Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/uoNpQh4ifZ34O19c1R5qUVlogEE.roa
File: uoNpQh4ifZ34O19c1R5qUVlogEE.roa (raw, json)
Hash identifier: gHKmqmMiLwnyxP87W/6N6XbUpWy1lA1P9JZgvRaP+3U=
Subject key identifier: BA:83:69:42:1E:22:7D:9D:F8:3B:5F:5C:D5:1E:6A:51:59:68:80:41
Certificate issuer: /CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Certificate serial: 019F23694A6354A1A5C2960D7C94E5ACA859
Authority key identifier: D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/uoNpQh4ifZ34O19c1R5qUVlogEE.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57166
IP address blocks: 2001:678:918::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4a:63:54:a1:a5:c2:96:0d:7c:94:e5:ac:a8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba8369421e227d9df83b5f5cd51e6a5159688041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:cd:9f:7f:6d:e5:11:8a:71:9b:63:b3:e0:
6c:92:8d:83:56:1c:87:22:c8:e4:14:f4:93:f6:85:
a6:cf:ca:a3:2c:7c:f7:9b:84:f8:30:84:ca:c3:bc:
a6:58:03:cc:ac:62:49:70:68:21:fb:8c:80:11:76:
8f:1e:af:77:28:e0:53:b3:73:57:47:f5:26:bd:5b:
6f:8e:32:42:0e:40:b1:35:f9:64:b3:da:e7:da:cf:
fa:98:84:c5:45:5b:99:b4:5c:ca:2e:e1:c6:ed:f0:
60:70:06:79:ce:de:f9:87:4e:bb:a9:c6:b5:09:98:
e5:99:70:29:60:00:13:82:ed:69:85:8b:d0:43:ca:
e8:e1:70:d0:92:e6:af:6e:e3:71:e4:99:0c:65:4f:
0a:b0:d3:37:03:5f:8c:4f:08:de:25:2f:8c:50:16:
a0:e4:0d:b0:66:ed:91:6d:f2:c7:76:d6:3b:f4:c2:
a0:1a:2c:bf:12:02:3a:3a:fc:85:88:04:a3:3f:68:
6b:86:d8:b7:97:00:87:a3:6e:5f:45:78:be:1a:6b:
51:84:26:72:34:29:1d:95:48:e0:07:ec:21:a1:58:
1a:45:93:de:e7:54:5b:05:15:68:1b:d1:fe:b2:5f:
6c:4f:59:69:f5:41:4b:13:12:cd:10:67:ba:4c:47:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:83:69:42:1E:22:7D:9D:F8:3B:5F:5C:D5:1E:6A:51:59:68:80:41
X509v3 Authority Key Identifier:
keyid:D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/uoNpQh4ifZ34O19c1R5qUVlogEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:918::/48
Signature Algorithm: sha256WithRSAEncryption
4a:78:0f:c8:7d:c7:c9:3f:be:f0:59:88:4f:33:a9:85:f3:0e:
e7:f0:4f:92:0f:14:00:e0:1c:83:17:30:ef:ef:89:36:5f:e9:
35:77:21:89:0c:b5:20:96:08:22:17:e9:33:1f:af:1d:62:5d:
cd:dc:f9:93:53:05:bd:2b:63:9d:be:42:7a:ae:3c:38:19:e7:
05:ba:9a:6f:86:7c:81:fe:3b:51:1d:80:48:56:cd:94:0e:d4:
79:e1:8c:a9:db:5f:4c:74:e8:13:97:a0:e1:a4:2b:20:c7:d5:
10:c3:c5:d5:ad:ef:e9:e0:11:2f:f1:c0:57:ec:1f:1d:95:a2:
84:fe:d6:ce:a0:b3:ff:5c:8b:68:10:7b:18:69:ca:57:ab:20:
a6:4e:cd:10:6f:7a:9b:54:a7:26:5f:01:40:58:ab:15:1b:03:
09:e0:f2:f8:2a:36:be:8b:01:e0:bc:8e:48:fb:08:56:34:a6:
5a:7b:f0:be:bb:ac:e8:c0:b8:80:b3:2e:84:e7:ea:f4:a6:11:
49:34:fb:37:dd:bb:c7:d6:bc:8c:d7:02:44:b1:b1:da:67:80:
bf:c2:65:b3:ff:c4:0c:a6:67:18:81:fb:bb:28:af:84:96:c5:
6b:00:86:7e:ae:6e:82:53:5f:4d:60:a3:d4:eb:4a:b2:da:c9:
1d:b0:20:24
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaUpjVKGlwpYNfJTlrKhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTdjYTBkNmRiZjIxNmY5NGIwNTliODkxOTc2MDk4NThk
YzcyNTcwHhcNMjYwNzAyMTUxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTgzNjk0MjFlMjI3ZDlkZjgzYjVmNWNkNTFlNmE1MTU5Njg4MDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjzNn39t5RGKcZtjs+Bsko2DVhyH
IsjkFPST9oWmz8qjLHz3m4T4MITKw7ymWAPMrGJJcGgh+4yAEXaPHq93KOBTs3NX
R/UmvVtvjjJCDkCxNflks9rn2s/6mITFRVuZtFzKLuHG7fBgcAZ5zt75h067qca1
CZjlmXApYAATgu1phYvQQ8ro4XDQkuavbuNx5JkMZU8KsNM3A1+MTwjeJS+MUBag
5A2wZu2RbfLHdtY79MKgGiy/EgI6OvyFiASjP2hrhti3lwCHo25fRXi+GmtRhCZy
NCkdlUjgB+whoVgaRZPe51RbBRVoG9H+sl9sT1lp9UFLExLNEGe6TEeEsQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLqDaUIeIn2d+DtfXNUealFZaIBBMB8GA1UdIwQY
MBaAFNSnyg1tvyFvlLBZuJGXYJhY3HJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtmS0RXMl9JVy1Vc0ZtNGtaZGdtRmpjY2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDct
OTExNjBiYjRjNjU5LzEvdW9OcFFoNGlmWjM0TzE5YzFSNXFVVmxvZ0VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDctOTExNjBiYjRjNjU5
LzEvMUtmS0RXMl9JVy1Vc0ZtNGtaZGdtRmpjY2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAkY
MA0GCSqGSIb3DQEBCwUAA4IBAQBKeA/IfcfJP77wWYhPM6mF8w7n8E+SDxQA4ByD
FzDv74k2X+k1dyGJDLUglggiF+kzH68dYl3N3PmTUwW9K2OdvkJ6rjw4GecFuppv
hnyB/jtRHYBIVs2UDtR54Yyp219MdOgTl6DhpCsgx9UQw8XVre/p4BEv8cBX7B8d
laKE/tbOoLP/XItoEHsYacpXqyCmTs0Qb3qbVKcmXwFAWKsVGwMJ4PL4Kja+iwHg
vI5I+whWNKZae/C+u6zowLiAsy6E5+r0phFJNPs33bvH1ryM1wJEsbHaZ4C/wmWz
/8QMpmcYgfu7KK+ElsVrAIZ+rm6CU19NYKPU60qy2skdsCAk
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:30 2026 by rpki-client