Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/FfI9y9-SK9RO9khNmUvvCOvk8VE.roa
File: FfI9y9-SK9RO9khNmUvvCOvk8VE.roa (raw, json)
Hash identifier: AQ7JIGS43s4QXeuE9yFO9y6fNLgQf4eWUY4S5cfVnDI=
Subject key identifier: 15:F2:3D:CB:DF:92:2B:D4:4E:F6:48:4D:99:4B:EF:08:EB:E4:F1:51
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019FA4232705950EC9DC41C8E2D9DA5638B0
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/FfI9y9-SK9RO9khNmUvvCOvk8VE.roa
Signing time: Mon 27 Jul 2026 15:13:14 +0000
ROA not before: Mon 27 Jul 2026 15:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402402
IP address blocks: 2a11:fa00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:23:27:05:95:0e:c9:dc:41:c8:e2:d9:da:56:38:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 27 15:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15f23dcbdf922bd44ef6484d994bef08ebe4f151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:aa:51:bd:e6:a4:0d:5e:b2:70:d4:6e:52:
8a:16:bf:9f:3d:33:27:a8:6d:8f:75:35:87:e8:07:
3b:4a:e7:c8:2a:b5:e7:72:cb:b5:7e:16:5e:cc:c0:
b1:5d:bd:16:b4:1c:00:34:f6:e0:6c:4a:56:af:f7:
a9:a1:c6:a9:b1:98:31:11:98:85:22:b0:ec:f1:a0:
dd:81:35:71:f0:bd:fd:86:1c:fa:38:f7:5c:15:2a:
39:c2:e9:d1:9b:0a:82:f1:bb:46:50:27:1c:56:8c:
83:94:ea:d7:25:34:16:ca:7d:e3:bb:23:0d:ba:1b:
cc:f7:24:3a:02:af:25:b7:b2:8e:28:24:d7:08:d9:
df:a4:ef:1c:b8:93:b4:9f:5c:f9:24:4d:69:80:9f:
94:1e:46:d4:aa:b6:dd:d3:8b:59:f0:06:a2:02:e3:
0f:8c:ad:a3:32:ab:44:4c:80:c7:a4:81:f9:31:85:
e8:d2:7e:3d:b8:1b:39:73:06:1b:d4:fc:ed:01:3e:
89:0e:9c:9f:f1:af:45:80:83:44:c9:dc:92:fe:7b:
eb:a1:5e:fb:77:a0:61:68:77:94:cc:17:ea:0a:33:
8b:25:c0:f5:8b:84:22:ce:0f:0f:56:18:b5:07:cb:
1d:d4:c5:35:f0:e1:f4:26:50:a0:65:5f:b0:4a:f9:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F2:3D:CB:DF:92:2B:D4:4E:F6:48:4D:99:4B:EF:08:EB:E4:F1:51
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/FfI9y9-SK9RO9khNmUvvCOvk8VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
6f:c1:96:93:2e:07:b4:0e:b0:a3:9d:50:f3:a5:60:30:63:24:
cd:99:7a:24:2e:aa:74:1e:f6:0d:d4:0c:73:84:99:d8:cb:dc:
c0:9a:ac:8d:c0:c4:6e:a4:a2:c6:19:1d:38:e3:67:84:ad:ca:
09:18:64:8e:1d:ba:57:33:6e:7e:89:b0:68:04:c1:2e:41:62:
5e:a5:f7:e9:14:d1:8f:d2:dd:2c:3c:f7:b5:58:61:84:2d:a9:
b6:91:b0:99:1c:e8:a3:49:50:a0:0e:3e:06:55:26:20:89:e0:
6e:c5:50:02:8e:62:40:8b:95:4d:81:08:6a:af:41:72:36:3e:
b7:0c:39:94:e9:f2:da:35:00:fa:e1:30:5e:67:a8:b3:bd:00:
1e:80:a7:f1:1a:fe:26:99:f1:23:01:5d:3f:d9:ea:de:f8:90:
14:82:cf:04:17:d5:dd:fd:7b:46:70:c1:bf:1b:12:f1:d0:f9:
0f:49:bf:48:23:a6:1d:f8:42:2d:4f:4e:bb:d6:0d:32:b5:59:
17:d9:06:0f:33:98:52:81:bd:cd:13:90:0e:6c:10:4b:5b:88:
97:05:ce:e9:7d:7e:ca:32:2e:b2:84:db:d9:ee:c1:64:48:6a:
49:24:bf:e0:1d:96:62:50:e5:30:80:8f:bf:8f:12:b7:74:57:
f1:ae:de:ab
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ+kIycFlQ7J3EHI4tnaVjiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjYwNzI3MTUxMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWYyM2RjYmRmOTIyYmQ0NGVmNjQ4NGQ5OTRiZWYwOGViZTRmMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsweqUb3mpA1esnDUblKKFr+fPTMn
qG2PdTWH6Ac7SufIKrXncsu1fhZezMCxXb0WtBwANPbgbEpWr/epocapsZgxEZiF
IrDs8aDdgTVx8L39hhz6OPdcFSo5wunRmwqC8btGUCccVoyDlOrXJTQWyn3juyMN
uhvM9yQ6Aq8lt7KOKCTXCNnfpO8cuJO0n1z5JE1pgJ+UHkbUqrbd04tZ8AaiAuMP
jK2jMqtETIDHpIH5MYXo0n49uBs5cwYb1PztAT6JDpyf8a9FgINEydyS/nvroV77
d6BhaHeUzBfqCjOLJcD1i4Qizg8PVhi1B8sd1MU18OH0JlCgZV+wSvlLywIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBXyPcvfkivUTvZITZlL7wjr5PFRMB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvRmZJOXk5LVNLOVJPOWtoTm1VdnZDT3ZrOFZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhH6ADAN
BgkqhkiG9w0BAQsFAAOCAQEAb8GWky4HtA6wo51Q86VgMGMkzZl6JC6qdB72DdQM
c4SZ2MvcwJqsjcDEbqSixhkdOONnhK3KCRhkjh26VzNufomwaATBLkFiXqX36RTR
j9LdLDz3tVhhhC2ptpGwmRzoo0lQoA4+BlUmIIngbsVQAo5iQIuVTYEIaq9BcjY+
tww5lOny2jUA+uEwXmeos70AHoCn8Rr+JpnxIwFdP9nq3viQFILPBBfV3f17RnDB
vxsS8dD5D0m/SCOmHfhCLU9Ou9YNMrVZF9kGDzOYUoG9zROQDmwQS1uIlwXO6X1+
yjIusoTb2e7BZEhqSSS/4B2WYlDlMICPv48St3RX8a7eqw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:00 2026 by rpki-client