Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/p1HhV_xExOgF_LW43FQ2o3eSKCw.roa
File: p1HhV_xExOgF_LW43FQ2o3eSKCw.roa (raw, json)
Hash identifier: EeJPVb/oMvTuXI5wGaDjHDOoSEBzaJvAr0PnvP4ZgTA=
Subject key identifier: A7:51:E1:57:FC:44:C4:E8:05:FC:B5:B8:DC:54:36:A3:77:92:28:2C
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 01A0CD919C70808150B0EED40AEAB93FE020
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/p1HhV_xExOgF_LW43FQ2o3eSKCw.roa
Signing time: Wed 23 Sep 2026 09:21:07 +0000
ROA not before: Wed 23 Sep 2026 09:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215434
IP address blocks: 2a01:f340::/32 maxlen: 32
2a01:f341::/32 maxlen: 32
2a01:f342::/32 maxlen: 32
2a01:f343::/32 maxlen: 32
2a01:f344::/32 maxlen: 32
2a01:f345::/32 maxlen: 32
2a01:f346::/32 maxlen: 32
2a01:f347::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:91:9c:70:80:81:50:b0:ee:d4:0a:ea:b9:3f:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Sep 23 09:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a751e157fc44c4e805fcb5b8dc5436a37792282c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:a9:5d:ea:81:72:8a:ff:7d:e0:93:49:2c:
54:9a:21:63:ca:7c:15:71:aa:9f:4c:f6:90:c3:bc:
e9:f5:b3:96:08:02:08:f0:2c:c7:89:d0:89:c0:e1:
4b:87:ea:6e:3a:29:5e:df:3c:92:e7:ef:29:96:a0:
8a:65:58:7e:3d:e4:e5:d2:bc:58:0e:f9:80:32:24:
72:6b:98:36:c2:c1:34:97:3c:42:31:b2:99:84:46:
09:1b:d8:08:d8:30:23:bc:92:ea:af:b5:61:0b:1d:
ad:42:3a:4d:79:58:2b:ce:32:80:29:71:47:1b:f3:
c5:c1:60:0e:77:57:a7:da:ae:3c:71:ab:94:cb:aa:
4e:41:91:8d:82:f8:d4:4a:e2:10:0f:2c:a7:86:c5:
bc:75:c5:94:28:88:8b:96:10:16:28:25:89:af:19:
39:96:64:ee:a7:59:f7:1e:a3:ef:78:b6:26:a6:29:
61:e1:8d:c5:b5:66:43:89:eb:09:90:6c:e2:45:40:
22:65:54:06:1f:56:11:3e:2b:24:8c:00:ae:ea:df:
57:87:fc:eb:d4:f3:3f:68:46:de:14:60:c3:1f:b5:
9a:c4:11:bd:74:7a:55:5c:ed:29:cf:65:cc:ac:a1:
e0:18:84:93:dd:0c:39:37:02:30:d6:b9:2f:1f:bf:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:51:E1:57:FC:44:C4:E8:05:FC:B5:B8:DC:54:36:A3:77:92:28:2C
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/p1HhV_xExOgF_LW43FQ2o3eSKCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f340::/29
Signature Algorithm: sha256WithRSAEncryption
11:52:dd:5f:38:01:0e:26:7a:bc:a4:e5:77:ca:e2:ad:37:49:
2b:7e:3f:e7:37:4a:18:86:b6:56:d8:6d:47:92:f5:66:60:d2:
15:90:7f:ae:19:0f:f8:30:fc:58:b1:04:15:40:dd:c6:12:88:
9f:15:a1:9c:f5:a2:0e:9e:7a:65:c2:f1:76:d6:1c:c3:3d:e3:
53:25:f0:b0:94:61:9d:8c:eb:56:8c:ac:5a:3b:79:53:17:d4:
b3:ce:bf:b2:13:79:ad:b0:78:30:ae:26:ef:d4:5b:5b:b3:9d:
1c:ea:32:fe:8f:02:a6:77:8c:15:56:0d:eb:8d:9b:8e:40:32:
01:53:85:eb:af:a2:1f:6e:32:cc:79:47:b8:bb:a7:e2:9f:d0:
20:4f:86:c8:bb:db:7b:3b:c1:1f:61:3b:b2:f8:07:99:66:46:
a1:4c:39:05:56:a6:0a:b6:f9:3c:03:5b:0e:ae:ca:2f:36:be:
0b:b2:fb:46:a1:dd:ac:97:cb:f4:b0:03:9d:f3:f8:8c:55:99:
de:7c:d6:65:b5:28:15:29:77:0d:6b:16:da:01:90:f0:8e:d6:
a8:2e:93:a9:85:87:c2:42:43:fe:1b:17:60:03:4b:15:38:b8:
cc:ea:2f:57:57:37:34:51:73:04:66:7b:99:cf:13:9e:86:21:
d5:15:65:b4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDNkZxwgIFQsO7UCuq5P+AgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjY5YzBjMDg1Y2M5NzhhMzcyYTBlNGYwNTY0ODM5OGUx
ZTdmZTgwHhcNMjYwOTIzMDkyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzUxZTE1N2ZjNDRjNGU4MDVmY2I1YjhkYzU0MzZhMzc3OTIyODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HKpXeqBcor/feCTSSxUmiFjynwV
caqfTPaQw7zp9bOWCAII8CzHidCJwOFLh+puOile3zyS5+8plqCKZVh+PeTl0rxY
DvmAMiRya5g2wsE0lzxCMbKZhEYJG9gI2DAjvJLqr7VhCx2tQjpNeVgrzjKAKXFH
G/PFwWAOd1en2q48cauUy6pOQZGNgvjUSuIQDyynhsW8dcWUKIiLlhAWKCWJrxk5
lmTup1n3HqPveLYmpilh4Y3FtWZDiesJkGziRUAiZVQGH1YRPiskjACu6t9Xh/zr
1PM/aEbeFGDDH7WaxBG9dHpVXO0pz2XMrKHgGIST3Qw5NwIw1rkvH7/GVQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKdR4Vf8RMToBfy1uNxUNqN3kigsMB8GA1UdIwQY
MBaAFBNmnAwIXMl4o3Kg5PBWSDmOHn/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEt
NTNiMDQzNDI3ODNkLzEvcDFIaFZfeEV4T2dGX0xXNDNGUTJvM2VTS0N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEtNTNiMDQzNDI3ODNk
LzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHzQDAN
BgkqhkiG9w0BAQsFAAOCAQEAEVLdXzgBDiZ6vKTld8rirTdJK34/5zdKGIa2Vtht
R5L1ZmDSFZB/rhkP+DD8WLEEFUDdxhKInxWhnPWiDp56ZcLxdtYcwz3jUyXwsJRh
nYzrVoysWjt5UxfUs86/shN5rbB4MK4m79RbW7OdHOoy/o8CpneMFVYN642bjkAy
AVOF66+iH24yzHlHuLun4p/QIE+GyLvbezvBH2E7svgHmWZGoUw5BVamCrb5PANb
Dq7KLza+C7L7RqHdrJfL9LADnfP4jFWZ3nzWZbUoFSl3DWsW2gGQ8I7WqC6TqYWH
wkJD/hsXYANLFTi4zOovV1c3NFFzBGZ7mc8TnoYh1RVltA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:58 2026 by rpki-client