Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/b4Wx3KijZbA8t2JQ5NNBXuCcHyk.roa
File: b4Wx3KijZbA8t2JQ5NNBXuCcHyk.roa (raw, json)
Hash identifier: hcoMzvlZSI7ZAM7edzDzV9i93WshJ+24op5vNchKOpI=
Subject key identifier: 6F:85:B1:DC:A8:A3:65:B0:3C:B7:62:50:E4:D3:41:5E:E0:9C:1F:29
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A0F671A85B22835A9FE7D967BA00EEF64C
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/b4Wx3KijZbA8t2JQ5NNBXuCcHyk.roa
Signing time: Thu 01 Oct 2026 07:50:38 +0000
ROA not before: Thu 01 Oct 2026 07:50:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201061
IP address blocks: 2a11:1400:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:71:a8:5b:22:83:5a:9f:e7:d9:67:ba:00:ee:f6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 1 07:50:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f85b1dca8a365b03cb76250e4d3415ee09c1f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5a:85:ed:b6:ba:1c:a0:ba:70:08:85:3d:d7:
79:1c:2b:6b:3c:15:16:e7:8a:59:0d:a9:76:fd:36:
a2:7f:1c:a5:79:6e:b1:52:a9:18:6c:20:af:a2:88:
55:64:e0:96:b3:a6:d6:b3:be:d2:de:91:de:0a:bc:
64:2d:e1:68:70:71:db:2a:bb:16:70:0d:ad:4e:c8:
85:80:ba:36:db:ae:14:51:b7:58:bb:8a:3a:05:d9:
bf:d9:76:fa:a0:a5:be:9c:ca:4d:71:3f:e8:24:6a:
18:60:39:01:bb:c2:74:59:91:f7:4a:44:72:f8:70:
ea:4b:5e:46:e9:d1:93:35:27:8e:c3:a6:95:e4:9f:
a6:fc:2f:f6:22:44:b7:57:ff:c0:2e:31:25:e6:01:
3b:31:2c:d1:24:8e:87:e1:2f:51:86:1d:84:3c:9a:
9d:47:28:58:3d:ed:57:94:da:a3:4d:aa:0b:76:71:
59:f9:23:e1:ad:d2:93:a9:c2:0c:36:1d:46:da:52:
ba:a9:1b:60:d1:57:8d:0f:cd:f7:ac:78:e5:94:dc:
96:2c:51:9b:db:dd:4d:e4:7e:5c:34:87:90:63:a4:
59:9a:21:f6:ec:6f:f6:e8:e5:1d:c1:a7:e7:d6:6d:
0f:89:66:d6:f6:4c:95:a3:7b:66:3a:8f:23:d6:c5:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:B1:DC:A8:A3:65:B0:3C:B7:62:50:E4:D3:41:5E:E0:9C:1F:29
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/b4Wx3KijZbA8t2JQ5NNBXuCcHyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1400:6000::/44
Signature Algorithm: sha256WithRSAEncryption
19:25:80:31:ec:df:9b:ed:6c:26:de:bd:e1:05:c8:9b:75:e4:
3b:ed:9b:68:d1:69:d1:9c:b4:1b:94:a9:fa:7a:88:45:3d:9f:
5a:8b:0a:be:90:00:56:60:59:76:19:ef:6b:94:a1:21:e4:d9:
0a:e0:4d:8d:2b:43:d4:47:47:ca:a5:a9:ea:02:09:c4:cc:0d:
26:0a:50:a6:b5:40:a0:4c:b8:9c:7e:cb:5c:fa:23:f9:99:d5:
02:85:f9:2f:d5:6d:ba:cc:f1:98:df:7d:f7:d4:b5:49:fc:5a:
a1:4b:18:52:92:98:84:f5:24:ee:60:50:27:74:53:30:a4:11:
94:0b:07:aa:1b:cc:e8:fb:19:26:e5:f2:bb:fc:cc:42:3b:0c:
fb:a5:4d:6d:b8:4a:15:36:4f:d7:5f:ef:6e:d1:fc:3e:7c:e0:
c3:c9:ef:e8:ff:f9:d3:da:ad:eb:4b:66:30:fe:79:48:1c:18:
41:80:63:77:66:36:06:7f:65:39:68:8e:42:b4:89:2c:7f:69:
ad:99:51:ed:c1:e4:bc:a6:6b:23:2f:69:23:97:41:8f:22:5f:
ae:b0:38:4d:cb:b3:e5:4f:1f:bc:3b:11:f8:4b:d3:d4:83:20:
4c:bf:f7:97:50:0b:ce:e6:81:ce:6c:03:4b:5e:2c:38:09:18:
44:ca:30:64
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaD2cahbIoNan+fZZ7oA7vZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYxMDAxMDc1MDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Zjg1YjFkY2E4YTM2NWIwM2NiNzYyNTBlNGQzNDE1ZWUwOWMxZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VqF7ba6HKC6cAiFPdd5HCtrPBUW
54pZDal2/TaifxyleW6xUqkYbCCvoohVZOCWs6bWs77S3pHeCrxkLeFocHHbKrsW
cA2tTsiFgLo2264UUbdYu4o6Bdm/2Xb6oKW+nMpNcT/oJGoYYDkBu8J0WZH3SkRy
+HDqS15G6dGTNSeOw6aV5J+m/C/2IkS3V//ALjEl5gE7MSzRJI6H4S9Rhh2EPJqd
RyhYPe1XlNqjTaoLdnFZ+SPhrdKTqcIMNh1G2lK6qRtg0VeND833rHjllNyWLFGb
291N5H5cNIeQY6RZmiH27G/26OUdwafn1m0PiWbW9kyVo3tmOo8j1sURGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG+Fsdyoo2WwPLdiUOTTQV7gnB8pMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvYjRXeDNLaWpaYkE4dDJKUTVOTkJYdUNjSHlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhEUAGAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAZJYAx7N+b7Wwm3r3hBcibdeQ77Zto0WnRnLQb
lKn6eohFPZ9aiwq+kABWYFl2Ge9rlKEh5NkK4E2NK0PUR0fKpanqAgnEzA0mClCm
tUCgTLicfstc+iP5mdUChfkv1W26zPGY33331LVJ/FqhSxhSkpiE9STuYFAndFMw
pBGUCweqG8zo+xkm5fK7/MxCOwz7pU1tuEoVNk/XX+9u0fw+fODDye/o//nT2q3r
S2Yw/nlIHBhBgGN3ZjYGf2U5aI5CtIksf2mtmVHtweS8pmsjL2kjl0GPIl+usDhN
y7PlTx+8OxH4S9PUgyBMv/eXUAvO5oHObANLXiw4CRhEyjBk
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:55 2026 by rpki-client