Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/gqda1RRdjHz2yyIazkooa21K5ao.roa
File: gqda1RRdjHz2yyIazkooa21K5ao.roa (raw, json)
Hash identifier: gk7o7ms/UurBVCVNeivvLcIA/I4s2EpCjOSX/bo2p8Y=
Subject key identifier: 82:A7:5A:D5:14:5D:8C:7C:F6:CB:22:1A:CE:4A:28:6B:6D:4A:E5:AA
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01A0C88139850D74519EE7F2BFE196571731
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/gqda1RRdjHz2yyIazkooa21K5ao.roa
Signing time: Tue 22 Sep 2026 09:45:07 +0000
ROA not before: Tue 22 Sep 2026 09:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 2a12:da80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:81:39:85:0d:74:51:9e:e7:f2:bf:e1:96:57:17:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Sep 22 09:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82a75ad5145d8c7cf6cb221ace4a286b6d4ae5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:22:b7:21:52:7a:5e:53:64:a0:46:1b:ad:
c4:36:dd:8e:f9:9e:74:6e:81:79:73:bf:66:a9:4b:
9e:80:50:76:b9:83:5f:6d:45:2b:0b:66:6f:e9:b9:
d4:77:55:6b:ac:90:e3:13:31:7b:40:b1:ca:9d:c0:
52:a7:1c:72:94:5d:7a:46:d2:76:5e:89:a4:99:83:
0c:53:f9:e9:f9:fa:09:9c:5b:24:14:39:87:ec:7a:
de:a2:05:97:13:e7:6c:a6:5d:eb:a1:e5:2c:75:c4:
16:69:46:ba:68:74:11:7c:d0:a1:c9:d5:ba:07:4e:
ca:77:93:0f:a4:44:a4:44:63:96:5e:14:2c:12:11:
7a:90:6f:59:ef:0a:0a:fa:d1:f3:83:ca:8d:62:b4:
4c:e9:b1:1a:f1:e8:42:ec:c4:b0:d7:da:48:a9:fc:
0f:dd:f7:cc:3a:0e:74:3a:6a:ff:81:35:da:08:51:
ba:38:04:47:b1:3f:09:ad:c5:c0:55:22:56:06:93:
1c:12:28:26:88:a7:6a:c0:29:71:10:9a:99:2d:0c:
e6:76:f0:dc:11:50:32:8a:bd:85:3e:10:67:ff:80:
28:09:54:13:8b:8d:c5:b8:af:fc:29:62:d6:eb:c0:
0e:f1:b0:d5:74:78:3d:28:1d:f3:f9:d1:17:90:79:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A7:5A:D5:14:5D:8C:7C:F6:CB:22:1A:CE:4A:28:6B:6D:4A:E5:AA
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/gqda1RRdjHz2yyIazkooa21K5ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:da80::/29
Signature Algorithm: sha256WithRSAEncryption
54:9d:64:37:ca:e7:cf:d3:22:67:33:ec:fe:8b:48:0f:18:75:
11:8c:b8:08:01:ea:09:4c:bf:21:e8:2d:fb:25:31:95:87:29:
df:90:13:c4:c5:68:6d:ed:f9:4e:9a:2c:18:9b:aa:12:f9:9a:
1d:6a:18:9f:0e:78:9c:74:21:26:86:47:4b:40:b5:b1:50:01:
97:24:27:31:c8:5e:e3:67:0e:de:6a:b7:57:95:d3:4a:95:d1:
b0:eb:45:c9:f1:16:30:b6:16:1c:04:c4:e2:0f:2f:c5:af:c9:
1a:6f:18:08:14:9c:e3:c8:8c:f5:a6:a9:d3:e5:e5:4d:c7:47:
3d:ef:65:24:fa:59:77:0a:7f:75:3d:52:f8:69:f1:9f:2e:c8:
83:ef:3e:e9:b9:7a:9c:d3:8c:8e:d9:20:87:e4:b3:6c:04:a2:
2b:1e:67:03:a3:db:d7:82:ef:41:fa:91:94:c8:2e:d7:fd:a3:
e2:2d:b8:38:0e:f2:21:c0:1f:16:fa:fc:84:48:b5:10:f8:80:
b8:1d:3f:2b:b2:31:34:94:c9:bf:e1:99:07:8b:35:06:df:d1:
e4:70:29:92:c4:d4:36:d1:83:c4:ac:a9:61:7a:c0:6a:7e:04:
89:a4:db:cb:80:c8:53:7f:2e:48:9a:44:37:60:a7:82:26:98:
c8:44:64:7d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDIgTmFDXRRnufyv+GWVxcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx
MTFkNTEwHhcNMjYwOTIyMDk0NTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmE3NWFkNTE0NWQ4YzdjZjZjYjIyMWFjZTRhMjg2YjZkNGFlNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZYityFSel5TZKBGG63ENt2O+Z50
boF5c79mqUuegFB2uYNfbUUrC2Zv6bnUd1VrrJDjEzF7QLHKncBSpxxylF16RtJ2
XomkmYMMU/np+foJnFskFDmH7HreogWXE+dspl3roeUsdcQWaUa6aHQRfNChydW6
B07Kd5MPpESkRGOWXhQsEhF6kG9Z7woK+tHzg8qNYrRM6bEa8ehC7MSw19pIqfwP
3ffMOg50Omr/gTXaCFG6OARHsT8JrcXAVSJWBpMcEigmiKdqwClxEJqZLQzmdvDc
EVAyir2FPhBn/4AoCVQTi43FuK/8KWLW68AO8bDVdHg9KB3z+dEXkHkmXwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIKnWtUUXYx89ssiGs5KKGttSuWqMB8GA1UdIwQY
MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt
YTQyMTNjOTNmMWY3LzEvZ3FkYTFSUmRqSHoyeXlJYXprb29hMjFLNWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3
LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLagDAN
BgkqhkiG9w0BAQsFAAOCAQEAVJ1kN8rnz9MiZzPs/otIDxh1EYy4CAHqCUy/Iegt
+yUxlYcp35ATxMVobe35TposGJuqEvmaHWoYnw54nHQhJoZHS0C1sVABlyQnMche
42cO3mq3V5XTSpXRsOtFyfEWMLYWHATE4g8vxa/JGm8YCBSc48iM9aap0+XlTcdH
Pe9lJPpZdwp/dT1S+Gnxny7Ig+8+6bl6nNOMjtkgh+SzbASiKx5nA6Pb14LvQfqR
lMgu1/2j4i24OA7yIcAfFvr8hEi1EPiAuB0/K7IxNJTJv+GZB4s1Bt/R5HApksTU
NtGDxKypYXrAan4EiaTby4DIU38uSJpEN2CngiaYyERkfQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:13:58 2026 by rpki-client