Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/CBPoDdUH30f7d2sFQjNhO5c0Gec.roa
File: CBPoDdUH30f7d2sFQjNhO5c0Gec.roa (raw, json)
Hash identifier: klkootso0a7hcOElSqfGOplj+RsqKJ4MuYxaK0CdTEY=
Subject key identifier: 08:13:E8:0D:D5:07:DF:47:FB:77:6B:05:42:33:61:3B:97:34:19:E7
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01A0C8B0D5749384754A9833671820D9472B
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/CBPoDdUH30f7d2sFQjNhO5c0Gec.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a12:e080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d5:74:93:84:75:4a:98:33:67:18:20:d9:47:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0813e80dd507df47fb776b054233613b973419e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:04:84:b0:6a:1b:52:6f:53:f9:75:99:c4:
f2:4b:6a:b0:ef:89:14:19:03:54:3d:e4:0e:6f:cf:
f3:fe:90:22:81:2a:2b:42:f1:58:9c:6b:42:04:f2:
f9:d6:46:89:6f:fa:48:13:9c:16:7c:1d:27:d0:59:
d5:a4:a9:99:51:a3:17:11:3c:40:87:0e:57:d9:69:
65:2e:6f:13:88:5d:75:05:0c:8b:5f:6d:2f:b8:f5:
2a:a2:ef:af:ad:16:80:a2:d9:75:2f:4f:bf:8a:7d:
c3:b6:b1:d5:33:92:49:b6:ac:c5:20:b9:84:56:18:
1c:15:cf:bb:a0:f7:28:e7:81:cb:21:dd:0f:97:7c:
67:38:34:6f:93:08:28:a1:51:86:47:b4:b9:c7:7b:
a3:b1:6d:20:c4:f2:0d:9c:c1:5a:16:0b:2b:ce:b2:
2c:ff:d3:93:bc:ba:0a:7d:6c:36:cd:10:51:3f:b7:
d5:2e:7d:03:0c:5d:2c:d6:a1:69:f5:40:16:8a:20:
57:06:32:60:0a:49:ff:21:2f:ab:b7:cd:e0:e8:a3:
2b:e0:1a:60:83:17:e9:f7:32:e6:1a:f5:88:06:1b:
5a:45:17:05:46:d2:6a:4a:9e:83:39:c9:13:dd:ab:
64:35:2b:d5:8d:63:6d:0b:24:f1:55:fc:6d:db:b4:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:13:E8:0D:D5:07:DF:47:FB:77:6B:05:42:33:61:3B:97:34:19:E7
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/CBPoDdUH30f7d2sFQjNhO5c0Gec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e080::/29
Signature Algorithm: sha256WithRSAEncryption
43:d9:10:7a:f8:1b:57:97:fa:cd:4d:8f:2b:2d:9c:20:8e:d9:
df:8a:5d:b4:d2:e9:60:fa:a3:2e:c5:e6:ce:44:76:69:b3:4e:
fe:07:a5:4f:df:d3:09:07:32:8d:42:54:fe:c2:80:89:1a:36:
e9:72:53:d1:6a:a9:ef:dd:87:19:85:5e:99:4b:86:b5:41:34:
fc:bc:6e:0b:ed:71:7b:d5:89:3c:9f:3d:86:92:0d:8c:ac:16:
1e:70:2c:04:48:b4:e1:9e:be:22:76:2d:db:89:6a:bd:5d:3b:
a3:36:49:82:db:e5:ca:91:5e:37:5d:fc:20:92:e7:89:b7:92:
5c:00:cd:3c:d4:13:7e:68:17:65:96:72:53:fb:77:99:66:63:
f7:e9:6e:03:a5:66:ed:2a:06:22:c0:bc:72:e2:1e:5b:6c:fc:
57:c7:27:4e:3b:12:ef:11:9a:ad:7b:7a:ca:d9:35:ae:f1:a3:
59:35:35:b2:92:48:e9:53:8c:94:fa:aa:21:96:eb:60:3d:08:
62:bc:7a:88:71:1a:79:f4:ae:bc:a9:fe:59:03:bc:80:51:93:
83:ff:54:f5:cd:23:6e:9a:c8:e0:5d:13:2c:66:41:6b:49:7a:
4a:5d:99:f9:2d:0e:74:28:e8:63:65:f5:54:c4:47:97:db:01:
89:65:7d:09
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDIsNV0k4R1SpgzZxgg2UcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjYwOTIyMTAzNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODEzZTgwZGQ1MDdkZjQ3ZmI3NzZiMDU0MjMzNjEzYjk3MzQxOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY0EhLBqG1JvU/l1mcTyS2qw74kU
GQNUPeQOb8/z/pAigSorQvFYnGtCBPL51kaJb/pIE5wWfB0n0FnVpKmZUaMXETxA
hw5X2WllLm8TiF11BQyLX20vuPUqou+vrRaAotl1L0+/in3DtrHVM5JJtqzFILmE
VhgcFc+7oPco54HLId0Pl3xnODRvkwgooVGGR7S5x3ujsW0gxPINnMFaFgsrzrIs
/9OTvLoKfWw2zRBRP7fVLn0DDF0s1qFp9UAWiiBXBjJgCkn/IS+rt83g6KMr4Bpg
gxfp9zLmGvWIBhtaRRcFRtJqSp6DOckT3atkNSvVjWNtCyTxVfxt27TJZwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAgT6A3VB99H+3drBUIzYTuXNBnnMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvQ0JQb0RkVUgzMGY3ZDJzRlFqTmhPNWMwR2VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLggDAN
BgkqhkiG9w0BAQsFAAOCAQEAQ9kQevgbV5f6zU2PKy2cII7Z34pdtNLpYPqjLsXm
zkR2abNO/gelT9/TCQcyjUJU/sKAiRo26XJT0Wqp792HGYVemUuGtUE0/LxuC+1x
e9WJPJ89hpINjKwWHnAsBEi04Z6+InYt24lqvV07ozZJgtvlypFeN138IJLnibeS
XADNPNQTfmgXZZZyU/t3mWZj9+luA6Vm7SoGIsC8cuIeW2z8V8cnTjsS7xGarXt6
ytk1rvGjWTU1spJI6VOMlPqqIZbrYD0IYrx6iHEaefSuvKn+WQO8gFGTg/9U9c0j
bprI4F0TLGZBa0l6Sl2Z+S0OdCjoY2X1VMRHl9sBiWV9CQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:06 2026 by rpki-client