Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/1-XAW5GOu0BwjGQCXqzBAXoZbe4g.roa
File: 1-XAW5GOu0BwjGQCXqzBAXoZbe4g.roa (raw, json)
Hash identifier: D4ree+ly5I55Tg395RDOoLz9NXot/kvfkZPFYBhFgEo=
Subject key identifier: F9:70:16:E4:63:AE:D0:1C:23:19:00:97:AB:30:40:5E:86:5B:7B:88
Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial: 019E2B73E731DE810EFAC795FD8DCD32E1BC
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/1-XAW5GOu0BwjGQCXqzBAXoZbe4g.roa
Signing time: Fri 15 May 2026 11:44:36 +0000
ROA not before: Fri 15 May 2026 11:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2a05:2ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:73:e7:31:de:81:0e:fa:c7:95:fd:8d:cd:32:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Validity
Not Before: May 15 11:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f97016e463aed01c23190097ab30405e865b7b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:a2:e9:65:7e:ad:88:82:4e:0a:50:1d:64:
22:b4:fa:f5:f4:52:a0:16:d0:c4:93:5c:e1:4a:4e:
ef:56:81:00:19:58:a1:0b:c1:80:3c:c7:32:05:91:
ba:2c:55:81:c9:56:17:f7:ee:2d:9a:da:5b:1d:9d:
2e:e8:9c:c1:e8:6a:f0:6e:06:c3:dd:2d:5e:a4:16:
80:64:6f:8f:7c:6b:36:ce:4e:50:4e:08:28:33:e2:
b9:e3:e2:88:06:2a:bc:09:2d:a4:62:6a:92:15:23:
00:37:4f:0d:12:e5:19:03:01:3e:24:f3:2a:6d:14:
00:3a:20:3c:ac:ac:64:19:53:2c:70:d2:3a:7c:45:
08:3d:81:a0:ba:15:4e:38:b5:e5:0b:9c:81:91:c8:
63:b3:2b:74:fc:0f:c5:0f:d2:b2:ec:26:d2:50:ac:
62:6b:9a:f4:cf:12:9f:2e:18:8d:2d:e4:26:da:94:
e1:7a:84:37:99:e5:40:a2:a1:e3:b7:d9:3b:ff:5d:
3a:fe:8e:ca:0f:40:52:fd:78:8b:a9:3c:68:db:88:
6e:fd:3f:9e:bc:b0:4a:f4:d6:02:87:a2:a7:7b:e9:
67:3c:a4:93:af:3d:47:9a:4f:2e:e3:b6:fb:8c:e8:
e6:0a:13:d7:95:53:30:3a:5c:92:43:b3:f3:82:50:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:70:16:E4:63:AE:D0:1C:23:19:00:97:AB:30:40:5E:86:5B:7B:88
X509v3 Authority Key Identifier:
keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/1-XAW5GOu0BwjGQCXqzBAXoZbe4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:2ac0::/29
Signature Algorithm: sha256WithRSAEncryption
84:9f:2d:0f:ac:d1:41:e0:82:31:ce:7b:87:a8:14:ad:be:3c:
13:a6:78:78:1e:e8:af:a4:5c:b9:ab:0e:dd:8e:be:38:7e:b4:
4e:46:6f:55:54:c4:b4:83:9e:7e:e8:99:ab:11:8f:85:13:53:
d1:80:63:70:58:29:4b:ca:3c:56:fa:9b:8d:46:1e:5a:57:66:
bf:0d:c7:bc:22:b6:6b:89:c6:a1:eb:90:af:c1:43:47:c6:3a:
01:0b:ec:af:2c:55:7f:3d:60:30:b7:4a:76:e3:de:62:a0:9f:
b9:89:f7:59:e4:ec:07:3a:a6:bc:52:e8:a2:de:e1:e2:ae:51:
3a:e6:7a:e7:41:12:24:3e:25:30:9a:f6:19:f5:69:9d:ca:cc:
09:11:d8:80:17:2a:91:f0:f2:ac:9f:95:bf:52:bf:a0:1c:c1:
e9:95:80:d7:bb:31:c8:9c:f9:39:83:77:75:c4:9d:86:4e:88:
cf:e0:d3:6b:bb:bf:ee:a4:0d:5c:82:7e:f7:f3:0e:00:ab:22:
59:58:77:88:4c:12:fc:8d:57:88:75:2d:51:a1:cd:47:54:b0:
63:78:2d:c6:46:66:15:03:d6:4e:a4:8a:6e:28:d0:48:3b:81:
c8:50:3c:72:23:69:59:27:8f:9e:3a:b0:8a:f7:97:76:84:1e:
ed:e0:cd:5f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ4rc+cx3oEO+seV/Y3NMuG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YmQwZDlhYThjNzQzY2RhMTgyZjAwNjY4NTgzYTQ2ZTYw
MGMzMmQwHhcNMjYwNTE1MTE0NDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTcwMTZlNDYzYWVkMDFjMjMxOTAwOTdhYjMwNDA1ZTg2NWI3Yjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVyi6WV+rYiCTgpQHWQitPr19FKg
FtDEk1zhSk7vVoEAGVihC8GAPMcyBZG6LFWByVYX9+4tmtpbHZ0u6JzB6GrwbgbD
3S1epBaAZG+PfGs2zk5QTggoM+K54+KIBiq8CS2kYmqSFSMAN08NEuUZAwE+JPMq
bRQAOiA8rKxkGVMscNI6fEUIPYGguhVOOLXlC5yBkchjsyt0/A/FD9Ky7CbSUKxi
a5r0zxKfLhiNLeQm2pTheoQ3meVAoqHjt9k7/106/o7KD0BS/XiLqTxo24hu/T+e
vLBK9NYCh6Kne+lnPKSTrz1Hmk8u47b7jOjmChPXlVMwOlySQ7PzglCrHQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPlwFuRjrtAcIxkAl6swQF6GW3uIMB8GA1UdIwQY
MBaAFOi9DZqox0PNoYLwBmhYOkbmAMMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jODI0ZDEtOGNmZS00NDBlLTliNWMt
ODg5MjQzODY5Njc5LzEvMS1YQVc1R091MEJ3akdRQ1hxekJBWG9aYmU0Zy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmUvYzgyNGQxLThjZmUtNDQwZS05YjVjLTg4OTI0Mzg2OTY3
OS8xLzZMME5tcWpIUTgyaGd2QUdhRmc2UnVZQXd5MC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoFKsAw
DQYJKoZIhvcNAQELBQADggEBAISfLQ+s0UHggjHOe4eoFK2+PBOmeHge6K+kXLmr
Dt2Ovjh+tE5Gb1VUxLSDnn7omasRj4UTU9GAY3BYKUvKPFb6m41GHlpXZr8Nx7wi
tmuJxqHrkK/BQ0fGOgEL7K8sVX89YDC3Snbj3mKgn7mJ91nk7Ac6prxS6KLe4eKu
UTrmeudBEiQ+JTCa9hn1aZ3KzAkR2IAXKpHw8qyflb9Sv6AcwemVgNe7Mcic+TmD
d3XEnYZOiM/g02u7v+6kDVyCfvfzDgCrIllYd4hMEvyNV4h1LVGhzUdUsGN4LcZG
ZhUD1k6kim4o0Eg7gchQPHIjaVknj546sIr3l3aEHu3gzV8=
-----END CERTIFICATE-----
Generated at Sat May 16 19:27:52 2026 by rpki-client