Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/76vRMaRffuA_ZorzqFlzKRP5nTg.roa
File: 76vRMaRffuA_ZorzqFlzKRP5nTg.roa (raw, json)
Hash identifier: VBzu5XU5lWb8jusoNhZ1nHmczQSGaZpLXHILFaN3EDM=
Subject key identifier: EF:AB:D1:31:A4:5F:7E:E0:3F:66:8A:F3:A8:59:73:29:13:F9:9D:38
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A0D8B8F28D57D3CC3A4A4259DA90FD6944
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/76vRMaRffuA_ZorzqFlzKRP5nTg.roa
Signing time: Fri 25 Sep 2026 13:19:54 +0000
ROA not before: Fri 25 Sep 2026 13:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 2a0d:d940:10b::/48 maxlen: 48
2a0d:d940:90b4::/48 maxlen: 48
2a0d:d940:a020::/44 maxlen: 48
2a0d:d940:a021::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:b8:f2:8d:57:d3:cc:3a:4a:42:59:da:90:fd:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Sep 25 13:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efabd131a45f7ee03f668af3a859732913f99d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:91:9d:22:34:f4:c4:44:20:82:1d:08:62:
47:ac:b8:98:10:b7:12:fc:cb:04:0d:68:8f:b6:06:
71:e1:e5:a6:b5:6a:d3:3e:cf:bd:81:73:8e:c3:60:
27:25:21:48:45:ed:f2:14:e9:8d:b1:3a:5e:4e:41:
de:18:65:55:53:94:99:d3:b8:4d:f3:b7:5f:b9:4e:
1f:30:8c:ba:9d:4c:78:f9:bd:b8:c5:ed:ef:24:f6:
77:34:ed:be:e5:5d:3d:bf:c6:16:6f:71:72:9b:e8:
f7:f2:7f:0f:ef:5d:28:5d:a4:f7:10:e4:3e:28:46:
1c:b7:8a:19:6b:c1:4b:11:64:56:aa:69:5a:3f:11:
04:90:18:f1:8a:55:53:4e:f7:7e:1a:31:49:a5:78:
53:33:82:45:09:10:32:47:0a:cf:d9:56:ef:f8:ed:
26:16:00:03:2c:70:fb:83:ac:9c:9f:fd:81:e0:3c:
86:8f:06:20:49:f9:02:be:0a:28:24:7c:00:2a:72:
81:dd:1d:2d:e4:ba:43:7f:c4:e4:37:b3:4a:c5:13:
c6:48:4e:cc:97:48:9e:04:1d:8c:56:3b:27:9c:35:
1d:a8:da:37:38:53:bb:57:a2:9f:f1:20:b3:7e:1c:
09:3e:9b:fa:82:0a:4b:a8:5d:3e:10:34:5d:91:64:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:D1:31:A4:5F:7E:E0:3F:66:8A:F3:A8:59:73:29:13:F9:9D:38
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/76vRMaRffuA_ZorzqFlzKRP5nTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:10b::/48
2a0d:d940:90b4::/48
2a0d:d940:a020::/44
Signature Algorithm: sha256WithRSAEncryption
3c:5b:db:99:08:06:bf:ea:8b:72:b9:0d:a8:33:7b:77:f6:2d:
1b:fa:7a:89:de:de:ae:a3:cf:69:f3:26:12:42:91:4d:96:04:
83:a5:45:67:45:99:bb:bd:0e:08:24:68:a9:a6:6f:49:98:7e:
cc:33:72:de:18:87:24:e8:7f:00:9d:f1:7c:80:e0:6c:fc:27:
31:b6:98:03:0a:f9:1a:85:31:ed:fc:f6:a1:55:ba:a2:64:8d:
09:6d:27:be:15:a2:32:c8:16:a1:90:69:e8:46:fa:d5:b3:3d:
3e:9b:18:3a:83:08:31:2e:19:ce:12:e8:01:6c:f6:72:68:4d:
1c:a1:b7:2a:06:96:d4:ff:0a:f1:81:8c:3e:60:2b:d7:6c:35:
d8:29:2f:62:a7:82:66:bc:ef:51:c6:b5:12:36:84:e7:8e:c8:
95:3b:fb:1c:bf:c2:ee:60:d4:36:0f:79:e0:1f:d7:38:ad:c4:
a0:65:57:8e:c2:70:1a:c6:b6:4a:52:29:96:cf:99:20:e3:e2:
52:59:43:57:15:3d:48:b2:ca:0e:f4:c7:88:19:92:79:3b:4f:
17:15:4d:e1:8b:21:90:84:13:22:b8:ea:44:b9:b8:f3:c1:3e:
03:6f:6e:c2:8b:26:9f:ca:90:0e:36:5c:7c:20:65:3f:ed:f4:
d8:84:fa:96
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaDYuPKNV9PMOkpCWdqQ/WlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwOTI1MTMxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmFiZDEzMWE0NWY3ZWUwM2Y2NjhhZjNhODU5NzMyOTEzZjk5ZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4CRnSI09MREIIIdCGJHrLiYELcS
/MsEDWiPtgZx4eWmtWrTPs+9gXOOw2AnJSFIRe3yFOmNsTpeTkHeGGVVU5SZ07hN
87dfuU4fMIy6nUx4+b24xe3vJPZ3NO2+5V09v8YWb3Fym+j38n8P710oXaT3EOQ+
KEYct4oZa8FLEWRWqmlaPxEEkBjxilVTTvd+GjFJpXhTM4JFCRAyRwrP2Vbv+O0m
FgADLHD7g6ycn/2B4DyGjwYgSfkCvgooJHwAKnKB3R0t5LpDf8TkN7NKxRPGSE7M
l0ieBB2MVjsnnDUdqNo3OFO7V6Kf8SCzfhwJPpv6ggpLqF0+EDRdkWTEJwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFO+r0TGkX37gP2aK86hZcykT+Z04MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvNzZ2Uk1hUmZmdUFfWm9yenFGbHpLUlA1blRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg3ZQAEL
AwcAKg3ZQJC0AwcEKg3ZQKAgMA0GCSqGSIb3DQEBCwUAA4IBAQA8W9uZCAa/6oty
uQ2oM3t39i0b+nqJ3t6uo89p8yYSQpFNlgSDpUVnRZm7vQ4IJGippm9JmH7MM3Le
GIck6H8AnfF8gOBs/CcxtpgDCvkahTHt/PahVbqiZI0JbSe+FaIyyBahkGnoRvrV
sz0+mxg6gwgxLhnOEugBbPZyaE0cobcqBpbU/wrxgYw+YCvXbDXYKS9ip4JmvO9R
xrUSNoTnjsiVO/scv8LuYNQ2D3ngH9c4rcSgZVeOwnAaxrZKUimWz5kg4+JSWUNX
FT1IssoO9MeIGZJ5O08XFU3hiyGQhBMiuOpEubjzwT4Db27CiyafypAONlx8IGU/
7fTYhPqW
-----END CERTIFICATE-----
Generated at Sat Oct 3 22:33:46 2026 by rpki-client