Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F9sOFhGwXAaixZhiKbOZTTQcajY.roa
File: F9sOFhGwXAaixZhiKbOZTTQcajY.roa (raw, json)
Hash identifier: TzbjeUNO5viiVpucy3wHmnjnPx1dcWJJadQ/3w/f5DE=
Subject key identifier: 17:DB:0E:16:11:B0:5C:06:A2:C5:98:62:29:B3:99:4D:34:1C:6A:36
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019EDA65BCDF000F500F0F34B17B20825984
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F9sOFhGwXAaixZhiKbOZTTQcajY.roa
Signing time: Thu 18 Jun 2026 11:02:41 +0000
ROA not before: Thu 18 Jun 2026 11:02:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:600::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:65:bc:df:00:0f:50:0f:0f:34:b1:7b:20:82:59:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jun 18 11:02:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17db0e1611b05c06a2c5986229b3994d341c6a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:dd:21:00:d2:e8:ee:b0:3e:78:08:de:23:
b4:44:f7:53:a8:77:5e:cb:a1:e8:64:0d:2c:7f:d7:
fb:48:38:7e:2c:4d:e5:5c:95:0f:7f:42:e3:02:48:
43:5f:5d:7c:c3:d4:b4:5b:63:d8:96:7e:8e:91:60:
fc:da:55:89:3d:dc:c1:9e:4a:f4:8e:d4:9f:cc:af:
e0:6d:e1:94:85:49:14:56:4b:ad:a8:8c:3c:5f:3b:
19:c4:51:db:bc:60:7a:a4:bf:4f:10:f0:19:7c:90:
86:e9:ae:a7:73:9d:b2:e5:87:a8:ff:8c:9e:f6:40:
3a:08:dd:b9:c0:b8:5e:bb:b5:68:c5:8e:28:d0:47:
ed:7e:b7:db:d2:fa:25:2c:40:35:fe:3d:72:b1:5a:
45:8b:55:cd:39:7f:c7:4c:24:7f:57:c9:4b:c5:71:
92:af:f0:1b:b9:33:fe:49:53:61:2f:a5:1d:8b:54:
6e:a4:c4:25:a8:a6:87:23:e6:2a:48:13:ff:23:2c:
93:47:ca:b6:6b:ce:5a:7e:50:5a:22:bb:79:55:08:
b8:83:34:13:c0:ac:39:db:9c:2c:04:63:d6:23:c0:
0a:f9:03:c5:a9:f9:b3:a6:01:4c:68:84:45:2d:17:
ff:2e:d3:88:8f:5c:35:ba:93:75:ed:f6:00:25:7c:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DB:0E:16:11:B0:5C:06:A2:C5:98:62:29:B3:99:4D:34:1C:6A:36
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F9sOFhGwXAaixZhiKbOZTTQcajY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:600::/32
Signature Algorithm: sha256WithRSAEncryption
2c:75:b2:1c:d0:c6:99:30:70:58:f5:d9:c8:61:a5:bf:8f:fa:
da:29:45:52:aa:97:d5:73:55:05:c7:70:72:6a:b9:7b:33:f1:
27:df:39:40:c4:5d:aa:2e:34:62:53:c1:1b:e0:b5:3c:11:5c:
b5:12:87:2d:e6:b0:18:ed:af:8f:23:37:d6:ac:42:fc:6d:b2:
6c:27:0d:c2:48:c6:c9:de:8d:35:20:f0:52:4f:6c:cc:c3:f5:
2f:7e:f1:d7:41:d1:e9:27:41:e1:09:8f:a4:58:b2:e5:01:8b:
e4:50:f6:40:5f:e2:f6:b3:4d:3b:10:5a:80:78:64:8c:9c:b0:
9b:58:a1:9e:8c:e0:2d:14:6c:2b:ed:5e:23:9c:ea:d0:bf:5e:
67:97:17:da:59:d1:f9:d0:be:de:f6:75:7a:20:5d:ad:3f:27:
8e:16:d7:3c:16:9e:87:d7:e2:98:c0:3f:2a:3d:d2:45:fa:f1:
d4:18:f0:75:9f:cd:11:73:1e:91:ae:39:73:56:dc:cc:67:42:
eb:25:25:64:e0:d1:53:7e:e4:d1:2a:d7:89:c3:c5:4d:d2:87:
ca:c5:20:d0:10:dd:2d:b8:9c:7b:56:5a:dc:fa:c2:e5:a1:73:
39:fb:9a:be:54:7a:8b:e9:b4:e8:fa:a1:b0:c6:85:c7:3f:77:
fb:55:fc:e8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ7aZbzfAA9QDw80sXsgglmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjYwNjE4MTEwMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2RiMGUxNjExYjA1YzA2YTJjNTk4NjIyOWIzOTk0ZDM0MWM2YTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37ndIQDS6O6wPngI3iO0RPdTqHde
y6HoZA0sf9f7SDh+LE3lXJUPf0LjAkhDX118w9S0W2PYln6OkWD82lWJPdzBnkr0
jtSfzK/gbeGUhUkUVkutqIw8XzsZxFHbvGB6pL9PEPAZfJCG6a6nc52y5Yeo/4ye
9kA6CN25wLheu7VoxY4o0Eftfrfb0volLEA1/j1ysVpFi1XNOX/HTCR/V8lLxXGS
r/AbuTP+SVNhL6Udi1RupMQlqKaHI+YqSBP/IyyTR8q2a85aflBaIrt5VQi4gzQT
wKw525wsBGPWI8AK+QPFqfmzpgFMaIRFLRf/LtOIj1w1upN17fYAJXyZQQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBfbDhYRsFwGosWYYimzmU00HGo2MB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvRjlzT0ZoR3dYQWFpeFpoaUtiT1pUVFFjYWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhIGADAN
BgkqhkiG9w0BAQsFAAOCAQEALHWyHNDGmTBwWPXZyGGlv4/62ilFUqqX1XNVBcdw
cmq5ezPxJ985QMRdqi40YlPBG+C1PBFctRKHLeawGO2vjyM31qxC/G2ybCcNwkjG
yd6NNSDwUk9szMP1L37x10HR6SdB4QmPpFiy5QGL5FD2QF/i9rNNOxBagHhkjJyw
m1ihnozgLRRsK+1eI5zq0L9eZ5cX2lnR+dC+3vZ1eiBdrT8njhbXPBaeh9fimMA/
Kj3SRfrx1BjwdZ/NEXMeka45c1bczGdC6yUlZODRU37k0SrXicPFTdKHysUg0BDd
Lbice1Za3PrC5aFzOfuavlR6i+m06PqhsMaFxz93+1X86A==
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:38 2026 by rpki-client