Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/igDwJxcpFA2w_24J1RIqXROagls.roa
File: igDwJxcpFA2w_24J1RIqXROagls.roa (raw, json)
Hash identifier: 8TuQD3H2RMF0YVLGzeua67hxNq9N4Z8UCk814oKuDdI=
Subject key identifier: 8A:00:F0:27:17:29:14:0D:B0:FF:6E:09:D5:12:2A:5D:13:9A:82:5B
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A18211B0DFCC56CD160D59524864E2D415
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/igDwJxcpFA2w_24J1RIqXROagls.roa
Signing time: Wed 28 Oct 2026 10:32:39 +0000
ROA not before: Wed 28 Oct 2026 10:32:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a09:3f00:4400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:11:b0:df:cc:56:cd:16:0d:59:52:48:64:e2:d4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Oct 28 10:32:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a00f0271729140db0ff6e09d5122a5d139a825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:cb:8f:77:86:0a:85:e5:42:57:af:ad:90:
3f:59:6f:1e:0b:2c:04:df:57:85:55:ca:ca:6f:36:
ac:6c:56:ea:a8:b4:57:71:0b:07:21:68:9c:ed:9b:
3b:b4:d0:35:86:2d:89:b3:60:73:c8:c2:60:fe:40:
68:36:cc:9b:32:8b:28:9a:6f:9e:98:ea:c6:4a:46:
07:e0:75:39:9d:89:77:4d:45:71:cf:32:06:db:91:
82:a9:7c:ec:0c:9e:05:59:fd:be:c3:2d:2d:2b:8c:
6e:77:02:eb:de:ce:eb:2f:c4:de:b7:a7:af:9b:b7:
df:a1:67:57:51:32:bb:b2:c7:35:57:0b:29:74:26:
d0:1f:03:3f:db:74:18:bc:0f:8b:18:5f:60:47:18:
ba:38:32:77:b8:e0:5f:cd:4a:4e:88:ed:44:89:9d:
c7:e0:34:ca:e1:b0:60:99:c1:07:9c:77:98:5d:79:
21:f7:4e:fa:67:3f:34:dc:81:6e:c4:13:c9:f6:9e:
6c:78:a0:1d:c6:8a:a1:34:1e:9b:75:56:b6:16:34:
00:f8:6a:2b:0c:69:0b:c8:7d:7a:e0:45:83:c6:0d:
fe:e7:48:23:67:66:c0:bf:4a:bd:09:e2:ff:e1:ca:
cc:3e:9f:0b:74:ca:45:8a:4c:39:41:a6:3e:f2:ba:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:00:F0:27:17:29:14:0D:B0:FF:6E:09:D5:12:2A:5D:13:9A:82:5B
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/igDwJxcpFA2w_24J1RIqXROagls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:4400::/38
Signature Algorithm: sha256WithRSAEncryption
b0:ef:b0:ba:e8:e0:6f:c0:c4:70:35:69:44:3f:ef:01:df:ce:
bf:b2:c4:c0:12:23:8e:bc:84:2b:95:72:13:ee:82:27:24:e7:
0f:d6:96:8e:13:3d:03:13:57:df:9f:ab:79:5b:a7:53:19:75:
94:2b:25:82:ff:7a:4a:b2:79:6d:1d:a3:55:69:00:71:41:0f:
33:4b:a8:02:97:a8:32:aa:a2:a6:f7:7b:97:1c:96:4d:f3:c5:
79:a8:f2:29:d0:8d:fe:40:7c:80:3e:73:ef:7c:b4:86:85:a3:
5b:12:50:88:b6:27:26:b4:4e:37:d1:fd:d9:9e:cc:63:bc:16:
29:04:79:0e:0f:a9:93:59:b0:e1:f0:28:96:7f:d8:74:6d:89:
4d:5d:24:94:8e:8d:6f:27:2d:b5:3f:bc:d3:69:5b:34:13:af:
a0:cc:fa:fe:19:0e:ae:a2:64:c0:7c:4e:a7:00:a7:a6:93:72:
93:a5:49:bb:1b:87:ce:7b:53:63:76:85:ae:e0:75:e4:32:48:
3e:86:68:b3:70:7d:ca:2e:9e:c7:77:cf:a6:80:93:9b:3c:c2:
64:45:d6:27:a8:c2:53:b9:03:da:78:2c:b5:88:04:19:0a:b5:
de:fb:f8:d3:89:a2:84:ce:ca:dd:eb:85:bc:fc:5e:6d:11:42:
d8:7f:16:94
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaGCEbDfzFbNFg1ZUkhk4tQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzE2MDE4MTczOTU2OGU1NzhlMWI1ZjU3OTc2YTYwMzk4
MDYyZTYwHhcNMjYxMDI4MTAzMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTAwZjAyNzE3MjkxNDBkYjBmZjZlMDlkNTEyMmE1ZDEzOWE4MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkLLj3eGCoXlQlevrZA/WW8eCywE
31eFVcrKbzasbFbqqLRXcQsHIWic7Zs7tNA1hi2Js2BzyMJg/kBoNsybMosomm+e
mOrGSkYH4HU5nYl3TUVxzzIG25GCqXzsDJ4FWf2+wy0tK4xudwLr3s7rL8Tet6ev
m7ffoWdXUTK7ssc1VwspdCbQHwM/23QYvA+LGF9gRxi6ODJ3uOBfzUpOiO1EiZ3H
4DTK4bBgmcEHnHeYXXkh9076Zz803IFuxBPJ9p5seKAdxoqhNB6bdVa2FjQA+Gor
DGkLyH164EWDxg3+50gjZ2bAv0q9CeL/4crMPp8LdMpFikw5QaY+8rrW1QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIoA8CcXKRQNsP9uCdUSKl0TmoJbMB8GA1UdIwQY
MBaAFDZxYBgXOVaOV44bX1eXamA5gGLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYt
ZWU4Y2ZkZDJlZDk0LzEvaWdEd0p4Y3BGQTJ3XzI0SjFSSXFYUk9hZ2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYtZWU4Y2ZkZDJlZDk0
LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgk/AEQw
DQYJKoZIhvcNAQELBQADggEBALDvsLro4G/AxHA1aUQ/7wHfzr+yxMASI468hCuV
chPugick5w/Wlo4TPQMTV9+fq3lbp1MZdZQrJYL/ekqyeW0do1VpAHFBDzNLqAKX
qDKqoqb3e5cclk3zxXmo8inQjf5AfIA+c+98tIaFo1sSUIi2Jya0TjfR/dmezGO8
FikEeQ4PqZNZsOHwKJZ/2HRtiU1dJJSOjW8nLbU/vNNpWzQTr6DM+v4ZDq6iZMB8
TqcAp6aTcpOlSbsbh857U2N2ha7gdeQySD6GaLNwfcounsd3z6aAk5s8wmRF1ieo
wlO5A9p4LLWIBBkKtd77+NOJooTOyt3rhbz8Xm0RQth/FpQ=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:44 2026 by rpki-client