Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/5obrous7XUZitja1_hFFYlNQZ7k.roa
File: 5obrous7XUZitja1_hFFYlNQZ7k.roa (raw, json)
Hash identifier: NfULfmjDL7GL5S7q3lxZzNVHHsHI3SMrW1ODtOA3XQY=
Subject key identifier: E6:86:EB:A2:EB:3B:5D:46:62:B6:36:B5:FE:11:45:62:53:50:67:B9
Certificate issuer: /CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Certificate serial: 019F23688F8BF46ED5818E43CAE0332AF1C1
Authority key identifier: 8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/5obrous7XUZitja1_hFFYlNQZ7k.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19637
IP address blocks: 2a02:ce8:54c::/48 maxlen: 48
2a02:ce8:5ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8f:8b:f4:6e:d5:81:8e:43:ca:e0:33:2a:f1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e686eba2eb3b5d4662b636b5fe114562535067b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:d1:85:e4:63:bf:c5:8c:e7:6d:66:51:80:
37:83:1b:04:cc:24:0a:7c:a4:ea:05:90:62:3b:76:
5a:8b:21:81:ae:5b:cf:54:be:5f:6d:1f:a2:5d:09:
e2:d4:66:56:44:07:17:7c:94:bb:2a:17:83:f8:c1:
73:51:65:e2:ec:a8:01:70:1c:69:e0:83:34:9e:1a:
bb:77:34:a6:61:46:21:35:be:be:ca:48:54:47:d4:
19:0e:a6:ed:63:d8:6c:9f:a1:86:03:4c:b2:4b:67:
53:09:87:a0:b4:fc:c2:e6:d2:48:21:d2:b6:ef:bc:
19:14:93:b5:d5:e3:ab:37:97:16:06:a7:1e:0c:1c:
84:1e:f3:31:a3:33:65:0d:ac:3f:83:f4:f5:7d:31:
73:f1:91:bb:a9:f1:e7:8b:fe:19:ab:20:24:59:9d:
a3:62:25:ec:6f:f1:49:fd:3a:6a:10:55:7a:e1:52:
98:1d:15:15:de:18:dd:05:df:ab:05:44:98:20:fc:
40:07:70:14:9d:6b:45:f6:da:4e:15:9c:b7:e8:88:
7f:1b:b3:0f:1f:56:ac:9d:71:5f:2b:12:08:2d:dc:
75:b7:f2:a2:45:2b:68:5b:43:0a:ba:bc:27:dd:0a:
92:e1:17:7a:90:d4:43:5a:7a:51:88:89:16:43:b1:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:86:EB:A2:EB:3B:5D:46:62:B6:36:B5:FE:11:45:62:53:50:67:B9
X509v3 Authority Key Identifier:
keyid:8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/5obrous7XUZitja1_hFFYlNQZ7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ce8:54c::/48
2a02:ce8:5ba::/48
Signature Algorithm: sha256WithRSAEncryption
4e:59:98:0c:c1:e8:7d:70:d4:35:aa:41:49:e5:82:2d:a8:d4:
e1:da:5b:37:55:0c:28:f5:7f:be:94:b1:b2:5a:fd:68:37:c8:
1f:db:8a:24:bd:b6:34:d7:e0:88:7a:19:e6:8a:9b:26:91:e2:
f5:c7:d1:c3:79:a1:e5:8e:ce:aa:d1:4b:e1:36:53:94:b2:e7:
60:10:b3:ac:ec:72:87:48:6a:b3:3d:d2:9d:0e:c6:72:91:9a:
97:b5:8e:27:44:76:39:4d:db:53:1c:61:6c:1d:f8:04:a9:dc:
32:b5:16:36:a3:c2:5f:21:ed:d9:18:7b:02:b3:35:e0:7b:f0:
e7:d9:50:42:8c:47:6b:06:8f:6a:41:77:17:e0:bd:93:56:0e:
2c:04:19:fb:f3:e4:5a:63:2f:0e:c7:0f:73:44:33:51:08:78:
24:1f:f8:2b:21:48:c7:92:2e:04:7b:0c:f1:96:1e:e3:ff:4a:
49:76:2f:44:63:8c:a2:6c:17:b6:ba:04:ed:56:51:12:d2:46:
49:31:fa:9a:e3:de:62:d0:8a:fd:40:f4:7d:72:f3:72:9b:6d:
2f:fa:9f:d8:b6:c1:b9:39:6a:de:65:dc:5f:7a:76:49:3d:26:
09:92:1f:49:64:78:d0:9b:ab:47:19:3b:00:53:89:14:f3:a3:
ec:8e:80:33
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8jaI+L9G7VgY5DyuAzKvHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWM2ZTg0M2ZmZTdmMzRiOTVkM2EwY2Q3MmRkNGFiYjY5
YmE0MjUwHhcNMjYwNzAyMTUxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjg2ZWJhMmViM2I1ZDQ2NjJiNjM2YjVmZTExNDU2MjUzNTA2N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzibRheRjv8WM521mUYA3gxsEzCQK
fKTqBZBiO3ZaiyGBrlvPVL5fbR+iXQni1GZWRAcXfJS7KheD+MFzUWXi7KgBcBxp
4IM0nhq7dzSmYUYhNb6+ykhUR9QZDqbtY9hsn6GGA0yyS2dTCYegtPzC5tJIIdK2
77wZFJO11eOrN5cWBqceDByEHvMxozNlDaw/g/T1fTFz8ZG7qfHni/4ZqyAkWZ2j
YiXsb/FJ/TpqEFV64VKYHRUV3hjdBd+rBUSYIPxAB3AUnWtF9tpOFZy36Ih/G7MP
H1asnXFfKxIILdx1t/KiRStoW0MKurwn3QqS4Rd6kNRDWnpRiIkWQ7FHzQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOaG66LrO11GYrY2tf4RRWJTUGe5MB8GA1UdIwQY
MBaAFI2cboQ//n80uV06DNct1Ku2m6QlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalp4dWhEXy1melM1WFRvTTF5M1VxN2FicENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt
Zjc3NGYxZWFmYmZmLzEvNW9icm91czdYVVppdGphMV9oRkZZbE5RWjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm
LzEvalp4dWhEXy1melM1WFRvTTF5M1VxN2FicENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgIM6AVM
AwcAKgIM6AW6MA0GCSqGSIb3DQEBCwUAA4IBAQBOWZgMweh9cNQ1qkFJ5YItqNTh
2ls3VQwo9X++lLGyWv1oN8gf24okvbY01+CIehnmipsmkeL1x9HDeaHljs6q0Uvh
NlOUsudgELOs7HKHSGqzPdKdDsZykZqXtY4nRHY5TdtTHGFsHfgEqdwytRY2o8Jf
Ie3ZGHsCszXge/Dn2VBCjEdrBo9qQXcX4L2TVg4sBBn78+RaYy8Oxw9zRDNRCHgk
H/grIUjHki4Eewzxlh7j/0pJdi9EY4yibBe2ugTtVlES0kZJMfqa495i0Ir9QPR9
cvNym20v+p/YtsG5OWreZdxfenZJPSYJkh9JZHjQm6tHGTsAU4kU86PsjoAz
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:01:01 2026 by rpki-client