Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/L_gtkUnATmoO5QJie_VnxlplLHo.roa
File: L_gtkUnATmoO5QJie_VnxlplLHo.roa (raw, json)
Hash identifier: WAO9wEB0s8r0Gfvok8PbvOhNhD/PzrMsQleSec8Yw4s=
Subject key identifier: 2F:F8:2D:91:49:C0:4E:6A:0E:E5:02:62:7B:F5:67:C6:5A:65:2C:7A
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A004EF030DD1EA3756890B6C59173BA28C
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/L_gtkUnATmoO5QJie_VnxlplLHo.roa
Signing time: Sat 15 Aug 2026 10:19:27 +0000
ROA not before: Sat 15 Aug 2026 10:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a10:fa80:2::/48 maxlen: 48
2a10:fa81:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:ef:03:0d:d1:ea:37:56:89:0b:6c:59:17:3b:a2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 15 10:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ff82d9149c04e6a0ee502627bf567c65a652c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:1a:d9:80:b6:d7:79:20:9a:d6:f9:e5:f0:
be:51:44:17:97:42:d4:48:40:61:57:15:4e:a5:12:
c5:63:ba:31:40:af:2a:4b:d9:c3:fd:df:54:5e:9c:
3b:2f:65:be:61:eb:d6:0a:e5:4a:cc:15:c6:ad:3f:
ab:ef:a1:88:22:b3:89:74:21:ff:bc:f5:3a:3d:5e:
14:c0:14:2b:56:84:0b:45:ed:3d:2d:9d:33:0f:2b:
b4:f5:67:b6:dc:67:05:24:39:1b:26:e6:65:5c:ec:
43:71:5b:2d:71:b0:ab:54:58:5f:34:5e:26:c7:9b:
52:72:77:43:0e:88:20:34:af:fe:65:64:7e:40:6b:
44:ec:e2:b4:83:30:8c:3e:a9:80:61:22:93:d1:ed:
97:c1:3e:77:a4:40:19:61:7d:08:1d:46:bb:05:63:
57:46:30:d3:73:19:bd:64:b5:31:ca:aa:75:f7:8f:
c0:d8:46:0d:d2:c3:e8:e9:a4:58:40:e8:65:cb:78:
2d:24:46:f8:4d:dc:fa:dd:86:75:f1:95:ea:0b:e3:
d8:60:88:cd:b5:a3:f0:49:e5:d6:f5:05:26:f0:9b:
bf:ae:17:d6:ed:0c:d0:72:34:d8:96:65:58:70:a6:
73:28:b9:95:44:89:8a:79:b1:75:6f:61:de:af:32:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:2D:91:49:C0:4E:6A:0E:E5:02:62:7B:F5:67:C6:5A:65:2C:7A
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/L_gtkUnATmoO5QJie_VnxlplLHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:2::/48
2a10:fa81:500::/40
Signature Algorithm: sha256WithRSAEncryption
1a:d5:9a:f8:d5:f6:2a:75:15:aa:7c:8c:19:70:0f:d5:8f:ed:
61:33:05:ab:30:78:c8:5c:80:e4:4e:74:96:38:06:4c:e0:14:
dc:bf:be:43:34:67:32:f3:9b:a0:94:87:e2:d1:8d:a6:d9:22:
01:00:16:28:db:b2:3d:1d:6c:36:a4:7e:13:61:47:af:e4:bd:
b3:6c:ef:02:af:9d:45:91:95:e3:8d:67:a3:b2:c5:83:19:41:
af:1d:9a:ad:62:57:7b:b8:94:ea:81:2a:9d:48:ba:69:e6:6b:
f4:f1:79:ec:57:39:83:01:2b:f7:6c:8e:65:63:31:46:7c:28:
db:94:69:e5:ad:c4:fa:35:b8:8c:cc:9d:ae:79:80:1b:ac:da:
cd:18:aa:14:9c:80:fe:b8:66:11:35:c0:e1:47:b8:f0:40:c5:
e5:4a:b9:2e:90:8a:7c:a2:37:88:b6:d1:f0:77:13:cf:ec:dd:
13:17:4b:fa:24:c8:ea:f0:d4:16:34:03:35:85:2e:3a:e7:46:
9c:3b:f2:8c:36:16:ca:a5:44:c8:dd:53:44:41:9c:6a:fc:17:
95:ff:1e:9a:af:97:0f:8e:a0:88:e0:ea:8a:a0:9f:ba:6e:f7:
86:9c:4a:85:60:97:68:f6:64:1b:95:e9:ef:52:af:c3:f4:e8:
44:78:1e:87
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAaAE7wMN0eo3VokLbFkXO6KMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYwODE1MTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmY4MmQ5MTQ5YzA0ZTZhMGVlNTAyNjI3YmY1NjdjNjVhNjUyYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucQa2YC213kgmtb55fC+UUQXl0LU
SEBhVxVOpRLFY7oxQK8qS9nD/d9UXpw7L2W+YevWCuVKzBXGrT+r76GIIrOJdCH/
vPU6PV4UwBQrVoQLRe09LZ0zDyu09We23GcFJDkbJuZlXOxDcVstcbCrVFhfNF4m
x5tScndDDoggNK/+ZWR+QGtE7OK0gzCMPqmAYSKT0e2XwT53pEAZYX0IHUa7BWNX
RjDTcxm9ZLUxyqp194/A2EYN0sPo6aRYQOhly3gtJEb4Tdz63YZ18ZXqC+PYYIjN
taPwSeXW9QUm8Ju/rhfW7QzQcjTYlmVYcKZzKLmVRImKebF1b2HerzJUjQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFC/4LZFJwE5qDuUCYnv1Z8ZaZSx6MB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvTF9ndGtVbkFUbW9PNVFKaWVfVm54bHBsTEhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhD6gAAC
AwYAKhD6gQUwDQYJKoZIhvcNAQELBQADggEBABrVmvjV9ip1Fap8jBlwD9WP7WEz
BasweMhcgOROdJY4BkzgFNy/vkM0ZzLzm6CUh+LRjabZIgEAFijbsj0dbDakfhNh
R6/kvbNs7wKvnUWRleONZ6OyxYMZQa8dmq1iV3u4lOqBKp1Iumnma/TxeexXOYMB
K/dsjmVjMUZ8KNuUaeWtxPo1uIzMna55gBus2s0YqhScgP64ZhE1wOFHuPBAxeVK
uS6QinyiN4i20fB3E8/s3RMXS/okyOrw1BY0AzWFLjrnRpw78ow2FsqlRMjdU0RB
nGr8F5X/Hpqvlw+OoIjg6oqgn7pu94acSoVgl2j2ZBuV6e9Sr8P06ER4Hoc=
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:54:47 2026 by rpki-client