Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/rVGgQnBi4K_nU_pqWFSXCWCQjGw.roa
File: rVGgQnBi4K_nU_pqWFSXCWCQjGw.roa (raw, json)
Hash identifier: MNtcE6V2kvOfnbTCIqMqR6BIQwvAfwObLthYeMhagKo=
Subject key identifier: AD:51:A0:42:70:62:E0:AF:E7:53:FA:6A:58:54:97:09:60:90:8C:6C
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A1CA85115024900D42490CAE8DE23C2704
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/rVGgQnBi4K_nU_pqWFSXCWCQjGw.roa
Signing time: Wed 11 Nov 2026 12:11:20 +0000
ROA not before: Wed 11 Nov 2026 12:11:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219357
IP address blocks: 2a0d:d940:70::/44 maxlen: 44
2a0d:d940:d0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:85:11:50:24:90:0d:42:49:0c:ae:8d:e2:3c:27:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Nov 11 12:11:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad51a0427062e0afe753fa6a5854970960908c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:49:17:79:0c:a1:47:a0:4c:e1:fd:e5:ec:
27:cf:86:05:c9:7d:8b:34:f0:b3:81:3d:ab:de:59:
3b:14:ba:60:54:f9:91:89:b7:51:42:cd:7e:f2:e6:
ba:7a:4a:4c:2a:04:58:24:d7:2b:10:fe:8e:6b:9c:
e5:b4:44:a9:3a:d8:26:a3:c8:37:a3:9f:1e:e7:c3:
df:21:f7:70:33:f0:79:9c:1c:1c:f1:77:74:36:2c:
a2:0f:4f:1e:96:50:92:02:16:4a:c5:2a:db:89:9e:
2f:1c:58:62:a1:61:35:d9:ad:43:3e:0c:38:2f:80:
61:e2:8e:e6:3f:f4:9a:99:4f:b8:77:f9:c4:ea:f3:
e9:31:23:2f:e6:9e:be:fc:b6:18:a9:34:1d:0c:d9:
ab:29:3c:55:9d:f5:50:16:41:98:60:32:a1:d2:bc:
52:29:61:29:a9:6e:c1:39:d2:b4:2b:21:34:d4:e1:
73:b2:dc:ee:4c:19:17:bf:71:e8:10:7a:d6:f9:ca:
0f:33:9d:41:25:29:39:fb:7e:57:bf:ff:6f:d5:4a:
16:93:fd:2d:56:73:8b:b7:16:5c:57:0c:33:75:65:
6d:77:b1:68:b9:c1:8f:04:c1:17:88:ea:a3:08:5a:
1a:16:7f:29:61:17:9a:75:11:61:d3:ae:35:11:6b:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:51:A0:42:70:62:E0:AF:E7:53:FA:6A:58:54:97:09:60:90:8C:6C
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/rVGgQnBi4K_nU_pqWFSXCWCQjGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:70::/44
2a0d:d940:d0::/45
Signature Algorithm: sha256WithRSAEncryption
1a:82:69:cb:70:64:46:1a:7f:ba:f0:4c:bc:d8:f3:23:88:9e:
81:0c:16:5f:e8:08:d7:27:f4:92:fe:82:b7:b1:d5:28:27:5e:
42:f9:4a:3e:f8:2c:64:aa:50:56:32:f5:76:4d:8e:4f:a7:b6:
73:7b:04:ba:79:d3:83:31:b6:4c:9f:d8:72:8f:b6:da:74:78:
7d:e3:32:9d:f9:93:50:5b:49:fd:e9:82:d9:5d:8a:ed:19:73:
91:39:e3:0c:0c:c1:a1:37:32:ae:61:40:2c:29:2e:1e:fc:79:
3f:d7:f7:8b:93:bf:35:d6:9d:55:92:84:02:ed:c1:c0:29:0c:
ad:18:50:9b:34:c6:94:d0:1f:2f:1e:aa:af:73:3d:51:72:98:
df:a8:e0:b9:31:cf:8d:55:94:76:3f:a2:b4:17:3d:74:4c:e4:
fc:29:f6:ee:fa:b6:43:fe:20:e9:7b:e3:88:cb:59:de:0a:1e:
22:2c:95:4e:8e:67:29:bc:02:a5:33:28:e4:b8:c3:5d:25:b1:
c2:fe:fe:1b:c4:e1:ed:b0:8b:de:c4:d5:45:4d:32:0c:a0:46:
6d:ed:f2:7b:e0:61:43:8d:58:7f:21:f4:7b:9d:cc:8f:d5:e8:
c1:ec:c6:cb:80:6d:43:09:be:79:3b:d0:a2:f8:fa:7c:b4:ce:
48:6d:a2:c0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaHKhRFQJJANQkkMro3iPCcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYxMTExMTIxMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDUxYTA0MjcwNjJlMGFmZTc1M2ZhNmE1ODU0OTcwOTYwOTA4YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe1JF3kMoUegTOH95ewnz4YFyX2L
NPCzgT2r3lk7FLpgVPmRibdRQs1+8ua6ekpMKgRYJNcrEP6Oa5zltESpOtgmo8g3
o58e58PfIfdwM/B5nBwc8Xd0NiyiD08ellCSAhZKxSrbiZ4vHFhioWE12a1DPgw4
L4Bh4o7mP/SamU+4d/nE6vPpMSMv5p6+/LYYqTQdDNmrKTxVnfVQFkGYYDKh0rxS
KWEpqW7BOdK0KyE01OFzstzuTBkXv3HoEHrW+coPM51BJSk5+35Xv/9v1UoWk/0t
VnOLtxZcVwwzdWVtd7FoucGPBMEXiOqjCFoaFn8pYReadRFh0641EWsN3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK1RoEJwYuCv51P6alhUlwlgkIxsMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvclZHZ1FuQmk0S19uVV9wcVdGU1hDV0NRakd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg3ZQABw
AwcDKg3ZQADQMA0GCSqGSIb3DQEBCwUAA4IBAQAagmnLcGRGGn+68Ey82PMjiJ6B
DBZf6AjXJ/SS/oK3sdUoJ15C+Uo++CxkqlBWMvV2TY5Pp7ZzewS6edODMbZMn9hy
j7badHh94zKd+ZNQW0n96YLZXYrtGXOROeMMDMGhNzKuYUAsKS4e/Hk/1/eLk781
1p1VkoQC7cHAKQytGFCbNMaU0B8vHqqvcz1RcpjfqOC5Mc+NVZR2P6K0Fz10TOT8
Kfbu+rZD/iDpe+OIy1neCh4iLJVOjmcpvAKlMyjkuMNdJbHC/v4bxOHtsIvexNVF
TTIMoEZt7fJ74GFDjVh/IfR7ncyP1ejB7MbLgG1DCb55O9Ci+Pp8tM5IbaLA
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:50 2026 by rpki-client