Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ROEHK_G3SXoguSIySITojCyt7gk.roa
File: ROEHK_G3SXoguSIySITojCyt7gk.roa (raw, json)
Hash identifier: fmVPdgS70cBiSz2OhfXWCfYCFMDOn+khWDbE3US4h/Q=
Subject key identifier: 44:E1:07:2B:F1:B7:49:7A:20:B9:22:32:48:84:E8:8C:2C:AD:EE:09
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C8B0D868116B7A3ECC478D5CA92E97EC
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ROEHK_G3SXoguSIySITojCyt7gk.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a11:1000::/29 maxlen: 29
2a11:bec0::/29 maxlen: 29
2a11:e240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d8:68:11:6b:7a:3e:cc:47:8d:5c:a9:2e:97:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44e1072bf1b7497a20b922324884e88c2cadee09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:bb:49:5d:2e:65:73:e2:17:8d:07:c2:32:
e0:64:b4:46:2f:b4:fd:25:dc:da:ec:8d:6b:68:b7:
54:5a:0d:2b:b7:91:5e:65:cf:c3:3c:a3:c1:47:c9:
58:30:e6:ba:55:a5:14:ab:96:30:11:e2:2d:f9:53:
74:01:84:df:ac:b2:f5:40:09:24:8d:10:f3:3a:cf:
c0:77:de:a2:10:84:82:5e:12:7d:3a:22:03:17:57:
cb:2c:0c:c1:ba:8c:08:8f:17:35:bf:9f:22:d1:e7:
01:b9:7f:02:9a:f5:7c:ee:8b:be:5b:c3:77:d6:b0:
b4:ac:38:47:a3:eb:7c:98:a0:08:86:be:ee:a9:b6:
d0:6a:ca:bf:e4:71:81:57:41:4f:ee:03:a7:38:d8:
35:9e:64:5b:dc:d8:e7:8c:29:19:5e:06:0b:b5:03:
f6:c5:58:b6:e9:7e:31:56:b4:1f:15:b2:31:b2:22:
cb:aa:0a:c5:e6:cc:9c:4e:e2:15:66:6b:17:85:86:
26:49:f3:d8:10:5c:ac:90:66:f5:2e:16:65:92:f7:
7d:63:3f:fa:11:ae:90:ab:ee:30:7e:26:44:b8:79:
bf:af:75:5e:88:a5:88:ce:0b:6e:f1:8a:4c:86:e8:
8f:cc:89:9a:5f:38:9d:f4:a1:be:70:91:29:29:ae:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E1:07:2B:F1:B7:49:7A:20:B9:22:32:48:84:E8:8C:2C:AD:EE:09
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ROEHK_G3SXoguSIySITojCyt7gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1000::/29
2a11:bec0::/29
2a11:e240::/29
Signature Algorithm: sha256WithRSAEncryption
4f:6b:17:e3:0d:3f:42:a5:45:3c:e2:5b:c3:6a:a7:6f:af:49:
1f:69:44:78:a7:81:9a:d3:ae:55:ab:3b:9f:a9:9c:02:e5:a7:
ec:b9:e1:a0:e2:d2:91:d9:16:c2:47:a8:10:0c:f1:7d:0b:1b:
8e:b0:0d:1d:e5:dd:10:f9:2c:11:cd:ac:c0:5b:2c:8f:01:b4:
da:14:2f:b4:c9:10:e5:64:7f:15:96:09:14:e7:05:51:5a:01:
9d:b7:32:68:e7:f4:80:2e:d1:8f:59:50:1b:e8:46:b3:a2:dd:
d1:49:3a:97:f0:b4:08:4b:9e:10:89:ed:50:8f:77:9b:71:4c:
bd:7c:eb:84:af:da:11:c6:77:f4:8a:95:81:3b:a9:4e:f0:82:
9d:0f:37:98:63:80:01:1a:1e:bb:48:d0:75:cb:5e:e1:f9:7f:
68:a2:7a:7e:97:fe:e4:35:9e:da:0a:e8:d0:d2:9f:33:b3:77:
8a:2a:b6:e9:d2:e6:b1:da:49:2e:ac:e9:8f:2a:7d:5a:99:95:
6c:98:c8:5e:37:0a:36:c1:09:ac:2b:b5:2b:46:06:90:d3:5d:
64:1c:98:de:e3:d3:49:e5:84:e3:fb:04:77:c0:86:d3:f2:ac:
21:43:81:79:40:c0:97:72:f6:a8:b3:f0:24:f0:5a:66:80:be:
06:0c:fa:08
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaDIsNhoEWt6PsxHjVypLpfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwOTIyMTAzNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGUxMDcyYmYxYjc0OTdhMjBiOTIyMzI0ODg0ZTg4YzJjYWRlZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfK7SV0uZXPiF40HwjLgZLRGL7T9
Jdza7I1raLdUWg0rt5FeZc/DPKPBR8lYMOa6VaUUq5YwEeIt+VN0AYTfrLL1QAkk
jRDzOs/Ad96iEISCXhJ9OiIDF1fLLAzBuowIjxc1v58i0ecBuX8CmvV87ou+W8N3
1rC0rDhHo+t8mKAIhr7uqbbQasq/5HGBV0FP7gOnONg1nmRb3NjnjCkZXgYLtQP2
xVi26X4xVrQfFbIxsiLLqgrF5sycTuIVZmsXhYYmSfPYEFyskGb1LhZlkvd9Yz/6
Ea6Qq+4wfiZEuHm/r3VeiKWIzgtu8YpMhuiPzImaXzid9KG+cJEpKa7VzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEThByvxt0l6ILkiMkiE6Iwsre4JMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvUk9FSEtfRzNTWG9ndVNJeVNJVG9qQ3l0N2drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhEQAAMF
AyoRvsADBQMqEeJAMA0GCSqGSIb3DQEBCwUAA4IBAQBPaxfjDT9CpUU84lvDaqdv
r0kfaUR4p4Ga065VqzufqZwC5afsueGg4tKR2RbCR6gQDPF9CxuOsA0d5d0Q+SwR
zazAWyyPAbTaFC+0yRDlZH8VlgkU5wVRWgGdtzJo5/SALtGPWVAb6Eazot3RSTqX
8LQIS54Qie1Qj3ebcUy9fOuEr9oRxnf0ipWBO6lO8IKdDzeYY4ABGh67SNB1y17h
+X9oonp+l/7kNZ7aCujQ0p8zs3eKKrbp0uax2kkurOmPKn1amZVsmMheNwo2wQms
K7UrRgaQ011kHJje49NJ5YTj+wR3wIbT8qwhQ4F5QMCXcvaos/Ak8FpmgL4GDPoI
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:17:36 2026 by rpki-client