Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/hR9s5-aSBoJT0GDmvwa8U0494vY.roa
File: hR9s5-aSBoJT0GDmvwa8U0494vY.roa (raw, json)
Hash identifier: NDs7Sq65u7Tjw1EB+6FeKlUTDjYS2JdagGl3Lbtp+2w=
Subject key identifier: 85:1F:6C:E7:E6:92:06:82:53:D0:60:E6:BF:06:BC:53:4E:3D:E2:F6
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 01A0C97C155F3DA47CF9BC4ABAB94BAC3974
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/hR9s5-aSBoJT0GDmvwa8U0494vY.roa
Signing time: Tue 22 Sep 2026 14:19:07 +0000
ROA not before: Tue 22 Sep 2026 14:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402664
IP address blocks: 2a0c:7e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:7c:15:5f:3d:a4:7c:f9:bc:4a:ba:b9:4b:ac:39:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Sep 22 14:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=851f6ce7e692068253d060e6bf06bc534e3de2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:fa:71:a9:58:37:87:9b:3e:28:9f:ec:ed:
65:b1:d1:9a:9c:a5:51:21:c9:0f:15:05:5c:ca:3a:
28:17:f7:97:99:b1:d7:39:d2:99:a3:93:48:43:cf:
91:bc:ec:e1:1f:60:e9:64:a8:33:02:37:e3:1f:b5:
3f:65:bf:2c:72:e5:0a:ad:07:f4:3b:79:51:68:af:
dc:3a:c8:04:29:71:99:da:c7:e9:bb:ce:9c:ff:65:
ba:15:25:94:d8:41:8e:69:77:2a:40:15:a8:d7:24:
fe:b5:22:72:f0:54:8b:38:0e:c6:91:c4:b8:bd:ae:
f6:dc:55:d9:72:f9:fa:81:b8:c0:e7:34:2a:25:43:
9c:63:12:13:1a:96:32:67:36:39:b9:3d:ed:92:bb:
06:fc:6f:fe:9f:76:82:39:1f:00:81:bb:a9:c6:e8:
cb:57:d6:56:c2:00:6d:f0:6b:9c:46:99:9b:95:16:
24:47:08:87:ce:7d:b2:01:c4:18:61:88:04:5c:b1:
28:d9:69:fd:0f:fe:90:97:80:67:e0:0f:66:7e:88:
63:79:5c:fc:4d:f6:54:4f:f6:de:69:d1:8a:35:18:
5a:cb:b2:3f:98:1a:0b:34:c9:74:db:7c:10:23:16:
3c:ef:7d:4c:18:fa:3c:a7:6f:eb:a6:f1:a7:ea:ac:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1F:6C:E7:E6:92:06:82:53:D0:60:E6:BF:06:BC:53:4E:3D:E2:F6
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/hR9s5-aSBoJT0GDmvwa8U0494vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
3e:b5:b7:b3:5d:8e:18:7b:f4:4d:10:65:e9:27:66:74:62:f1:
f0:4c:b8:13:6a:5b:db:fa:95:0c:7b:f6:a4:a4:6a:23:2f:54:
4a:f4:71:ad:b1:33:f3:51:64:82:9d:b5:07:56:b6:12:1a:bb:
93:f7:a4:20:63:be:a3:e3:31:14:24:43:10:bc:cf:20:0b:a4:
2b:dc:a7:79:5e:ef:1d:08:57:3a:42:6b:d7:f5:46:0d:4f:09:
92:e9:85:51:db:5b:b3:e1:4a:d4:fd:14:79:c9:dc:02:df:dc:
75:b6:65:f2:56:7c:d6:d1:72:13:b7:a4:ae:99:6c:57:91:f6:
c4:a4:63:0b:b8:e3:b6:30:8b:44:60:c1:4f:69:d7:c3:37:f1:
48:e0:3f:84:03:77:bc:6c:43:de:cc:45:ca:13:51:8e:14:28:
cf:15:7b:2f:53:d6:3f:ea:98:40:7a:d1:39:82:59:64:78:b1:
b6:00:c4:0b:a1:ea:40:a4:96:d9:33:13:3c:25:b9:4b:f6:10:
1f:90:c6:27:85:41:c8:79:39:c9:9c:1f:1e:33:40:c6:2e:4e:
61:62:b3:91:65:ed:22:50:d8:96:96:db:56:b5:7d:86:0e:65:
a9:66:21:2e:30:26:4b:86:24:b8:b6:e4:f2:6c:78:96:fa:f4:
24:dd:1d:b0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDJfBVfPaR8+bxKurlLrDl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1
OGM4MjAwHhcNMjYwOTIyMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTFmNmNlN2U2OTIwNjgyNTNkMDYwZTZiZjA2YmM1MzRlM2RlMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvn6calYN4ebPiif7O1lsdGanKVR
IckPFQVcyjooF/eXmbHXOdKZo5NIQ8+RvOzhH2DpZKgzAjfjH7U/Zb8scuUKrQf0
O3lRaK/cOsgEKXGZ2sfpu86c/2W6FSWU2EGOaXcqQBWo1yT+tSJy8FSLOA7GkcS4
va723FXZcvn6gbjA5zQqJUOcYxITGpYyZzY5uT3tkrsG/G/+n3aCOR8AgbupxujL
V9ZWwgBt8GucRpmblRYkRwiHzn2yAcQYYYgEXLEo2Wn9D/6Ql4Bn4A9mfohjeVz8
TfZUT/beadGKNRhay7I/mBoLNMl023wQIxY8731MGPo8p2/rpvGn6qwvgQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIUfbOfmkgaCU9Bg5r8GvFNOPeL2MB8GA1UdIwQY
MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt
NThjZjg5ODg4ZTJhLzEvaFI5czUtYVNCb0pUMEdEbXZ3YThVMDQ5NHZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh
LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgx+gDAN
BgkqhkiG9w0BAQsFAAOCAQEAPrW3s12OGHv0TRBl6SdmdGLx8Ey4E2pb2/qVDHv2
pKRqIy9USvRxrbEz81Fkgp21B1a2Ehq7k/ekIGO+o+MxFCRDELzPIAukK9yneV7v
HQhXOkJr1/VGDU8JkumFUdtbs+FK1P0UecncAt/cdbZl8lZ81tFyE7ekrplsV5H2
xKRjC7jjtjCLRGDBT2nXwzfxSOA/hAN3vGxD3sxFyhNRjhQozxV7L1PWP+qYQHrR
OYJZZHixtgDEC6HqQKSW2TMTPCW5S/YQH5DGJ4VByHk5yZwfHjNAxi5OYWKzkWXt
IlDYlpbbVrV9hg5lqWYhLjAmS4YkuLbk8mx4lvr0JN0dsA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:12:18 2026 by rpki-client