Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/8qfLQ1duOCpiMXvXP33F-khRWjQ.roa
File: 8qfLQ1duOCpiMXvXP33F-khRWjQ.roa (raw, json)
Hash identifier: UOMEAVu6zuWyjoIYVrGeEbYVSPUsJxTRBuLIVcQW00o=
Subject key identifier: F2:A7:CB:43:57:6E:38:2A:62:31:7B:D7:3F:7D:C5:FA:48:51:5A:34
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A0FE2238D6BE3A78DCFE1AE7A8B2398ED5
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/8qfLQ1duOCpiMXvXP33F-khRWjQ.roa
Signing time: Fri 02 Oct 2026 19:40:50 +0000
ROA not before: Fri 02 Oct 2026 19:40:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219302
IP address blocks: 2a0d:d940:a010::/48 maxlen: 48
2a0d:d940:a011::/48 maxlen: 48
2a0d:d940:a012::/48 maxlen: 48
2a0d:d940:a013::/48 maxlen: 48
2a0d:d940:a014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:22:38:d6:be:3a:78:dc:fe:1a:e7:a8:b2:39:8e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Oct 2 19:40:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2a7cb43576e382a62317bd73f7dc5fa48515a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:98:5b:5b:14:68:d8:be:17:36:37:eb:b0:
67:b7:38:ba:3b:bc:57:90:fc:64:9e:63:50:a4:5e:
67:dd:e5:b2:3d:5f:34:8c:23:da:7e:83:0e:7a:ae:
55:e0:b8:0c:c5:5d:96:e1:40:b5:7b:6a:7e:63:d5:
95:aa:16:e5:46:3d:7e:b7:0b:c2:66:3b:50:1b:66:
e6:26:44:56:34:e8:05:e1:97:58:ed:f1:ec:48:a4:
75:ac:db:e4:fa:ff:bf:e8:92:fe:59:95:70:3a:72:
e3:3f:e5:3e:3c:24:ed:69:8c:cd:9c:0a:69:60:cb:
f7:c2:38:e2:24:00:2a:c7:fb:42:00:a2:10:55:76:
d7:2e:ff:dc:fb:96:a5:d6:92:18:d3:37:18:1e:2a:
74:aa:dd:51:0b:e2:d9:98:25:6c:64:49:81:2e:5c:
2d:b6:75:43:a3:a1:af:1b:e2:3e:b0:8e:58:f0:45:
e8:1d:de:cb:ec:4c:f7:0c:3f:d4:da:a7:03:62:39:
b3:de:a3:e3:7d:a5:2c:92:f5:08:d0:6d:5d:70:1b:
35:9e:18:c9:ba:eb:d1:4d:c3:e4:1d:b4:4d:ed:58:
93:4d:08:e9:7d:8d:9d:7b:26:bb:2e:07:25:12:24:
53:9b:1c:a8:7f:80:7c:12:66:12:e1:c7:9a:dd:c1:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A7:CB:43:57:6E:38:2A:62:31:7B:D7:3F:7D:C5:FA:48:51:5A:34
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/8qfLQ1duOCpiMXvXP33F-khRWjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:a010::-2a0d:d940:a014:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
79:11:18:d7:ee:d3:3d:2d:f3:82:95:b8:c1:5c:c7:81:cb:a0:
30:2e:36:85:bc:93:f6:73:bd:b0:bd:c6:6c:ad:b4:7e:bc:05:
ab:ba:aa:87:68:17:0b:47:a7:44:80:96:23:b3:89:c4:97:48:
92:ca:5f:ca:d4:ed:e4:1a:f0:87:ed:41:a1:3e:1d:e8:b8:8f:
67:29:b7:f5:15:43:da:d8:75:68:4e:f8:92:a2:13:5b:46:18:
ae:eb:6b:a3:53:30:b6:a8:2b:10:75:84:da:38:5d:c1:e7:34:
97:c5:c0:e3:a7:9b:36:87:23:6d:87:45:f4:18:35:37:6f:18:
02:4d:9b:4f:36:69:56:89:10:2d:f6:e2:da:ad:c5:90:b9:de:
a7:ee:72:bf:c3:0f:0a:8a:a6:41:d2:ea:77:a2:51:39:62:e7:
bb:c6:cb:ce:27:7c:96:f6:ed:50:80:fd:76:cb:09:56:3f:cc:
c5:31:ee:c0:7d:43:a6:fb:9d:62:01:26:80:33:00:0a:30:f8:
c1:ab:a3:ba:f9:18:d0:35:82:86:05:e1:bc:8a:37:0c:a2:be:
44:81:5f:01:23:86:e3:a7:08:09:8f:e7:2a:fd:61:c2:f2:4d:
4f:65:21:14:cf:a1:2b:5a:a9:bc:53:73:18:4c:b2:76:cf:89:
3b:fa:42:61
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaD+IjjWvjp43P4a56iyOY7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYxMDAyMTk0MDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmE3Y2I0MzU3NmUzODJhNjIzMTdiZDczZjdkYzVmYTQ4NTE1YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/OYW1sUaNi+FzY367Bntzi6O7xX
kPxknmNQpF5n3eWyPV80jCPafoMOeq5V4LgMxV2W4UC1e2p+Y9WVqhblRj1+twvC
ZjtQG2bmJkRWNOgF4ZdY7fHsSKR1rNvk+v+/6JL+WZVwOnLjP+U+PCTtaYzNnApp
YMv3wjjiJAAqx/tCAKIQVXbXLv/c+5al1pIY0zcYHip0qt1RC+LZmCVsZEmBLlwt
tnVDo6GvG+I+sI5Y8EXoHd7L7Ez3DD/U2qcDYjmz3qPjfaUskvUI0G1dcBs1nhjJ
uuvRTcPkHbRN7ViTTQjpfY2deya7LgclEiRTmxyof4B8EmYS4cea3cFI7QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPKny0NXbjgqYjF71z99xfpIUVo0MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvOHFmTFExZHVPQ3BpTVh2WFAzM0Yta2hSV2pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDdlA
oBADBwAqDdlAoBQwDQYJKoZIhvcNAQELBQADggEBAHkRGNfu0z0t84KVuMFcx4HL
oDAuNoW8k/ZzvbC9xmyttH68Bau6qodoFwtHp0SAliOzicSXSJLKX8rU7eQa8Ift
QaE+Hei4j2cpt/UVQ9rYdWhO+JKiE1tGGK7ra6NTMLaoKxB1hNo4XcHnNJfFwOOn
mzaHI22HRfQYNTdvGAJNm082aVaJEC324tqtxZC53qfucr/DDwqKpkHS6neiUTli
57vGy84nfJb27VCA/XbLCVY/zMUx7sB9Q6b7nWIBJoAzAAow+MGro7r5GNA1goYF
4byKNwyivkSBXwEjhuOnCAmP5yr9YcLyTU9lIRTPoStaqbxTcxhMsnbPiTv6QmE=
-----END CERTIFICATE-----
Generated at Sat Oct 3 18:10:39 2026 by rpki-client