Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/dfA2VO-Kxn8s5wuCFyfgyHLiuBU.roa
File: dfA2VO-Kxn8s5wuCFyfgyHLiuBU.roa (raw, json)
Hash identifier: WWmp8FZy5WZkHZy+XAkDz3z08JgrKOhbfA0wwG5V1bg=
Subject key identifier: 75:F0:36:54:EF:8A:C6:7F:2C:E7:0B:82:17:27:E0:C8:72:E2:B8:15
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 019DCE90C40D1BE39248A51569BE8B86BBD6
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/dfA2VO-Kxn8s5wuCFyfgyHLiuBU.roa
Signing time: Mon 27 Apr 2026 10:51:26 +0000
ROA not before: Mon 27 Apr 2026 10:51:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:90:c4:0d:1b:e3:92:48:a5:15:69:be:8b:86:bb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Apr 27 10:51:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75f03654ef8ac67f2ce70b821727e0c872e2b815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:c2:94:a6:be:71:c8:a5:f1:c1:1f:70:d2:
94:38:4d:8e:48:b1:d4:c8:db:cc:c3:79:99:80:2b:
e9:7a:e6:c1:ef:51:78:88:5e:4f:7f:a2:6f:58:5c:
11:50:c5:a8:bb:51:39:aa:1a:8a:68:6a:cb:d7:7f:
25:aa:3e:d5:60:d9:77:18:e1:b7:5e:fc:9c:26:72:
4f:b5:da:90:06:68:2e:cb:ad:61:02:28:5b:8a:38:
74:dd:b7:60:1d:63:d1:a5:8d:08:5c:c7:58:d2:05:
a3:cf:dd:2a:2a:9d:52:a7:2f:c5:38:88:6c:cb:3e:
d9:6e:ff:9a:c5:ed:50:a9:2d:df:95:41:48:f4:07:
f5:96:21:91:74:b5:84:82:f4:f5:89:23:1d:72:92:
ad:f9:92:89:3e:cd:de:44:59:49:19:e1:c9:ba:e5:
e9:86:c4:40:ee:c8:5b:f2:a2:a6:82:2c:4e:d2:bb:
d1:f2:85:3d:28:f1:16:83:9f:d2:bc:6b:c4:ee:0d:
66:58:6b:ae:7a:fa:68:68:a9:da:47:a2:21:fb:4b:
73:82:40:50:9a:97:2b:d6:b6:74:e2:58:d6:13:4b:
cd:6b:d3:09:eb:c4:6e:df:80:a4:89:d7:43:3d:19:
35:c7:27:33:3e:f3:26:83:2c:72:60:d9:49:cc:a8:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:36:54:EF:8A:C6:7F:2C:E7:0B:82:17:27:E0:C8:72:E2:B8:15
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/dfA2VO-Kxn8s5wuCFyfgyHLiuBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f240::/29
Signature Algorithm: sha256WithRSAEncryption
82:db:b5:49:2e:69:f6:c8:2a:4d:04:43:1b:3b:eb:38:07:25:
80:d9:96:f8:5d:71:1f:d4:8e:3d:7b:2f:19:a7:d3:98:07:76:
72:b3:a7:49:b4:f7:64:7c:fe:37:1a:e9:24:a6:24:77:52:d8:
bb:ef:de:39:cb:0c:48:be:cc:aa:6c:4c:33:e2:ac:d5:ac:04:
3d:29:a9:a9:8d:22:89:5a:d9:5d:e1:7e:89:27:3b:1f:05:4a:
39:ee:a3:f8:4b:31:3e:b8:b6:87:dd:ca:05:53:92:40:af:5c:
cb:d4:ba:5f:87:a7:67:44:14:11:46:55:ad:e1:44:7c:88:81:
0a:47:a9:8d:48:9d:88:0b:63:83:f1:cc:04:f7:07:7b:4c:e5:
8b:7c:9d:33:b1:7f:ce:d5:5c:0d:0d:95:12:3a:fe:59:ee:4f:
e5:77:76:84:8a:1b:7b:35:7e:a6:7e:a4:74:5f:a5:21:2f:65:
1a:19:63:40:6d:c4:8f:e9:fe:7a:99:53:3a:41:8a:4f:cf:3c:
fe:94:e7:aa:37:d5:6e:86:94:8e:d7:c8:3e:f2:2b:d0:3d:57:
52:88:ef:4e:5a:09:cd:27:31:d6:2e:72:33:bd:4d:3d:22:57:
c4:4f:df:85:b6:e5:f6:ff:3f:26:f2:f4:d0:29:c2:75:01:27:
8e:42:a9:6d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ3OkMQNG+OSSKUVab6LhrvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDdhYWEzZDI1YzJmOWViYmVjNzRjODMwY2MwY2RlOTMx
OGM4ZjgwHhcNMjYwNDI3MTA1MTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWYwMzY1NGVmOGFjNjdmMmNlNzBiODIxNzI3ZTBjODcyZTJiODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn3ClKa+ccil8cEfcNKUOE2OSLHU
yNvMw3mZgCvpeubB71F4iF5Pf6JvWFwRUMWou1E5qhqKaGrL138lqj7VYNl3GOG3
XvycJnJPtdqQBmguy61hAihbijh03bdgHWPRpY0IXMdY0gWjz90qKp1Spy/FOIhs
yz7Zbv+axe1QqS3flUFI9Af1liGRdLWEgvT1iSMdcpKt+ZKJPs3eRFlJGeHJuuXp
hsRA7shb8qKmgixO0rvR8oU9KPEWg5/SvGvE7g1mWGuuevpoaKnaR6Ih+0tzgkBQ
mpcr1rZ04ljWE0vNa9MJ68Ru34CkiddDPRk1xyczPvMmgyxyYNlJzKhXyQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHXwNlTvisZ/LOcLghcn4Mhy4rgVMB8GA1UdIwQY
MBaAFOTXqqPSXC+eu+x0yDDMDN6TGMj4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2Yt
ZWY2M2I4MTZkZDM1LzEvZGZBMlZPLUt4bjhzNXd1Q0Z5Zmd5SExpdUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2YtZWY2M2I4MTZkZDM1
LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHyQDAN
BgkqhkiG9w0BAQsFAAOCAQEAgtu1SS5p9sgqTQRDGzvrOAclgNmW+F1xH9SOPXsv
GafTmAd2crOnSbT3ZHz+NxrpJKYkd1LYu+/eOcsMSL7MqmxMM+Ks1awEPSmpqY0i
iVrZXeF+iSc7HwVKOe6j+EsxPri2h93KBVOSQK9cy9S6X4enZ0QUEUZVreFEfIiB
CkepjUidiAtjg/HMBPcHe0zli3ydM7F/ztVcDQ2VEjr+We5P5Xd2hIobezV+pn6k
dF+lIS9lGhljQG3Ej+n+eplTOkGKT888/pTnqjfVboaUjtfIPvIr0D1XUojvTloJ
zScx1i5yM71NPSJXxE/fhbbl9v8/JvL00CnCdQEnjkKpbQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:24:21 2026 by rpki-client