Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/k4v7NOTWjKRyaZtnPspqWpfDi_c.roa
File: k4v7NOTWjKRyaZtnPspqWpfDi_c.roa (raw, json)
Hash identifier: CWRF8EeIQt/IjcYCA1XZwtHZO61wzXfPONIqs+tm1uA=
Subject key identifier: 93:8B:FB:34:E4:D6:8C:A4:72:69:9B:67:3E:CA:6A:5A:97:C3:8B:F7
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A0C980A7C6391647D264E6717F8E04B09F
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/k4v7NOTWjKRyaZtnPspqWpfDi_c.roa
Signing time: Tue 22 Sep 2026 14:24:07 +0000
ROA not before: Tue 22 Sep 2026 14:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 2a11:69c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:80:a7:c6:39:16:47:d2:64:e6:71:7f:8e:04:b0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 22 14:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=938bfb34e4d68ca472699b673eca6a5a97c38bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:cb:94:6c:d8:d6:4e:21:c1:09:7a:13:9b:
9f:5a:2b:7f:d7:93:27:f5:96:76:76:2f:fd:1b:8e:
81:46:f7:3b:45:94:87:84:05:41:ae:ea:10:08:94:
74:83:b9:fb:e3:f3:e3:53:66:b3:70:28:0a:6e:7d:
3f:3c:86:78:fe:85:10:27:1a:0a:d9:79:3d:21:71:
c0:bf:3d:78:1b:11:6c:1b:c7:fc:96:21:1b:ac:d3:
9c:36:b5:22:3d:15:d2:7d:da:f4:71:3c:a4:d6:0e:
58:8a:0f:05:23:31:12:5a:2a:1f:cc:50:a9:03:a8:
71:cb:24:2a:82:89:80:af:e0:cf:dc:0f:9c:cf:fa:
6d:c2:a3:72:bb:0b:8f:71:b6:be:c0:78:4b:42:30:
a0:c2:ce:45:30:40:9c:9c:1e:3f:c0:da:ed:eb:3d:
a8:bd:71:bb:c1:2d:75:52:d1:52:b8:bb:75:d0:04:
8d:68:ff:27:8b:05:d5:76:dd:35:0e:d6:67:53:51:
38:e2:f7:22:dc:a9:8a:cd:21:3e:eb:c0:30:e9:49:
16:40:86:91:b9:ab:0c:d8:71:dd:ce:89:c5:9e:c2:
3b:46:7c:da:dc:be:2a:0b:6f:90:20:6e:e7:3d:9b:
51:39:e4:ca:22:d1:23:5b:ca:6b:79:fc:5b:73:bc:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:FB:34:E4:D6:8C:A4:72:69:9B:67:3E:CA:6A:5A:97:C3:8B:F7
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/k4v7NOTWjKRyaZtnPspqWpfDi_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:69c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:81:62:f7:a2:83:35:7b:26:67:ef:42:0d:20:3a:c7:ba:ff:
4d:51:07:43:eb:cc:b3:08:eb:00:a2:5c:ef:5a:bf:18:ba:27:
38:4a:1a:4b:1f:bb:50:3d:9a:61:fc:7f:e7:60:0e:02:42:f7:
44:d1:79:f7:99:e8:1c:5d:f3:bf:1d:b3:21:e1:2c:71:49:da:
e4:7e:66:6f:de:a8:0d:fc:b4:32:14:32:2f:66:f0:64:79:b4:
be:e2:21:39:4d:43:51:4a:36:a9:3b:aa:57:92:47:ed:5e:c1:
1d:49:44:f2:24:48:9f:bd:26:e5:5e:d4:28:9a:93:4b:f1:d3:
72:fe:26:8b:93:29:d2:6e:b2:2a:85:75:71:ab:fa:56:4c:94:
4d:e1:c9:c2:86:a9:a0:02:54:53:36:9d:63:99:99:eb:f3:9b:
98:4b:75:99:90:ab:7f:b9:62:30:f2:6f:d9:a5:52:9d:88:6d:
85:fc:41:33:19:fd:d2:1c:15:f1:33:42:d2:b4:cb:bd:65:8c:
ad:14:80:34:6c:55:41:55:be:f4:ad:53:c5:ce:b2:f2:08:f8:
e0:90:08:c2:03:41:6b:01:cf:b3:6b:59:d2:d8:ed:df:fa:3d:
89:b7:35:39:b1:66:a3:77:ab:13:8f:cf:17:c3:54:b2:62:9f:
71:05:3a:b6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDJgKfGORZH0mTmcX+OBLCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjYwOTIyMTQyNDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzhiZmIzNGU0ZDY4Y2E0NzI2OTliNjczZWNhNmE1YTk3YzM4YmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNzLlGzY1k4hwQl6E5ufWit/15Mn
9ZZ2di/9G46BRvc7RZSHhAVBruoQCJR0g7n74/PjU2azcCgKbn0/PIZ4/oUQJxoK
2Xk9IXHAvz14GxFsG8f8liEbrNOcNrUiPRXSfdr0cTyk1g5Yig8FIzESWiofzFCp
A6hxyyQqgomAr+DP3A+cz/ptwqNyuwuPcba+wHhLQjCgws5FMECcnB4/wNrt6z2o
vXG7wS11UtFSuLt10ASNaP8niwXVdt01DtZnU1E44vci3KmKzSE+68Aw6UkWQIaR
uasM2HHdzonFnsI7Rnza3L4qC2+QIG7nPZtROeTKItEjW8prefxbc7yaZwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJOL+zTk1oykcmmbZz7KalqXw4v3MB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvazR2N05PVFdqS1J5YVp0blBzcHFXcGZEaV9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFpwDAN
BgkqhkiG9w0BAQsFAAOCAQEAmIFi96KDNXsmZ+9CDSA6x7r/TVEHQ+vMswjrAKJc
71q/GLonOEoaSx+7UD2aYfx/52AOAkL3RNF595noHF3zvx2zIeEscUna5H5mb96o
Dfy0MhQyL2bwZHm0vuIhOU1DUUo2qTuqV5JH7V7BHUlE8iRIn70m5V7UKJqTS/HT
cv4mi5Mp0m6yKoV1cav6VkyUTeHJwoapoAJUUzadY5mZ6/ObmEt1mZCrf7liMPJv
2aVSnYhthfxBMxn90hwV8TNC0rTLvWWMrRSANGxVQVW+9K1Txc6y8gj44JAIwgNB
awHPs2tZ0tjt3/o9ibc1ObFmo3erE4/PF8NUsmKfcQU6tg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:08 2026 by rpki-client