Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/gCiuE3gKMdzASY0zTVAe9uv5_J4.roa
File: gCiuE3gKMdzASY0zTVAe9uv5_J4.roa (raw, json)
Hash identifier: exfifMyYENPpxSTdi1sYYrW0o21xQWlbiiOsb3TEuVY=
Subject key identifier: 80:28:AE:13:78:0A:31:DC:C0:49:8D:33:4D:50:1E:F6:EB:F9:FC:9E
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019F47F5DF70D496F2713CA3FCD5F84801CA
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/gCiuE3gKMdzASY0zTVAe9uv5_J4.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a11:1ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:df:70:d4:96:f2:71:3c:a3:fc:d5:f8:48:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8028ae13780a31dcc0498d334d501ef6ebf9fc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:a4:e6:cc:53:ea:5b:ba:33:25:b3:78:9e:
39:d4:ef:39:94:88:13:92:ca:b9:f9:9d:ff:93:d4:
1e:e1:d6:c9:bb:71:07:b5:4f:b8:0f:61:c5:c1:59:
0e:27:5c:07:31:ba:0f:3c:3e:56:89:49:7d:88:0c:
99:3a:44:95:5b:61:3f:6d:a5:bd:a1:17:c3:93:71:
67:31:01:9f:10:e6:eb:a1:9d:2c:32:b7:77:64:26:
3c:1e:3f:58:35:16:f3:67:66:7d:63:d2:77:98:9f:
dc:e2:74:b9:a0:9a:92:8c:dd:2c:34:21:31:78:2a:
c6:16:18:10:f2:6e:3d:de:e9:79:7b:a2:7a:bd:23:
c5:18:42:68:5f:58:58:a6:e3:9b:fa:b3:04:09:0b:
8b:34:8e:3f:fa:cd:e0:71:d7:e8:24:04:e6:a9:ed:
3e:ff:67:2d:4c:5e:63:5b:22:03:b4:3f:cc:23:e8:
52:bd:fc:69:bd:6e:46:33:e0:e8:ce:f4:34:f2:32:
c7:35:69:6a:b5:4a:88:ba:c9:ce:e2:ee:0d:07:ae:
6d:69:77:b7:b6:3f:e4:03:29:64:41:5a:68:7c:48:
8c:63:e0:f9:7e:6d:7f:7a:13:5e:3f:7c:d3:e0:b0:
45:6e:55:b0:c3:d1:cc:4a:62:8a:92:df:63:52:a1:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:28:AE:13:78:0A:31:DC:C0:49:8D:33:4D:50:1E:F6:EB:F9:FC:9E
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/gCiuE3gKMdzASY0zTVAe9uv5_J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1ac0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:1c:fc:30:cd:cf:bd:57:28:6f:57:a0:c1:68:28:23:8a:2e:
df:63:72:5b:bc:02:1f:ca:0f:50:0a:84:44:04:8a:e5:e7:14:
67:b2:f9:48:80:c3:f6:a8:1a:d8:04:f7:57:9c:15:1b:8a:a4:
62:e3:cb:0e:d2:f9:4d:8f:98:2f:83:0b:da:49:32:fe:a3:81:
c8:1a:c6:87:d7:6e:7d:f3:c7:e7:cf:10:2c:1a:72:d2:f9:45:
7f:07:3b:aa:1c:4f:e7:3b:26:4c:4a:fa:af:00:6b:0b:14:ee:
23:4b:51:16:13:7a:98:5c:25:b0:5f:fb:da:1e:db:b5:89:0a:
18:bc:e7:fe:77:a6:cf:a6:83:0b:7f:e5:96:86:ba:95:63:a0:
4f:c0:89:8f:2b:ef:86:a8:7c:87:9a:b9:50:b5:89:63:d3:54:
f3:54:27:16:c5:8c:4e:56:7b:97:94:7e:72:a9:93:40:43:93:
bc:e8:93:4f:99:2a:72:8f:74:0b:5c:ed:61:b7:0a:17:cb:d6:
9b:1e:22:13:ed:df:ec:f6:98:0c:99:36:af:75:c6:f0:15:11:
0c:bc:b4:e8:7e:fe:88:5c:87:47:0b:73:a9:91:6b:c9:a4:c9:
64:dd:72:4a:eb:87:76:8f:41:ff:b6:8c:6d:2b:7b:ab:4c:76:
76:52:3c:ee
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9H9d9w1JbycTyj/NX4SAHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjYwNzA5MTczODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDI4YWUxMzc4MGEzMWRjYzA0OThkMzM0ZDUwMWVmNmViZjlmYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+Ok5sxT6lu6MyWzeJ451O85lIgT
ksq5+Z3/k9Qe4dbJu3EHtU+4D2HFwVkOJ1wHMboPPD5WiUl9iAyZOkSVW2E/baW9
oRfDk3FnMQGfEObroZ0sMrd3ZCY8Hj9YNRbzZ2Z9Y9J3mJ/c4nS5oJqSjN0sNCEx
eCrGFhgQ8m493ul5e6J6vSPFGEJoX1hYpuOb+rMECQuLNI4/+s3gcdfoJATmqe0+
/2ctTF5jWyIDtD/MI+hSvfxpvW5GM+DozvQ08jLHNWlqtUqIusnO4u4NB65taXe3
tj/kAylkQVpofEiMY+D5fm1/ehNeP3zT4LBFblWww9HMSmKKkt9jUqENIwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIAorhN4CjHcwEmNM01QHvbr+fyeMB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvZ0NpdUUzZ0tNZHpBU1kwelRWQWU5dXY1X0o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhEawDAN
BgkqhkiG9w0BAQsFAAOCAQEATRz8MM3PvVcob1egwWgoI4ou32NyW7wCH8oPUAqE
RASK5ecUZ7L5SIDD9qga2AT3V5wVG4qkYuPLDtL5TY+YL4ML2kky/qOByBrGh9du
ffPH588QLBpy0vlFfwc7qhxP5zsmTEr6rwBrCxTuI0tRFhN6mFwlsF/72h7btYkK
GLzn/nemz6aDC3/lloa6lWOgT8CJjyvvhqh8h5q5ULWJY9NU81QnFsWMTlZ7l5R+
cqmTQEOTvOiTT5kqco90C1ztYbcKF8vWmx4iE+3f7PaYDJk2r3XG8BURDLy06H7+
iFyHRwtzqZFryaTJZN1ySuuHdo9B/7aMbSt7q0x2dlI87g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:44 2026 by rpki-client