Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/56fc1c-5c34-4aef-a670-752cb660d6dc/1/We3Tnjcz4yWDl_aGj7u6WUAGsjM.roa
File: We3Tnjcz4yWDl_aGj7u6WUAGsjM.roa (raw, json)
Hash identifier: WEGQtiqwNqAJShl7k5Lm1rAIDOAB9Ni0E5wF0XUDAbA=
Subject key identifier: 59:ED:D3:9E:37:33:E3:25:83:97:F6:86:8F:BB:BA:59:40:06:B2:33
Certificate issuer: /CN=77983cd11099843b22f13475b0b567ea61dc9b81
Certificate serial: 01A08651DE63A5322E007E5D211E337ACE2C
Authority key identifier: 77:98:3C:D1:10:99:84:3B:22:F1:34:75:B0:B5:67:EA:61:DC:9B:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5g80RCZhDsi8TR1sLVn6mHcm4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/56fc1c-5c34-4aef-a670-752cb660d6dc/1/We3Tnjcz4yWDl_aGj7u6WUAGsjM.roa
Signing time: Wed 09 Sep 2026 13:18:27 +0000
ROA not before: Wed 09 Sep 2026 13:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207098
IP address blocks: 185.10.69.0/24 maxlen: 24
2a0a:6e00:48::/48 maxlen: 48
2a0a:6e00:49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/56fc1c-5c34-4aef-a670-752cb660d6dc/1/d5g80RCZhDsi8TR1sLVn6mHcm4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/56fc1c-5c34-4aef-a670-752cb660d6dc/1/d5g80RCZhDsi8TR1sLVn6mHcm4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5g80RCZhDsi8TR1sLVn6mHcm4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:51:de:63:a5:32:2e:00:7e:5d:21:1e:33:7a:ce:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77983cd11099843b22f13475b0b567ea61dc9b81
Validity
Not Before: Sep 9 13:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59edd39e3733e3258397f6868fbbba594006b233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:5b:01:85:2c:5f:15:a0:4e:a4:7c:21:0d:
f4:af:d1:c0:b9:43:b3:99:6a:87:a8:82:01:aa:43:
b4:d3:50:5a:5f:2d:4a:b2:ca:e2:d8:81:3f:fb:97:
3f:a2:09:d8:3f:59:72:5e:be:47:03:0d:3b:31:c1:
f5:4b:1a:d3:35:c3:b6:bb:aa:5d:60:52:d4:bb:96:
fd:a6:21:33:48:7b:36:dc:24:b2:51:8b:9d:ca:36:
b6:07:dc:63:63:ac:af:f1:04:2b:db:60:1d:5a:74:
d7:12:1e:aa:77:16:f2:b4:84:2d:dd:ce:1f:48:67:
04:60:fd:4c:73:2e:64:7c:52:4d:8d:6f:84:c1:6f:
56:1a:c0:6c:43:53:c2:83:33:4b:92:61:82:6f:b5:
95:fa:24:e1:df:30:3d:3f:e2:07:b8:8b:3e:f8:fb:
9f:89:ec:75:de:a7:3d:b2:d5:c4:be:6f:ea:2c:59:
2c:a3:16:20:a7:28:e7:0b:6c:72:d9:7b:09:8d:f9:
ff:0d:7b:a4:e9:70:a5:3e:86:94:36:da:17:a8:26:
b4:0a:e0:a2:7e:6c:16:98:9f:02:84:53:cf:4a:f1:
8c:0f:f8:80:89:ec:99:64:de:38:a4:ed:eb:15:a3:
5f:d9:5a:35:cf:7d:5d:62:83:01:a4:d9:b2:26:c9:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:ED:D3:9E:37:33:E3:25:83:97:F6:86:8F:BB:BA:59:40:06:B2:33
X509v3 Authority Key Identifier:
keyid:77:98:3C:D1:10:99:84:3B:22:F1:34:75:B0:B5:67:EA:61:DC:9B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5g80RCZhDsi8TR1sLVn6mHcm4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/56fc1c-5c34-4aef-a670-752cb660d6dc/1/We3Tnjcz4yWDl_aGj7u6WUAGsjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/56fc1c-5c34-4aef-a670-752cb660d6dc/1/d5g80RCZhDsi8TR1sLVn6mHcm4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.69.0/24
IPv6:
2a0a:6e00:48::/47
Signature Algorithm: sha256WithRSAEncryption
9b:85:05:25:ed:0b:6a:44:b9:52:da:be:e1:59:70:59:18:f9:
e5:bc:e3:53:6e:a4:f0:44:07:5f:80:ba:dd:47:0a:45:61:a9:
9c:51:19:f9:2d:ce:fd:fe:65:82:f2:58:60:9d:a0:12:2e:a0:
61:66:bd:85:37:30:f0:3d:35:a1:d8:9d:d8:4d:aa:d1:83:5b:
53:9f:ff:ad:14:61:c4:05:32:5a:19:c3:ec:b4:42:fb:e8:53:
27:e2:0b:0e:a8:d6:a0:aa:14:ba:23:86:a1:c7:c5:33:3a:d1:
2e:b3:1d:63:43:ad:fb:c0:dd:b4:4a:6d:f2:79:58:fd:c7:67:
76:10:85:b5:b0:7e:56:89:6d:70:f6:48:fc:3e:e2:09:bd:c2:
1f:b2:93:9f:f8:41:08:bd:f0:1b:bc:b6:4f:a9:de:e9:6d:28:
50:4a:4a:57:85:bc:b7:bf:6a:c0:3b:56:46:ea:91:7f:76:b7:
55:c9:a5:1f:1f:b6:b2:28:1a:bb:e1:aa:91:6e:8f:61:37:2a:
96:3b:37:a0:ed:79:6b:2e:97:e0:4b:fe:26:03:98:ad:75:fb:
0f:d3:5b:f8:f6:0a:4a:ba:f7:95:1b:fe:91:51:8c:9c:09:3b:
4a:f7:c2:db:37:8b:5c:12:b4:55:ae:e6:5a:9c:85:cc:ec:02:
66:ce:3b:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaCGUd5jpTIuAH5dIR4zes4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OTgzY2QxMTA5OTg0M2IyMmYxMzQ3NWIwYjU2N2VhNjFk
YzliODEwHhcNMjYwOTA5MTMxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWVkZDM5ZTM3MzNlMzI1ODM5N2Y2ODY4ZmJiYmE1OTQwMDZiMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXxbAYUsXxWgTqR8IQ30r9HAuUOz
mWqHqIIBqkO001BaXy1Kssri2IE/+5c/ognYP1lyXr5HAw07McH1SxrTNcO2u6pd
YFLUu5b9piEzSHs23CSyUYudyja2B9xjY6yv8QQr22AdWnTXEh6qdxbytIQt3c4f
SGcEYP1Mcy5kfFJNjW+EwW9WGsBsQ1PCgzNLkmGCb7WV+iTh3zA9P+IHuIs++Puf
iex13qc9stXEvm/qLFksoxYgpyjnC2xy2XsJjfn/DXuk6XClPoaUNtoXqCa0CuCi
fmwWmJ8ChFPPSvGMD/iAieyZZN44pO3rFaNf2Vo1z31dYoMBpNmyJslzWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFnt0543M+Mlg5f2ho+7ullABrIzMB8GA1UdIwQY
MBaAFHeYPNEQmYQ7IvE0dbC1Z+ph3JuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVnODBSQ1poRHNpOFRSMXNMVm42bUhjbTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81NmZjMWMtNWMzNC00YWVmLWE2NzAt
NzUyY2I2NjBkNmRjLzEvV2UzVG5qY3o0eVdEbF9hR2o3dTZXVUFHc2pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81NmZjMWMtNWMzNC00YWVmLWE2NzAtNzUyY2I2NjBkNmRj
LzEvZDVnODBSQ1poRHNpOFRSMXNMVm42bUhjbTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQpFMA8E
AgACMAkDBwEqCm4AAEgwDQYJKoZIhvcNAQELBQADggEBAJuFBSXtC2pEuVLavuFZ
cFkY+eW841NupPBEB1+Aut1HCkVhqZxRGfktzv3+ZYLyWGCdoBIuoGFmvYU3MPA9
NaHYndhNqtGDW1Of/60UYcQFMloZw+y0QvvoUyfiCw6o1qCqFLojhqHHxTM60S6z
HWNDrfvA3bRKbfJ5WP3HZ3YQhbWwflaJbXD2SPw+4gm9wh+yk5/4QQi98Bu8tk+p
3ultKFBKSleFvLe/asA7VkbqkX92t1XJpR8ftrIoGrvhqpFuj2E3KpY7N6DteWsu
l+BL/iYDmK11+w/TW/j2Ckq695Ub/pFRjJwJO0r3wts3i1wStFWu5lqchczsAmbO
Ozg=
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:16:20 2026 by rpki-client