Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/COaVqqBuvi4mMdAq8HpX06kWE9w.roa
File: COaVqqBuvi4mMdAq8HpX06kWE9w.roa (raw, json)
Hash identifier: QBhfOUa5PkV7d8UUU7FLyEsF9fDAs7tfAig5q4m2hXQ=
Subject key identifier: 08:E6:95:AA:A0:6E:BE:2E:26:31:D0:2A:F0:7A:57:D3:A9:16:13:DC
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 01A159922CA71C461848E4BEF7D5E6AFA892
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/COaVqqBuvi4mMdAq8HpX06kWE9w.roa
Signing time: Tue 20 Oct 2026 13:48:34 +0000
ROA not before: Tue 20 Oct 2026 13:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209153
IP address blocks: 2.59.164.0/23 maxlen: 23
2.59.164.0/24 maxlen: 24
2.59.165.0/24 maxlen: 24
2a09:f540::/29 maxlen: 29
2a09:f542::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:92:2c:a7:1c:46:18:48:e4:be:f7:d5:e6:af:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Oct 20 13:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08e695aaa06ebe2e2631d02af07a57d3a91613dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:ab:b6:a7:5c:75:c7:97:a7:00:87:e8:7b:
ef:b9:91:7c:dd:4e:30:13:6c:ee:f3:bb:3d:d4:52:
b2:34:07:71:d5:36:91:7b:05:9a:df:f0:05:5b:08:
a1:cf:48:68:8f:72:3b:38:e6:d2:0d:85:33:03:b6:
9c:90:b6:bc:6a:26:e8:73:39:81:f4:ea:c5:40:95:
dc:a5:4e:dc:49:cc:76:6e:69:de:04:52:f4:d9:3c:
12:ac:20:7c:e2:dc:0c:fb:a6:e3:98:ce:ad:ea:86:
e4:e4:f5:97:7d:3e:35:59:41:d6:ab:fc:6a:5a:11:
e9:d2:79:0b:4d:ee:bf:13:be:48:6b:5e:f9:31:87:
d5:f2:e5:fd:89:b3:7e:87:7c:bb:ca:e9:4f:85:36:
db:0a:95:d4:bf:7f:fc:42:cd:ee:9e:eb:6b:17:6d:
bf:c8:52:1a:48:1c:47:3f:a5:fd:86:dc:16:31:5c:
84:86:c7:d3:90:51:1b:58:03:d3:b7:ab:3e:4e:6b:
9d:32:f9:f4:fd:5d:16:3c:ba:7d:3b:7c:97:f9:63:
29:7d:ae:02:43:ef:c1:61:72:0a:96:fa:ab:30:7b:
88:db:6b:13:58:36:b1:7f:09:3a:a0:2b:7e:6a:8d:
fa:30:19:c5:b3:f0:d1:f6:cb:c6:7a:eb:c1:cd:c4:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E6:95:AA:A0:6E:BE:2E:26:31:D0:2A:F0:7A:57:D3:A9:16:13:DC
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/COaVqqBuvi4mMdAq8HpX06kWE9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.164.0/23
IPv6:
2a09:f540::/29
Signature Algorithm: sha256WithRSAEncryption
ae:d0:3b:56:d8:18:3a:1f:30:99:d7:b4:1d:c7:b2:1a:48:c9:
db:ac:9c:18:29:96:68:6e:a7:bc:e8:c9:f6:ab:9a:6d:7b:fd:
0e:55:2c:a2:1e:f0:ee:e0:28:7d:9a:90:2c:ed:e4:e8:a2:15:
d8:7b:3d:7a:c9:c2:6a:d7:2d:a6:6a:b9:54:8c:6d:28:30:ab:
43:88:fa:70:31:95:3e:50:9f:70:86:de:77:01:7c:29:00:cd:
42:ad:ac:cd:ec:08:ed:9d:42:02:c7:fd:37:ea:bc:89:44:d8:
fe:70:d1:c9:1c:c0:a7:7f:1d:29:6f:17:f6:34:36:57:fd:94:
45:c6:74:f1:24:b6:4f:36:bd:a0:29:05:ed:f8:f6:cd:3b:4a:
e3:e6:57:fe:e7:01:de:84:7f:fa:bf:99:8b:b3:fd:b9:c9:af:
b7:7c:f4:14:74:9b:32:43:15:bd:39:95:dd:34:a3:cb:ba:e4:
25:b3:d7:3a:87:77:b1:aa:fa:99:c7:3f:fc:1a:79:fa:bc:5d:
c8:9a:68:0a:ae:99:b2:d5:f2:78:6f:e0:32:97:4f:a8:46:7d:
da:ca:b7:bf:4e:68:7f:2c:15:33:ad:99:c9:86:dc:e2:2e:a9:
89:b8:c6:64:63:a9:60:d7:f5:0f:6b:31:35:b2:00:1e:86:c2:
f6:13:7e:09
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaFZkiynHEYYSOS+99Xmr6iSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWRmNGJlMzEzYWUxYzFiZTY5ODgxZTJlNDQ0N2VmMmJm
MGIxOTYwHhcNMjYxMDIwMTM0ODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGU2OTVhYWEwNmViZTJlMjYzMWQwMmFmMDdhNTdkM2E5MTYxM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM6rtqdcdceXpwCH6HvvuZF83U4w
E2zu87s91FKyNAdx1TaRewWa3/AFWwihz0hoj3I7OObSDYUzA7ackLa8aiboczmB
9OrFQJXcpU7cScx2bmneBFL02TwSrCB84twM+6bjmM6t6obk5PWXfT41WUHWq/xq
WhHp0nkLTe6/E75Ia175MYfV8uX9ibN+h3y7yulPhTbbCpXUv3/8Qs3unutrF22/
yFIaSBxHP6X9htwWMVyEhsfTkFEbWAPTt6s+TmudMvn0/V0WPLp9O3yX+WMpfa4C
Q+/BYXIKlvqrMHuI22sTWDaxfwk6oCt+ao36MBnFs/DR9svGeuvBzcTSuQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAjmlaqgbr4uJjHQKvB6V9OpFhPcMB8GA1UdIwQY
MBaAFBPt9L4xOuHBvmmIHi5ER+8r8LGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEt
YjQxMzM1YjAwNTg3LzEvQ09hVnFxQnV2aTRtTWRBcThIcFgwNmtXRTl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEtYjQxMzM1YjAwNTg3
LzEvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBAjukMA0E
AgACMAcDBQMqCfVAMA0GCSqGSIb3DQEBCwUAA4IBAQCu0DtW2Bg6HzCZ17Qdx7Ia
SMnbrJwYKZZobqe86Mn2q5pte/0OVSyiHvDu4Ch9mpAs7eToohXYez16ycJq1y2m
arlUjG0oMKtDiPpwMZU+UJ9wht53AXwpAM1CrazN7AjtnUICx/036ryJRNj+cNHJ
HMCnfx0pbxf2NDZX/ZRFxnTxJLZPNr2gKQXt+PbNO0rj5lf+5wHehH/6v5mLs/25
ya+3fPQUdJsyQxW9OZXdNKPLuuQls9c6h3exqvqZxz/8Gnn6vF3ImmgKrpmy1fJ4
b+Ayl0+oRn3ayre/Tmh/LBUzrZnJhtziLqmJuMZkY6lg1/UPazE1sgAehsL2E34J
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:03 2026 by rpki-client