Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/SOXbFVybGJS2gJEA1qIMVgTW7BU.roa
File: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (raw, json)
Hash identifier: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=
Subject key identifier: 48:E5:DB:15:5C:9B:18:94:B6:80:91:00:D6:A2:0C:56:04:D6:EC:15
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 019F23AFAF333476408EAEF4741FA58419CC
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/SOXbFVybGJS2gJEA1qIMVgTW7BU.roa
Signing time: Thu 02 Jul 2026 16:35:43 +0000
ROA not before: Thu 02 Jul 2026 16:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219359
IP address blocks: 2a05:541:129::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:af:af:33:34:76:40:8e:ae:f4:74:1f:a5:84:19:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Jul 2 16:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48e5db155c9b1894b6809100d6a20c5604d6ec15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:8f:6c:11:ea:95:7a:e9:04:e4:e1:ef:15:
3d:0f:70:ed:93:a2:40:80:d8:a1:d0:bd:29:08:98:
a2:a1:42:a8:aa:0b:69:e8:fd:fa:25:1c:51:16:61:
a7:5b:0c:a4:3a:db:05:60:0d:3c:2f:09:a1:9d:65:
51:84:be:0a:77:5a:e0:70:5e:1d:63:19:e8:ad:5b:
ed:7e:44:aa:d0:fa:0f:ed:78:3a:58:32:f0:3b:63:
91:99:fb:45:cc:3e:1d:85:4a:cf:23:f3:03:8f:31:
61:e1:86:55:dd:e5:ec:19:dc:41:61:eb:50:1d:12:
7b:8c:95:1c:e6:92:2a:2b:ec:0c:4b:e4:58:95:ef:
4e:60:79:b1:af:ae:46:03:00:fc:2d:65:6d:3e:56:
81:ab:97:b5:42:64:5f:6d:90:7d:c6:b2:d1:a9:33:
17:74:78:18:6d:49:81:38:18:0c:5a:d5:e7:0b:e8:
e8:03:73:fd:07:bc:08:42:5c:18:43:7f:c7:71:5a:
85:0b:8d:3c:5c:12:a6:07:ae:fd:2f:04:a5:b2:49:
9a:59:20:bb:81:11:7a:1c:77:ae:ef:ad:60:e5:11:
6c:14:ca:fe:03:38:36:cd:f5:4e:e5:cb:c6:d2:38:
90:b8:b8:56:0b:36:ed:e2:28:12:af:78:32:21:2a:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E5:DB:15:5C:9B:18:94:B6:80:91:00:D6:A2:0C:56:04:D6:EC:15
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/SOXbFVybGJS2gJEA1qIMVgTW7BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:541:129::/48
Signature Algorithm: sha256WithRSAEncryption
14:81:d3:b8:42:5d:e9:25:ad:f9:6e:0b:65:8a:f0:32:06:fe:
e4:dd:08:08:30:c1:cb:07:fd:eb:c0:ec:96:db:a9:5f:3e:e4:
7c:b5:91:ec:e7:ad:86:8c:a4:9d:0c:48:5c:4f:1e:28:f3:5b:
be:0a:a5:5c:58:d3:55:7b:02:8e:9f:5a:04:10:1e:23:eb:51:
26:c3:d4:36:51:8f:a9:f5:5f:99:8a:e4:3b:b6:db:8c:4a:cf:
77:33:18:58:3f:1a:54:91:54:15:ef:54:ab:a1:d3:58:c7:d2:
ef:ce:2a:89:3a:ac:35:0a:e2:cc:4b:46:0f:42:7f:28:8d:7f:
62:24:97:cf:a9:7f:6c:5e:83:7f:36:a1:06:f7:9a:5b:10:60:
24:83:0a:43:8f:d5:43:37:a8:85:d0:93:98:b6:a0:57:f4:0d:
a3:6e:87:16:e8:76:dd:cf:32:ce:d3:76:7a:fc:8e:96:2e:1a:
40:bb:e4:c0:51:73:1f:63:39:c7:ef:8a:52:94:44:bb:8c:39:
e7:f8:4a:dd:2c:61:96:1f:fd:f5:3a:35:41:aa:4f:ce:3b:4e:
65:d8:e9:58:64:8c:9e:71:a3:d2:43:d6:a0:24:ec:d5:a4:36:
c9:57:d8:4c:d4:2f:64:9b:1c:8c:36:ea:df:c4:cd:cb:d6:c6:
9b:30:6a:63
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jr68zNHZAjq70dB+lhBnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk
YzY2ZjcwHhcNMjYwNzAyMTYzNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGU1ZGIxNTVjOWIxODk0YjY4MDkxMDBkNmEyMGM1NjA0ZDZlYzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlmPbBHqlXrpBOTh7xU9D3Dtk6JA
gNih0L0pCJiioUKoqgtp6P36JRxRFmGnWwykOtsFYA08LwmhnWVRhL4Kd1rgcF4d
YxnorVvtfkSq0PoP7Xg6WDLwO2ORmftFzD4dhUrPI/MDjzFh4YZV3eXsGdxBYetQ
HRJ7jJUc5pIqK+wMS+RYle9OYHmxr65GAwD8LWVtPlaBq5e1QmRfbZB9xrLRqTMX
dHgYbUmBOBgMWtXnC+joA3P9B7wIQlwYQ3/HcVqFC408XBKmB679LwSlskmaWSC7
gRF6HHeu761g5RFsFMr+Azg2zfVO5cvG0jiQuLhWCzbt4igSr3gyISqMbwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEjl2xVcmxiUtoCRANaiDFYE1uwVMB8GA1UdIwQY
MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt
YmE0ZmMyMzQ2ODNlLzEvU09YYkZWeWJHSlMyZ0pFQTFxSU1WZ1RXN0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl
LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgUFQQEp
MA0GCSqGSIb3DQEBCwUAA4IBAQAUgdO4Ql3pJa35bgtlivAyBv7k3QgIMMHLB/3r
wOyW26lfPuR8tZHs562GjKSdDEhcTx4o81u+CqVcWNNVewKOn1oEEB4j61Emw9Q2
UY+p9V+ZiuQ7ttuMSs93MxhYPxpUkVQV71SrodNYx9LvziqJOqw1CuLMS0YPQn8o
jX9iJJfPqX9sXoN/NqEG95pbEGAkgwpDj9VDN6iF0JOYtqBX9A2jbocW6HbdzzLO
03Z6/I6WLhpAu+TAUXMfYznH74pSlES7jDnn+ErdLGGWH/31OjVBqk/OO05l2OlY
ZIyecaPSQ9agJOzVpDbJV9hM1C9kmxyMNurfxM3L1sabMGpj
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:40 2026 by rpki-client