Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/r_8AqLDA0TKw-_hS4D2cAROProQ.roa
File: r_8AqLDA0TKw-_hS4D2cAROProQ.roa (raw, json)
Hash identifier: em2qIv+1gRgI1PfQzZQhQrikSZsQfh7/5J5HzcXSfpU=
Subject key identifier: AF:FF:00:A8:B0:C0:D1:32:B0:FB:F8:52:E0:3D:9C:01:13:8F:AE:84
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01A1692B654258B217B01EC1568DD9F469EF
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/r_8AqLDA0TKw-_hS4D2cAROProQ.roa
Signing time: Fri 23 Oct 2026 14:30:14 +0000
ROA not before: Fri 23 Oct 2026 14:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213615
IP address blocks: 2001:978:1407::/48 maxlen: 48
2001:978:3c05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:2b:65:42:58:b2:17:b0:1e:c1:56:8d:d9:f4:69:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Oct 23 14:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afff00a8b0c0d132b0fbf852e03d9c01138fae84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:2c:27:40:39:a2:65:d5:a2:82:8e:58:45:
6f:2e:b2:d5:63:9d:bb:34:c4:e2:04:a4:9a:dd:23:
85:38:17:2f:b1:55:f4:e3:38:ca:b2:72:3c:7b:fe:
00:4e:64:f2:24:5d:ff:6f:cf:6d:f6:a3:2e:a1:ab:
8d:55:45:fc:69:02:9f:d5:2c:de:db:e4:d5:cd:2a:
a4:a7:ab:c2:02:95:2f:0a:16:0c:26:4a:0c:e4:fc:
84:1f:b7:6e:a5:b2:ee:ca:2d:aa:5c:63:70:c6:07:
84:dd:25:76:58:1e:18:e4:70:90:81:7c:b8:6d:5b:
1f:75:3b:e9:7a:23:2f:a1:35:fc:a5:a7:a3:fe:4b:
7c:04:68:99:43:34:4c:50:41:10:54:06:6d:3d:40:
1c:b0:6d:a3:62:15:39:60:9a:84:14:c0:10:d8:f3:
b8:c9:65:36:a2:66:38:6e:83:be:ca:3c:5b:3f:77:
a1:34:d2:22:8e:c7:98:2b:dd:58:f6:3c:13:15:9a:
96:e0:43:94:c7:9d:42:be:5f:8b:bb:a5:a4:e8:32:
2b:e1:36:8c:c0:82:c6:2a:d3:0f:eb:0f:19:24:fd:
0b:a6:62:75:76:50:de:79:bc:94:dc:8c:e3:b8:c8:
7a:fd:84:07:1b:ba:0b:80:75:1b:a5:54:40:a5:f3:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FF:00:A8:B0:C0:D1:32:B0:FB:F8:52:E0:3D:9C:01:13:8F:AE:84
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/r_8AqLDA0TKw-_hS4D2cAROProQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:978:1407::/48
2001:978:3c05::/48
Signature Algorithm: sha256WithRSAEncryption
3b:63:c8:43:fe:46:fc:f2:3a:fc:e0:ed:36:f6:59:30:5c:5e:
89:b5:59:69:85:ed:fa:d2:ba:ee:3c:0e:60:f4:05:29:3c:7e:
88:a1:36:b6:be:d0:7e:be:23:95:10:0b:09:47:b9:d3:3e:14:
7b:f7:b6:e0:2f:fa:7a:1b:ee:e6:81:1b:ec:cf:04:8e:b9:34:
2c:f6:6f:9b:21:85:dc:53:4e:39:fa:02:50:df:0a:ac:5a:15:
2a:35:5e:5b:9d:e2:75:4b:ca:f7:fa:9e:d6:18:74:f4:d7:bd:
53:44:0c:99:04:99:79:a5:95:f9:dd:ea:c2:ae:6a:b5:ec:84:
bb:fb:a0:01:6b:78:af:69:f6:9d:e2:4c:1e:03:ea:95:37:82:
2f:a6:02:29:98:ee:65:fa:0a:2e:22:56:d5:c4:96:5c:06:b4:
88:40:92:5a:25:af:d2:6e:f2:38:ef:4a:4b:26:d3:d6:73:5f:
80:1c:2f:92:38:36:23:26:2f:73:2f:1f:0b:4c:87:76:ee:3e:
3c:c0:01:bb:79:69:eb:31:a3:6e:a3:d9:8d:60:c7:d7:fa:c5:
a3:85:2d:32:b6:42:be:a1:2b:e9:27:81:c8:7d:10:73:f1:86:
92:57:30:ca:ce:0f:78:53:c2:fd:eb:66:b9:96:7e:70:4e:af:
ad:46:a2:d8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaFpK2VCWLIXsB7BVo3Z9GnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2
ZGI5OWUwHhcNMjYxMDIzMTQzMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmZmMDBhOGIwYzBkMTMyYjBmYmY4NTJlMDNkOWMwMTEzOGZhZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUIsJ0A5omXVooKOWEVvLrLVY527
NMTiBKSa3SOFOBcvsVX04zjKsnI8e/4ATmTyJF3/b89t9qMuoauNVUX8aQKf1Sze
2+TVzSqkp6vCApUvChYMJkoM5PyEH7dupbLuyi2qXGNwxgeE3SV2WB4Y5HCQgXy4
bVsfdTvpeiMvoTX8paej/kt8BGiZQzRMUEEQVAZtPUAcsG2jYhU5YJqEFMAQ2PO4
yWU2omY4boO+yjxbP3ehNNIijseYK91Y9jwTFZqW4EOUx51Cvl+Lu6Wk6DIr4TaM
wILGKtMP6w8ZJP0LpmJ1dlDeebyU3IzjuMh6/YQHG7oLgHUbpVRApfOt5QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK//AKiwwNEysPv4UuA9nAETj66EMB8GA1UdIwQY
MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt
OTU2ZjZiNWM2MTcwLzEvcl84QXFMREEwVEt3LV9oUzREMmNBUk9Qcm9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw
LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEJeBQH
AwcAIAEJeDwFMA0GCSqGSIb3DQEBCwUAA4IBAQA7Y8hD/kb88jr84O029lkwXF6J
tVlphe360rruPA5g9AUpPH6IoTa2vtB+viOVEAsJR7nTPhR797bgL/p6G+7mgRvs
zwSOuTQs9m+bIYXcU045+gJQ3wqsWhUqNV5bneJ1S8r3+p7WGHT0171TRAyZBJl5
pZX53erCrmq17IS7+6ABa3ivafad4kweA+qVN4IvpgIpmO5l+gouIlbVxJZcBrSI
QJJaJa/SbvI470pLJtPWc1+AHC+SODYjJi9zLx8LTId27j48wAG7eWnrMaNuo9mN
YMfX+sWjhS0ytkK+oSvpJ4HIfRBz8YaSVzDKzg94U8L962a5ln5wTq+tRqLY
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:11 2026 by rpki-client