Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1bjC8RApiEguI_-48QbDk2ly4rs.roa
File: 1bjC8RApiEguI_-48QbDk2ly4rs.roa (raw, json)
Hash identifier: mFMNmcqoSrjq06M53TKnPqwXqPqC0K7tevUu+NxwcWw=
Subject key identifier: D5:B8:C2:F1:10:29:88:48:2E:23:FF:B8:F1:06:C3:93:69:72:E2:BB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A1A2EA10E3C873275BC923A7D4211FAA28
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1bjC8RApiEguI_-48QbDk2ly4rs.roa
Signing time: Tue 03 Nov 2026 19:36:50 +0000
ROA not before: Tue 03 Nov 2026 19:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218208
IP address blocks: 2a0c:9a40:e1c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:ea:10:e3:c8:73:27:5b:c9:23:a7:d4:21:1f:aa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 3 19:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5b8c2f1102988482e23ffb8f106c3936972e2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:e8:67:af:db:e4:a8:84:b3:35:04:10:6b:
de:23:dc:4b:0e:95:ae:d3:05:68:b9:b9:e4:a0:fd:
c0:75:f8:d1:b1:9e:63:8d:d1:9f:c7:51:64:2c:b1:
84:1d:1a:be:21:cb:82:b9:b7:86:a0:d2:ea:bf:4c:
7c:45:65:28:85:1b:a1:6c:9c:71:cb:9b:e9:52:5a:
51:df:56:bd:95:09:bc:71:53:72:db:0b:7f:20:3f:
08:cc:1c:ad:c4:d6:23:c2:5b:ce:41:7c:9b:5e:90:
2f:f4:86:be:83:ad:4f:d8:33:8c:04:8b:6d:5d:6a:
af:94:e3:92:7d:14:c7:66:3b:aa:76:fb:34:b8:4a:
39:f6:05:2f:1f:b0:52:99:f3:cb:2e:16:44:6a:1c:
d0:24:61:6b:99:2f:8f:b8:06:6e:79:a7:8e:75:45:
c7:19:e0:25:1b:72:ea:6c:35:75:d3:0f:db:e1:92:
7f:b7:c1:5c:28:8e:94:c9:98:b2:cc:9c:e0:0e:b5:
a4:fc:d1:1e:32:48:70:9e:66:8c:6b:6b:68:a2:aa:
09:9f:54:c5:5c:e3:e5:f4:9e:10:b0:cc:a0:d4:55:
6f:20:f3:08:68:f6:bc:05:02:30:a7:7c:6e:af:bb:
27:15:4b:cd:f9:41:21:21:ed:83:66:e5:89:1f:52:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:C2:F1:10:29:88:48:2E:23:FF:B8:F1:06:C3:93:69:72:E2:BB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1bjC8RApiEguI_-48QbDk2ly4rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e1c0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:de:7c:6b:8f:70:92:13:a1:4a:b2:9b:6e:df:a8:47:7c:d1:
83:2e:c9:7b:e2:26:6a:3d:35:6a:2c:a8:58:3c:74:e3:a9:04:
ee:2d:f3:9c:aa:65:89:c0:1c:73:c3:e1:d8:93:b0:65:93:fb:
bf:05:66:7b:5e:b7:c3:21:f7:6a:a6:ce:e0:98:1f:11:5d:32:
d7:39:f5:c6:8f:a7:13:5e:52:7c:36:3f:d6:15:ec:c6:f2:e0:
ec:53:b2:82:de:b6:22:cd:7b:ae:70:9c:69:12:a7:d0:53:6d:
af:1a:94:35:58:13:f2:34:c0:05:12:9d:fb:2b:43:da:3a:60:
d6:a7:42:e0:56:88:1c:fb:e4:b2:ac:73:68:22:fd:b5:f2:6e:
e9:ad:bd:0b:a6:e4:6a:b5:b8:4d:20:00:68:01:18:76:f3:55:
93:43:1c:12:9e:63:72:df:6d:31:6b:c8:0d:60:fa:13:89:eb:
88:68:68:a4:37:28:c3:8b:d1:a3:ea:c3:c1:c5:df:1f:64:78:
59:94:f5:fa:68:fe:c6:bd:7e:b2:71:5e:35:0a:1d:fb:1c:ba:
ee:1a:46:b4:cc:11:f9:78:b3:2a:45:48:ee:41:9a:d6:d1:23:
0c:09:2b:83:98:c7:e7:fc:9b:f7:9a:61:08:d6:03:db:25:a2:
e7:ea:98:a0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaGi6hDjyHMnW8kjp9QhH6ooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYxMTAzMTkzNjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWI4YzJmMTEwMjk4ODQ4MmUyM2ZmYjhmMTA2YzM5MzY5NzJlMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxizoZ6/b5KiEszUEEGveI9xLDpWu
0wVoubnkoP3AdfjRsZ5jjdGfx1FkLLGEHRq+IcuCubeGoNLqv0x8RWUohRuhbJxx
y5vpUlpR31a9lQm8cVNy2wt/ID8IzBytxNYjwlvOQXybXpAv9Ia+g61P2DOMBItt
XWqvlOOSfRTHZjuqdvs0uEo59gUvH7BSmfPLLhZEahzQJGFrmS+PuAZueaeOdUXH
GeAlG3LqbDV10w/b4ZJ/t8FcKI6UyZiyzJzgDrWk/NEeMkhwnmaMa2tooqoJn1TF
XOPl9J4QsMyg1FVvIPMIaPa8BQIwp3xur7snFUvN+UEhIe2DZuWJH1LqhQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNW4wvEQKYhILiP/uPEGw5NpcuK7MB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvMWJqQzhSQXBpRWd1SV8tNDhRYkRrMmx5NHJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQOHA
MA0GCSqGSIb3DQEBCwUAA4IBAQCq3nxrj3CSE6FKsptu36hHfNGDLsl74iZqPTVq
LKhYPHTjqQTuLfOcqmWJwBxzw+HYk7Blk/u/BWZ7XrfDIfdqps7gmB8RXTLXOfXG
j6cTXlJ8Nj/WFezG8uDsU7KC3rYizXuucJxpEqfQU22vGpQ1WBPyNMAFEp37K0Pa
OmDWp0LgVogc++SyrHNoIv218m7prb0LpuRqtbhNIABoARh281WTQxwSnmNy320x
a8gNYPoTieuIaGikNyjDi9Gj6sPBxd8fZHhZlPX6aP7GvX6ycV41Ch37HLruGka0
zBH5eLMqRUjuQZrW0SMMCSuDmMfn/Jv3mmEI1gPbJaLn6pig
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:09 2026 by rpki-client