Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-9u5NTNUhfHRcmqYzR10osSOEBA.roa
File: 1-9u5NTNUhfHRcmqYzR10osSOEBA.roa (raw, json)
Hash identifier: yiOxKAb5DKxTmibAQn6wY74I3YDOK2XKDQgC+2T5nak=
Subject key identifier: FB:DB:B9:35:33:54:85:F1:D1:72:6A:98:CD:1D:74:A2:C4:8E:10:10
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A139C0687CD7559C2F649983E58AB70976
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-9u5NTNUhfHRcmqYzR10osSOEBA.roa
Signing time: Wed 14 Oct 2026 09:31:13 +0000
ROA not before: Wed 14 Oct 2026 09:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56534
IP address blocks: 2a0f:db80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:c0:68:7c:d7:55:9c:2f:64:99:83:e5:8a:b7:09:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Oct 14 09:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbdbb935335485f1d1726a98cd1d74a2c48e1010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:a2:f4:fc:fc:b4:75:0d:d4:5c:6b:09:1e:
66:0c:ac:9b:c7:da:53:1a:2c:4c:a8:c5:d6:24:9b:
31:dc:7a:30:c3:74:80:93:07:f1:5b:a9:01:cb:ed:
95:be:3e:c5:51:3b:58:50:0b:61:4d:88:59:ac:e8:
d3:ef:cd:4a:cb:a4:ee:45:ad:ba:50:48:cf:45:b9:
c1:a8:a9:c4:f7:c8:5b:a2:56:01:c2:87:ed:47:78:
e5:0d:3b:b9:a1:57:30:3e:b5:91:e9:92:c5:96:1f:
c1:dc:32:61:7f:93:d9:76:11:f2:53:4f:4f:67:4a:
f3:09:aa:f3:98:94:23:6f:27:d5:49:e8:6a:b6:25:
5b:7a:a8:9a:71:aa:0e:dc:ff:c8:7d:40:07:61:8c:
4b:b2:a0:89:12:69:04:52:30:f3:97:c0:30:70:30:
b4:89:55:63:6e:94:f8:47:31:c1:ab:a4:83:b6:cc:
01:d3:57:ee:09:fb:bd:b8:e6:71:4c:b3:5b:ff:4f:
ff:2c:f3:37:87:2f:e9:ac:08:af:8e:fe:c7:2f:dd:
d4:85:bb:75:11:69:93:1c:a8:b5:12:66:a4:e1:70:
ce:cd:32:50:73:e7:13:b0:97:17:6c:7b:a2:28:12:
82:40:e0:ba:50:2e:b7:95:e7:d6:da:d1:bd:a4:3c:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DB:B9:35:33:54:85:F1:D1:72:6A:98:CD:1D:74:A2:C4:8E:10:10
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-9u5NTNUhfHRcmqYzR10osSOEBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:db80::/29
Signature Algorithm: sha256WithRSAEncryption
d2:20:dc:9d:d8:cb:a9:ae:bb:2c:fa:42:a3:ad:53:d8:19:61:
fb:06:cc:5c:0b:67:01:77:0e:c4:8b:ec:7c:87:f0:a5:7d:92:
39:af:ec:e1:53:30:b2:ff:14:19:83:41:41:ea:ae:12:b9:1f:
ac:da:72:38:64:92:7c:a4:5e:ed:2c:95:70:74:53:ff:a3:46:
58:5d:a0:fe:ef:75:f5:59:ce:4c:01:14:71:d9:09:15:c0:eb:
3f:b4:24:41:00:a0:0f:08:0b:73:04:fc:e0:11:c3:5a:e6:72:
83:f3:ad:2c:0f:f7:77:d1:c6:45:fc:ea:34:87:6c:1f:e9:78:
8a:53:da:45:ba:93:8a:9d:bf:db:e1:5f:f3:b6:ea:21:ca:9d:
60:85:64:a1:8b:6e:ca:8d:5f:3c:8a:71:40:d3:19:55:23:e7:
e0:e0:75:eb:88:b4:93:a1:16:87:52:74:98:e0:43:39:12:15:
91:8e:8d:0d:53:7b:d4:23:8d:06:0e:aa:68:51:33:e5:af:ff:
5f:05:98:2c:f5:f3:ae:21:75:a0:60:8a:5f:38:76:8b:50:aa:
4f:5a:8f:fb:fd:54:75:98:c6:1d:e4:eb:00:0c:1f:83:3c:f5:
46:43:4e:2f:5e:93:e5:9a:18:a5:96:7e:f9:30:7c:e5:e4:f9:
03:db:9c:0a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaE5wGh811WcL2SZg+WKtwl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjYxMDE0MDkzMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmRiYjkzNTMzNTQ4NWYxZDE3MjZhOThjZDFkNzRhMmM0OGUxMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVqi9Pz8tHUN1FxrCR5mDKybx9pT
GixMqMXWJJsx3Howw3SAkwfxW6kBy+2Vvj7FUTtYUAthTYhZrOjT781Ky6TuRa26
UEjPRbnBqKnE98hbolYBwoftR3jlDTu5oVcwPrWR6ZLFlh/B3DJhf5PZdhHyU09P
Z0rzCarzmJQjbyfVSehqtiVbeqiacaoO3P/IfUAHYYxLsqCJEmkEUjDzl8AwcDC0
iVVjbpT4RzHBq6SDtswB01fuCfu9uOZxTLNb/0//LPM3hy/prAivjv7HL93Uhbt1
EWmTHKi1Emak4XDOzTJQc+cTsJcXbHuiKBKCQOC6UC63lefW2tG9pDwupQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPvbuTUzVIXx0XJqmM0ddKLEjhAQMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvMS05dTVOVE5VaGZIUmNtcVl6UjEwb3NTT0VCQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmUvMWZhNmEzLThkYzUtNGMzNS1hNDliLTE3MWMzNjdiZTc4
Mi8xL2RRaEhYX0RZN0pZRE5nRnVEZ1FpR3BqbDdQSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoP24Aw
DQYJKoZIhvcNAQELBQADggEBANIg3J3Yy6muuyz6QqOtU9gZYfsGzFwLZwF3DsSL
7HyH8KV9kjmv7OFTMLL/FBmDQUHqrhK5H6zacjhkknykXu0slXB0U/+jRlhdoP7v
dfVZzkwBFHHZCRXA6z+0JEEAoA8IC3ME/OARw1rmcoPzrSwP93fRxkX86jSHbB/p
eIpT2kW6k4qdv9vhX/O26iHKnWCFZKGLbsqNXzyKcUDTGVUj5+DgdeuItJOhFodS
dJjgQzkSFZGOjQ1Te9QjjQYOqmhRM+Wv/18FmCz1864hdaBgil84dotQqk9aj/v9
VHWYxh3k6wAMH4M89UZDTi9ek+WaGKWWfvkwfOXk+QPbnAo=
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:52 2026 by rpki-client