Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa
File: ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa (raw, json)
Hash identifier: P3UhHzMIrXrW1sYxsrpjcxmtJE+6n7C8qAN8QS4+6hw=
Subject key identifier: 11:24:33:3B:37:82:41:D3:9D:34:A6:92:50:B2:BF:28:34:BE:56:FF
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 01A03318A3431F16B13CFC15DB7D4922AB9E
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa
Signing time: Mon 24 Aug 2026 09:27:27 +0000
ROA not before: Mon 24 Aug 2026 09:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33915
IP address blocks: 2a07:3500:1170::/48 maxlen: 48
2a07:3500:1180::/48 maxlen: 48
2a07:3500:1240::/46 maxlen: 46
2a07:3500:12d0::/48 maxlen: 48
2a07:3500:12f8::/48 maxlen: 48
2a07:3500:15a0::/48 maxlen: 48
2a07:3500:15c0::/48 maxlen: 48
2a07:3500:1778::/48 maxlen: 48
2a07:3500:17f8::/48 maxlen: 48
2a07:3500:1890::/48 maxlen: 48
2a07:3500:1b90::/48 maxlen: 48
2a07:3501:1340::/48 maxlen: 48
2a07:3502:1050::/48 maxlen: 48
2a07:3502:1060::/48 maxlen: 48
2a07:3502:10a1::/48 maxlen: 48
2a07:3502:10c0::/48 maxlen: 48
2a07:3502:11a0::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:18:a3:43:1f:16:b1:3c:fc:15:db:7d:49:22:ab:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Aug 24 09:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1124333b378241d39d34a69250b2bf2834be56ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:c0:48:32:b3:4d:5d:6e:34:e5:83:c1:a9:
58:3e:b2:6b:35:5c:d7:40:02:70:27:76:9f:12:41:
27:c5:4d:60:10:9b:66:89:84:65:45:37:9b:af:d4:
10:69:36:41:2f:7e:c2:6b:33:5b:6b:96:70:c5:aa:
29:36:6a:d6:c6:fc:f6:1e:35:0d:88:41:e6:01:4a:
dd:64:34:c4:23:e4:dd:f6:c9:2d:da:c3:77:6f:75:
a6:1e:f9:76:66:23:28:43:1e:c9:81:7d:87:ae:54:
fc:8e:47:9b:f1:a0:e3:05:c2:f3:d7:03:8b:48:e1:
9f:1f:14:3f:54:c5:11:54:0a:55:61:be:d2:e0:7f:
56:67:24:41:a9:4f:2f:76:7c:a6:8d:1c:ee:f7:b0:
f2:9b:67:dc:20:84:57:6c:41:c8:f2:1e:b0:8f:ee:
52:d0:f8:cf:95:4a:b1:b2:3e:af:f4:74:01:c2:fd:
22:ad:a7:e6:d7:55:85:aa:2c:64:dc:60:47:49:c6:
a3:59:39:35:32:15:50:82:5b:45:15:24:be:f7:86:
43:5a:b6:b1:35:48:dc:60:8c:d4:37:57:92:36:86:
ad:b0:b7:42:89:82:48:59:23:3d:db:e6:7e:cf:42:
ab:13:30:1c:86:fe:50:ad:7c:27:6d:fc:61:e8:ff:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:33:3B:37:82:41:D3:9D:34:A6:92:50:B2:BF:28:34:BE:56:FF
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1170::/48
2a07:3500:1180::/48
2a07:3500:1240::/46
2a07:3500:12d0::/48
2a07:3500:12f8::/48
2a07:3500:15a0::/48
2a07:3500:15c0::/48
2a07:3500:1778::/48
2a07:3500:17f8::/48
2a07:3500:1890::/48
2a07:3500:1b90::/48
2a07:3501:1340::/48
2a07:3502:1050::/48
2a07:3502:1060::/48
2a07:3502:10a1::/48
2a07:3502:10c0::/48
2a07:3502:11a0::/46
Signature Algorithm: sha256WithRSAEncryption
0c:5d:b5:fc:59:9e:6e:ab:9f:2d:cf:64:42:02:cd:a7:6a:c3:
69:de:1f:5c:d3:10:38:6d:15:29:2f:41:81:b8:bd:59:0d:db:
96:ba:5b:8d:79:ff:5e:ec:be:c4:e0:d4:38:a8:e8:d7:8e:bc:
76:a2:76:59:6e:eb:7a:50:d2:90:4c:06:bb:94:a2:6c:d7:c2:
72:ae:aa:56:a9:d5:ef:12:b5:d3:03:f7:62:96:92:86:b6:79:
6e:8e:4d:bb:63:bd:6a:2e:32:a6:25:dd:4c:3a:6d:0c:cf:2d:
0d:b1:83:1c:b7:df:5c:f4:a9:22:a3:a6:e1:50:bb:d4:40:fe:
74:c7:b0:83:57:10:62:6d:c1:5e:49:f2:33:94:88:c9:3c:fe:
6f:44:ba:b5:e3:8e:55:b4:ce:04:16:53:46:f8:6e:e0:6f:ab:
23:8b:8c:c6:c5:42:22:a8:1c:a6:e5:78:35:a9:d9:18:21:d6:
5c:f4:16:d1:d2:24:2d:9c:2f:83:7c:33:61:cd:16:f7:df:62:
ce:4e:55:9a:48:3a:14:fe:12:48:70:96:77:cf:7c:67:81:ac:
c0:21:9a:74:98:cd:55:93:39:41:50:f6:95:a8:51:04:3b:a8:
b6:1b:05:c1:37:9e:90:78:c2:6a:25:d0:42:a1:36:d4:d2:d7:
7d:71:46:94
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAaAzGKNDHxaxPPwV231JIqueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjYwODI0MDkyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTI0MzMzYjM3ODI0MWQzOWQzNGE2OTI1MGIyYmYyODM0YmU1NmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHbASDKzTV1uNOWDwalYPrJrNVzX
QAJwJ3afEkEnxU1gEJtmiYRlRTebr9QQaTZBL37CazNba5ZwxaopNmrWxvz2HjUN
iEHmAUrdZDTEI+Td9skt2sN3b3WmHvl2ZiMoQx7JgX2HrlT8jkeb8aDjBcLz1wOL
SOGfHxQ/VMURVApVYb7S4H9WZyRBqU8vdnymjRzu97Dym2fcIIRXbEHI8h6wj+5S
0PjPlUqxsj6v9HQBwv0irafm11WFqixk3GBHScajWTk1MhVQgltFFSS+94ZDWrax
NUjcYIzUN1eSNoatsLdCiYJIWSM92+Z+z0KrEzAchv5QrXwnbfxh6P/eUQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFBEkMzs3gkHTnTSmklCyvyg0vlb/MB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvRVNRek96ZUNRZE9kTkthU1VMS19LRFMtVnY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG2BggrBgEFBQcBBwEB/wSBpjCBozCBoAQCAAIwgZkDBwAq
BzUAEXADBwAqBzUAEYADBwIqBzUAEkADBwAqBzUAEtADBwAqBzUAEvgDBwAqBzUA
FaADBwAqBzUAFcADBwAqBzUAF3gDBwAqBzUAF/gDBwAqBzUAGJADBwAqBzUAG5AD
BwAqBzUBE0ADBwAqBzUCEFADBwAqBzUCEGADBwAqBzUCEKEDBwAqBzUCEMADBwIq
BzUCEaAwDQYJKoZIhvcNAQELBQADggEBAAxdtfxZnm6rny3PZEICzadqw2neH1zT
EDhtFSkvQYG4vVkN25a6W415/17svsTg1Dio6NeOvHaidllu63pQ0pBMBruUomzX
wnKuqlap1e8StdMD92KWkoa2eW6OTbtjvWouMqYl3Uw6bQzPLQ2xgxy331z0qSKj
puFQu9RA/nTHsINXEGJtwV5J8jOUiMk8/m9EurXjjlW0zgQWU0b4buBvqyOLjMbF
QiKoHKbleDWp2Rgh1lz0FtHSJC2cL4N8M2HNFvffYs5OVZpIOhT+EkhwlnfPfGeB
rMAhmnSYzVWTOUFQ9pWoUQQ7qLYbBcE3npB4wmol0EKhNtTS131xRpQ=
-----END CERTIFICATE-----
Generated at Wed Sep 9 05:37:51 2026 by rpki-client