
60:da:c7:4e:4b:2e:ea:37:33:a5:b4:b3:8e:0a:43:69:e1:fa:
cb:dc:8b:f5:13:e6:64:c8:1d:c5:40:18:44:ac:79:f7:58:8c:
25:9d:e8:b1:99:bb:90:7b:ee:d0:77:72:77:b8:03:e1:02:e4:
c7:24:86:18:99:73:86:d3:8e:ae:fe:c3:4d:71:53:74:e7:38:
c0:20:6e:9e:6b:35:4a:7a:c2:44:81:0a:76:b2:af:cf:ef:53:
66:08:63:75:8c:9c:03:0d:10:08:86:7d:89:f5:29:ff:76:67:
9c:91:63:9c:26:15:b4:64:d0:b6:8c:73:81:6b:bd:35:75:08:
27:72:f9:ad:8a:b3:2e:d4:07:0d:ad:80:b8:51:ee:41:14:b2:
f0:0f:3c:5f:de:d2:28:b0:7f:75:84:07:f4:26:77:49:0c:40:
16:12:05:a4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDONKC+sKdfSvxgFRPUAWKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2
NGM2ZDEwHhcNMjYwOTIzMTIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzg1ZjRiNDdhZjQ4Y2RiMzBhOGY2ZTFkNjAxZmM5N2VlNDZhODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SelPWGVd2YtcjXD9VihIuhAMtty
K5CKmJIBBRcIILXOhkksJz20V623l9gEctVFPAhyuNum8cujMbAH6KRxx48YxUsm
NS1/E8t9jarqGa8mlg004hd9QWCHnjlRlCqWfAhhpi7GW5o+R1IQfPLeGE3rUtjW
PJf4y+TjIHDekI09UKaXrbp3h98hsEhzyVy72orYiEN0SE0Uj+wpMfe2qERSLolj
HXsdU4EJvhTqZ4s77GyTapHmIlVl5+lqbAgzhYQL/HeAPNBRSFi9R9jhVqZ9IJyf
XshvZr2swDxVTYI3P39FdaXI9q0yZqTFcxjFg7KA4jQwPs76iKgCEY0w3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGyF9LR69IzbMKj24dYB/JfuRqgPMB8GA1UdIwQY
MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt
Y2ZhNWE0Yjg5ODZiLzEvYklYMHRIcjBqTnN3cVBiaDFnSDhsLTVHcUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi
LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhCrgARI
MA0GCSqGSIb3DQEBCwUAA4IBAQB+DobqB5/AONDgWLSwPlGDdIl61g1rZxhNj297
7XUxhlutVyJ1LiTy1jpJowBMZjk0D7VrAEM9Hba127Ue65IiIsZxND97D3piR/JO
KnRAlDBlmapmhYu5vpNg2sdOSy7qNzOltLOOCkNp4frL3Iv1E+ZkyB3FQBhErHn3
WIwlneixmbuQe+7Qd3J3uAPhAuTHJIYYmXOG046u/sNNcVN05zjAIG6eazVKesJE
gQp2sq/P71NmCGN1jJwDDRAIhn2J9Sn/dmeckWOcJhW0ZNC2jHOBa701dQgncvmt
irMu1AcNrYC4Ue5BFLLwDzxf3tIosH91hAf0JndJDEAWEgWk
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:37:56 2026 by rpki-client