Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/_dyCn0af7TrzRPYjSBrs5HUZebE.roa
File: _dyCn0af7TrzRPYjSBrs5HUZebE.roa (raw, json)
Hash identifier: ZtsAjPVzKNH3vYir+/4QsbvP4DSxpwqWq4AOM0Movm0=
Subject key identifier: FD:DC:82:9F:46:9F:ED:3A:F3:44:F6:23:48:1A:EC:E4:75:19:79:B1
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01A1398A646B1D0954D951F3030F3FE80FCE
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/_dyCn0af7TrzRPYjSBrs5HUZebE.roa
Signing time: Wed 14 Oct 2026 08:32:13 +0000
ROA not before: Wed 14 Oct 2026 08:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216070
IP address blocks: 2a06:2840::/32 maxlen: 32
2a06:2841::/32 maxlen: 32
2a06:2842::/32 maxlen: 32
2a06:2843::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:8a:64:6b:1d:09:54:d9:51:f3:03:0f:3f:e8:0f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Oct 14 08:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fddc829f469fed3af344f623481aece4751979b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:67:3c:11:f6:c7:a2:aa:ec:86:72:42:af:
00:44:be:e6:63:2d:67:a7:e0:7e:0a:37:3e:52:ed:
36:ef:d0:a3:2e:49:21:79:5f:89:05:c6:7b:55:83:
d4:f5:98:0e:09:f3:40:f7:fb:49:21:13:35:41:90:
7c:48:cc:29:66:61:ea:47:55:e8:a9:c0:8d:e4:9b:
09:a1:f9:dd:bd:fe:48:69:bf:c0:97:e8:67:18:8b:
eb:94:a8:4f:5e:2c:df:97:bb:60:e1:29:bf:37:1a:
dc:33:08:3c:ed:6a:e8:e0:d5:6e:e4:ff:9c:e7:ea:
14:9c:25:13:ad:aa:c7:94:ca:3a:cd:e4:82:f2:a9:
7d:c4:af:93:b1:dd:01:7a:55:95:ea:ca:22:ff:2f:
0f:82:9a:03:8c:80:c1:23:f0:80:13:c6:1a:74:cb:
19:80:78:0b:5b:eb:ed:03:51:bd:66:b5:5c:63:aa:
ea:ea:e6:65:2d:fd:52:d2:7f:d6:1b:72:91:ad:b4:
1f:8d:55:c0:c2:7a:84:1d:89:19:b1:5a:ab:0b:a4:
77:b0:4c:8d:56:d9:00:2f:37:00:a4:97:86:2b:a9:
e7:3c:a2:cb:48:58:cc:0c:a3:97:3c:8b:9c:11:1c:
7e:d3:5c:c0:3c:a2:02:90:18:b2:92:78:ee:19:66:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DC:82:9F:46:9F:ED:3A:F3:44:F6:23:48:1A:EC:E4:75:19:79:B1
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/_dyCn0af7TrzRPYjSBrs5HUZebE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2840::/30
Signature Algorithm: sha256WithRSAEncryption
b7:7b:11:cd:39:30:5f:5f:dd:42:3e:24:d8:55:cb:40:c4:17:
51:da:26:06:ac:b7:25:80:57:ca:e9:37:07:79:2f:a0:fb:bf:
db:29:0a:91:aa:68:4a:de:7b:72:0a:d8:79:3a:12:ff:42:65:
cb:7b:52:a4:85:66:e8:77:4f:4e:ed:0b:32:59:7e:2d:3e:d9:
fd:8c:af:4f:e2:86:de:f1:51:6d:9d:6c:00:54:1e:06:70:42:
8c:cb:ee:6b:82:53:0f:8b:c1:66:c1:ea:0f:a9:96:4c:06:35:
8c:07:45:4e:3a:f6:01:7e:98:3c:2f:89:80:53:f6:80:13:bf:
43:3c:d8:0e:e3:38:48:74:97:8d:22:42:0d:88:6b:61:1c:bb:
85:0b:de:2a:f6:a9:ca:fa:bf:0f:cf:61:42:21:50:5c:7c:8e:
93:d9:b9:ae:ad:20:09:b8:d9:ef:90:40:db:89:9c:90:84:18:
93:23:96:68:6e:7a:b2:b5:be:c1:2d:55:19:42:7a:ce:2b:41:
ca:2b:ff:4c:bf:72:8d:0b:49:80:6d:a6:8f:8d:46:51:84:c6:
1e:f6:78:0a:c7:fe:24:00:41:ab:da:83:20:03:7e:99:03:03:
ac:78:21:7e:8b:7e:55:f9:21:bb:2f:1e:c5:5c:fc:44:ab:98:
dd:48:6d:51
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE5imRrHQlU2VHzAw8/6A/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk
ZTBlYzAwHhcNMjYxMDE0MDgzMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGRjODI5ZjQ2OWZlZDNhZjM0NGY2MjM0ODFhZWNlNDc1MTk3OWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BRnPBH2x6Kq7IZyQq8ARL7mYy1n
p+B+Cjc+Uu0279CjLkkheV+JBcZ7VYPU9ZgOCfNA9/tJIRM1QZB8SMwpZmHqR1Xo
qcCN5JsJofndvf5Iab/Al+hnGIvrlKhPXizfl7tg4Sm/NxrcMwg87Wro4NVu5P+c
5+oUnCUTrarHlMo6zeSC8ql9xK+Tsd0BelWV6soi/y8PgpoDjIDBI/CAE8YadMsZ
gHgLW+vtA1G9ZrVcY6rq6uZlLf1S0n/WG3KRrbQfjVXAwnqEHYkZsVqrC6R3sEyN
VtkALzcApJeGK6nnPKLLSFjMDKOXPIucERx+01zAPKICkBiyknjuGWZMqQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFP3cgp9Gn+0680T2I0ga7OR1GXmxMB8GA1UdIwQY
MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt
NmYyY2Y0ZjAzY2ViLzEvX2R5Q24wYWY3VHJ6UlBZalNCcnM1SFVaZWJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi
LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgYoQDAN
BgkqhkiG9w0BAQsFAAOCAQEAt3sRzTkwX1/dQj4k2FXLQMQXUdomBqy3JYBXyuk3
B3kvoPu/2ykKkapoSt57cgrYeToS/0Jly3tSpIVm6HdPTu0LMll+LT7Z/YyvT+KG
3vFRbZ1sAFQeBnBCjMvua4JTD4vBZsHqD6mWTAY1jAdFTjr2AX6YPC+JgFP2gBO/
QzzYDuM4SHSXjSJCDYhrYRy7hQveKvapyvq/D89hQiFQXHyOk9m5rq0gCbjZ75BA
24mckIQYkyOWaG56srW+wS1VGUJ6zitByiv/TL9yjQtJgG2mj41GUYTGHvZ4Csf+
JABBq9qDIAN+mQMDrHghfot+Vfkhuy8exVz8RKuY3UhtUQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:29 2026 by rpki-client