Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/v3tdUAJsUaJo7LGTVWw6rDruSvc.roa
File: v3tdUAJsUaJo7LGTVWw6rDruSvc.roa (raw, json)
Hash identifier: JkCFfO0fYGgVWbmwj7vVnIlee+Xmb7TFcFsfWBDN668=
Subject key identifier: BF:7B:5D:50:02:6C:51:A2:68:EC:B1:93:55:6C:3A:AC:3A:EE:4A:F7
Certificate issuer: /CN=1dd948535128826a76bff708dd171887464f761d
Certificate serial: 019F236930D2A71DA851711054AA6FD40BB8
Authority key identifier: 1D:D9:48:53:51:28:82:6A:76:BF:F7:08:DD:17:18:87:46:4F:76:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/v3tdUAJsUaJo7LGTVWw6rDruSvc.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51923
IP address blocks: 2a01:1b0:c000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:30:d2:a7:1d:a8:51:71:10:54:aa:6f:d4:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd948535128826a76bff708dd171887464f761d
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf7b5d50026c51a268ecb193556c3aac3aee4af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:80:be:11:9e:e2:ec:1e:18:91:99:3b:a4:
95:d5:e6:1b:3e:ca:79:71:e0:4c:69:2c:20:b1:37:
fc:bd:32:a4:d6:22:66:94:50:73:d8:6f:3b:d4:bf:
f7:91:f8:7e:47:0e:d1:a2:b9:c2:0f:24:9f:57:04:
b2:96:07:d2:d9:eb:a8:81:78:8e:25:dd:c2:21:a0:
d0:64:3e:12:68:a4:5b:d4:8c:31:a6:ea:34:21:94:
81:97:31:88:f4:35:49:0c:5e:e5:7d:4f:9e:b8:b5:
ad:92:f8:99:46:01:0a:b3:87:8e:c5:e5:82:b3:bd:
b7:85:f0:dc:03:05:5d:64:e6:ac:e9:14:82:39:f3:
99:be:33:b9:d1:fa:ca:bd:43:c2:3f:d5:c9:6c:09:
d1:58:f0:f2:57:0c:49:20:82:cc:2d:1e:c0:59:3b:
22:e5:f9:1d:a4:42:92:d1:44:15:71:96:c7:6e:a0:
13:60:30:38:04:c0:10:4c:23:fa:f4:43:0c:a5:36:
10:8e:6b:c3:a4:1e:18:4b:4e:14:14:43:34:38:0f:
6b:2a:48:61:d9:31:c4:e1:fc:51:24:18:e6:fa:1e:
e8:92:2b:49:76:54:99:f5:06:f0:ca:ca:44:64:5a:
6a:24:04:55:e6:5b:54:64:a9:89:62:7d:cc:0a:f1:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7B:5D:50:02:6C:51:A2:68:EC:B1:93:55:6C:3A:AC:3A:EE:4A:F7
X509v3 Authority Key Identifier:
keyid:1D:D9:48:53:51:28:82:6A:76:BF:F7:08:DD:17:18:87:46:4F:76:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/v3tdUAJsUaJo7LGTVWw6rDruSvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:1b0:c000::/44
Signature Algorithm: sha256WithRSAEncryption
9f:12:49:db:15:cc:1b:51:ac:8c:9c:fe:31:85:db:ef:dc:9e:
e2:d6:c4:b0:94:6a:e1:d3:f4:61:3c:49:ac:88:2f:6e:3d:51:
20:c6:78:51:d2:0c:ec:e7:a7:fd:89:88:be:e5:94:64:d2:51:
75:e2:d3:96:f9:0d:e6:b3:f4:c5:89:b5:ff:04:24:af:94:72:
de:3d:e8:39:3f:0d:ae:07:f0:9c:32:50:16:ca:82:1b:f4:20:
dd:e0:90:65:78:7a:58:76:ed:16:ae:78:dd:88:57:39:36:33:
e7:5a:dc:61:6a:fa:34:d5:86:2d:7d:4b:73:e2:8b:1c:33:da:
28:45:28:01:01:76:83:ef:d0:be:a3:53:94:b2:1a:15:e0:5c:
71:b1:72:0f:01:e1:78:50:8d:d9:22:de:17:46:e2:51:77:54:
c5:5f:b9:f8:32:af:44:49:1e:1a:53:a4:f8:2e:f0:27:4f:26:
24:0e:82:bc:06:df:2a:13:b7:c9:ab:0f:f1:f3:74:3f:26:a6:
10:67:1a:66:73:c6:ee:d8:ce:d6:57:75:11:f4:db:6a:2e:d9:
ec:58:ee:cf:13:09:6c:35:d0:6c:2f:b3:c8:e1:f6:df:f1:9c:
e1:32:1c:20:3f:0e:92:cc:63:02:49:88:63:e5:15:17:8f:0a:
eb:1d:d4:96
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaTDSpx2oUXEQVKpv1Au4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDk0ODUzNTEyODgyNmE3NmJmZjcwOGRkMTcxODg3NDY0
Zjc2MWQwHhcNMjYwNzAyMTUxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjdiNWQ1MDAyNmM1MWEyNjhlY2IxOTM1NTZjM2FhYzNhZWU0YWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3qAvhGe4uweGJGZO6SV1eYbPsp5
ceBMaSwgsTf8vTKk1iJmlFBz2G871L/3kfh+Rw7RornCDySfVwSylgfS2euogXiO
Jd3CIaDQZD4SaKRb1Iwxpuo0IZSBlzGI9DVJDF7lfU+euLWtkviZRgEKs4eOxeWC
s723hfDcAwVdZOas6RSCOfOZvjO50frKvUPCP9XJbAnRWPDyVwxJIILMLR7AWTsi
5fkdpEKS0UQVcZbHbqATYDA4BMAQTCP69EMMpTYQjmvDpB4YS04UFEM0OA9rKkhh
2THE4fxRJBjm+h7okitJdlSZ9QbwyspEZFpqJARV5ltUZKmJYn3MCvE1HwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL97XVACbFGiaOyxk1VsOqw67kr3MB8GA1UdIwQY
MBaAFB3ZSFNRKIJqdr/3CN0XGIdGT3YdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRsSVUxRW9nbXAydl9jSTNSY1loMFpQZGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUt
MjYxNjY2YzNhNTg5LzEvdjN0ZFVBSnNVYUpvN0xHVFZXdzZyRHJ1U3ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUtMjYxNjY2YzNhNTg5
LzEvSGRsSVUxRW9nbXAydl9jSTNSY1loMFpQZGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgEBsMAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCfEknbFcwbUayMnP4xhdvv3J7i1sSwlGrh0/Rh
PEmsiC9uPVEgxnhR0gzs56f9iYi+5ZRk0lF14tOW+Q3ms/TFibX/BCSvlHLePeg5
Pw2uB/CcMlAWyoIb9CDd4JBleHpYdu0WrnjdiFc5NjPnWtxhavo01YYtfUtz4osc
M9ooRSgBAXaD79C+o1OUshoV4FxxsXIPAeF4UI3ZIt4XRuJRd1TFX7n4Mq9ESR4a
U6T4LvAnTyYkDoK8Bt8qE7fJqw/x83Q/JqYQZxpmc8bu2M7WV3UR9NtqLtnsWO7P
EwlsNdBsL7PI4fbf8ZzhMhwgPw6SzGMCSYhj5RUXjwrrHdSW
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:07 2026 by rpki-client