Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/If6LZrm-wB-hhB9C0yFPZo9tbQQ.roa
File: If6LZrm-wB-hhB9C0yFPZo9tbQQ.roa (raw, json)
Hash identifier: 4babYaLwms6qTMqkJHs8CX9HE0O90ttnDzXi+y/MYEE=
Subject key identifier: 21:FE:8B:66:B9:BE:C0:1F:A1:84:1F:42:D3:21:4F:66:8F:6D:6D:04
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A0C97C1432F22FA69521579900037B866A
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/If6LZrm-wB-hhB9C0yFPZo9tbQQ.roa
Signing time: Tue 22 Sep 2026 14:19:07 +0000
ROA not before: Tue 22 Sep 2026 14:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402664
IP address blocks: 2a02:ffc0::/29 maxlen: 29
2a11:4940::/29 maxlen: 29
2a12:bf00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:7c:14:32:f2:2f:a6:95:21:57:99:00:03:7b:86:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 22 14:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21fe8b66b9bec01fa1841f42d3214f668f6d6d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:53:94:df:f2:f0:bf:c1:2f:bd:d1:72:33:
b9:71:3a:5d:5c:79:d0:86:23:7e:b5:b6:d6:89:34:
91:c8:f7:47:8a:a3:1b:01:25:fd:79:12:4f:7d:ea:
7c:4c:e1:09:00:34:92:4d:ba:b8:01:7b:5c:e5:5c:
5a:54:4b:dc:a2:c5:4e:92:cb:a4:0f:92:61:92:2d:
63:d1:26:3e:d1:20:c4:6b:c5:5b:87:0c:9f:ef:d0:
67:34:0e:ae:cc:8e:3c:35:7e:1b:5b:98:57:7f:3a:
00:b7:c2:b4:e8:f9:87:89:ca:7c:1a:ca:54:47:46:
0f:6c:7e:ce:54:22:9a:1f:19:1f:35:98:88:a6:53:
b5:4c:80:5f:08:23:e3:a9:a4:da:1d:7e:51:20:ef:
95:e3:2c:c6:3a:d0:02:94:d4:eb:c1:2c:36:a9:bc:
f4:c7:28:86:97:ad:ef:f5:fd:65:59:9c:f6:62:a6:
e7:89:72:b7:af:35:60:f6:5e:44:80:fd:ca:10:49:
cf:2a:4a:dc:8e:93:fc:80:d2:db:19:09:f9:e2:91:
1a:ed:51:45:ae:db:0b:f7:27:70:ad:3e:b1:9c:ad:
db:0d:91:e5:3e:ee:b2:8c:ef:58:f6:61:52:36:2a:
84:f7:8f:84:bc:50:b9:31:ce:47:32:18:c8:dd:07:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:8B:66:B9:BE:C0:1F:A1:84:1F:42:D3:21:4F:66:8F:6D:6D:04
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/If6LZrm-wB-hhB9C0yFPZo9tbQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ffc0::/29
2a11:4940::/29
2a12:bf00::/29
Signature Algorithm: sha256WithRSAEncryption
d2:a2:20:7e:6e:7a:69:5f:dc:b5:2f:c1:66:87:ba:f4:d8:11:
95:9e:e3:97:22:35:2a:8d:1a:d9:5c:d9:cc:3e:19:4a:86:a0:
1f:88:c1:63:89:7a:2a:58:b9:0c:dc:48:03:04:2d:79:7a:ec:
80:b6:ca:c3:82:bb:80:0c:a1:82:1f:73:d5:ee:c8:fc:9f:ce:
40:16:73:48:e1:02:1b:bf:ed:11:0a:eb:41:bc:b1:89:69:06:
f8:ea:02:ba:f5:4e:b2:b0:b2:e8:e0:1f:42:1d:1d:54:c3:04:
e4:87:a5:21:34:29:3a:0b:93:10:88:8c:03:5a:68:e2:fb:25:
42:99:e2:2b:ca:b0:27:e6:c9:9f:35:b8:79:b2:9c:5b:7d:b0:
d5:a2:b4:c2:8e:66:4b:27:db:44:56:6a:a7:a6:e2:cd:aa:00:
46:7d:40:b7:97:18:c2:00:f6:bc:05:98:1d:8b:f2:d0:ce:93:
fc:3d:16:fa:bd:26:f9:af:5d:2c:2b:43:60:ff:70:38:76:0d:
3b:b5:2c:a9:dc:ba:46:3a:6d:91:3b:09:35:39:56:1e:07:4a:
42:84:40:60:4f:66:92:7d:7b:49:ef:ac:ed:6c:ba:29:c1:7b:
c8:d8:83:ee:45:e9:2d:e9:11:c1:23:90:a6:ea:70:37:48:4d:
d3:5e:30:56
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaDJfBQy8i+mlSFXmQADe4ZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjYwOTIyMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWZlOGI2NmI5YmVjMDFmYTE4NDFmNDJkMzIxNGY2NjhmNmQ2ZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUNTlN/y8L/BL73RcjO5cTpdXHnQ
hiN+tbbWiTSRyPdHiqMbASX9eRJPfep8TOEJADSSTbq4AXtc5VxaVEvcosVOksuk
D5Jhki1j0SY+0SDEa8Vbhwyf79BnNA6uzI48NX4bW5hXfzoAt8K06PmHicp8GspU
R0YPbH7OVCKaHxkfNZiIplO1TIBfCCPjqaTaHX5RIO+V4yzGOtAClNTrwSw2qbz0
xyiGl63v9f1lWZz2YqbniXK3rzVg9l5EgP3KEEnPKkrcjpP8gNLbGQn54pEa7VFF
rtsL9ydwrT6xnK3bDZHlPu6yjO9Y9mFSNiqE94+EvFC5Mc5HMhjI3QfskwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCH+i2a5vsAfoYQfQtMhT2aPbW0EMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvSWY2TFpybS13Qi1oaEI5QzB5RlBabzl0YlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgL/wAMF
AyoRSUADBQMqEr8AMA0GCSqGSIb3DQEBCwUAA4IBAQDSoiB+bnppX9y1L8Fmh7r0
2BGVnuOXIjUqjRrZXNnMPhlKhqAfiMFjiXoqWLkM3EgDBC15euyAtsrDgruADKGC
H3PV7sj8n85AFnNI4QIbv+0RCutBvLGJaQb46gK69U6ysLLo4B9CHR1UwwTkh6Uh
NCk6C5MQiIwDWmji+yVCmeIryrAn5smfNbh5spxbfbDVorTCjmZLJ9tEVmqnpuLN
qgBGfUC3lxjCAPa8BZgdi/LQzpP8PRb6vSb5r10sK0Ng/3A4dg07tSyp3LpGOm2R
Owk1OVYeB0pChEBgT2aSfXtJ76ztbLopwXvI2IPuRekt6RHBI5Cm6nA3SE3TXjBW
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:54:43 2026 by rpki-client