Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/1-z2fetIPu1VaV8GE36vNHvshYVw.roa
File: 1-z2fetIPu1VaV8GE36vNHvshYVw.roa (raw, json)
Hash identifier: nrP8RizGc9JlHyD3dZElD5Sw02Rg+wEMsPLi8FUzgis=
Subject key identifier: FB:3D:9F:7A:D2:0F:BB:55:5A:57:C1:84:DF:AB:CD:1E:FB:21:61:5C
Certificate issuer: /CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Certificate serial: 01A1C62E2A2A11D0E5DD9BFCBB41B13CC492
Authority key identifier: 27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/1-z2fetIPu1VaV8GE36vNHvshYVw.roa
Signing time: Tue 10 Nov 2026 15:57:56 +0000
ROA not before: Tue 10 Nov 2026 15:57:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205710
IP address blocks: 2a01:e901:107::/48 maxlen: 48
2a01:e901:117::/48 maxlen: 48
2a01:e901:127::/48 maxlen: 48
2a01:e901:137::/48 maxlen: 48
2a01:e901:147::/48 maxlen: 48
2a01:e901:157::/48 maxlen: 48
2a01:e901:167::/48 maxlen: 48
2a01:e901:177::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:2e:2a:2a:11:d0:e5:dd:9b:fc:bb:41:b1:3c:c4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Validity
Not Before: Nov 10 15:57:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb3d9f7ad20fbb555a57c184dfabcd1efb21615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:da:81:cd:cf:49:b6:72:d8:22:c4:05:4d:
c4:21:21:a4:c4:3e:c0:62:45:aa:c4:72:5c:c3:3e:
47:5c:a8:af:99:f1:7e:77:b2:f0:cd:ad:ef:b9:93:
84:5d:a7:b0:c9:3e:f6:10:01:f7:18:d7:69:7d:e2:
f7:c3:f1:5e:cb:6c:9d:26:cb:06:51:bd:18:38:79:
52:83:e9:53:0a:39:fe:55:c9:43:ab:e3:05:76:53:
1f:a3:d9:4b:0b:27:53:77:8e:db:2d:bf:27:2c:45:
c6:9e:10:a3:2e:ac:2d:f7:f5:61:00:e5:63:6e:34:
c8:4a:7f:6e:3d:59:5f:61:28:9a:88:28:7a:af:4d:
d0:12:cf:a0:33:a4:67:f0:5b:05:9f:e2:6b:17:bd:
ae:2c:e6:b0:23:cd:ab:36:b4:69:c2:60:35:59:0f:
be:0b:2e:ac:5f:3a:c8:2c:18:57:8a:7d:14:5c:78:
0d:84:bb:a6:74:9b:21:6c:0d:70:2f:90:e8:88:16:
36:a8:3d:11:91:35:36:bc:b9:e4:fa:fa:e8:8b:98:
aa:18:75:4e:cf:4f:3f:8e:17:81:90:9a:56:4f:b2:
be:87:17:83:23:99:d4:17:3a:a9:3b:dc:69:57:1d:
b7:06:82:5a:ce:04:34:ea:18:ab:0e:87:72:76:ed:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3D:9F:7A:D2:0F:BB:55:5A:57:C1:84:DF:AB:CD:1E:FB:21:61:5C
X509v3 Authority Key Identifier:
keyid:27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/1-z2fetIPu1VaV8GE36vNHvshYVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:107::/48
2a01:e901:117::/48
2a01:e901:127::/48
2a01:e901:137::/48
2a01:e901:147::/48
2a01:e901:157::/48
2a01:e901:167::/48
2a01:e901:177::/48
Signature Algorithm: sha256WithRSAEncryption
b2:a6:48:79:24:94:d2:5f:af:be:68:6b:ca:2e:21:5c:1c:9e:
57:23:9c:67:05:61:f0:4c:2e:44:d5:47:bd:a9:53:c2:45:ae:
8e:71:37:42:da:5e:52:78:12:fa:71:7a:b4:2b:81:b3:73:fb:
38:b8:b2:5e:e7:bd:cf:60:5f:fe:fe:5f:b2:9e:34:64:ab:c1:
41:e0:c0:8d:68:f8:d5:71:65:ce:8d:e0:22:9a:3b:de:08:21:
65:dd:53:23:f7:93:ed:70:da:94:7e:c6:f3:58:85:51:a1:5f:
e8:8e:6e:a2:a4:4e:b7:f9:81:39:02:ed:b5:b6:f9:96:1e:32:
ec:f6:71:40:91:db:eb:f4:cb:95:4e:f9:2f:bb:4d:16:25:92:
cd:94:f7:54:39:9d:21:d2:87:07:92:84:f9:d4:c4:7e:d8:8c:
a3:09:17:3f:29:df:c6:89:98:a8:66:4f:83:3d:eb:75:99:3c:
1c:f5:aa:96:7e:82:85:05:44:50:89:c5:25:66:7b:6c:47:b0:
a5:5f:85:9c:d9:40:c0:53:9c:9b:26:61:c1:46:27:91:97:af:
ae:85:af:81:48:c5:2a:fb:1f:d5:2a:1b:99:59:8b:bf:dc:93:
75:4c:73:dc:37:27:0d:09:9f:e5:53:14:63:1f:a0:03:fa:e1:
5f:35:84:bc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAaHGLioqEdDl3Zv8u0GxPMSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MGM0MmZkZWMyZTIyZTBkN2Q5YWVkMzUzYWI3ZWI3YTZj
ZjhkZDgwHhcNMjYxMTEwMTU1NzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjNkOWY3YWQyMGZiYjU1NWE1N2MxODRkZmFiY2QxZWZiMjE2MTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Pagc3PSbZy2CLEBU3EISGkxD7A
YkWqxHJcwz5HXKivmfF+d7Lwza3vuZOEXaewyT72EAH3GNdpfeL3w/Fey2ydJssG
Ub0YOHlSg+lTCjn+VclDq+MFdlMfo9lLCydTd47bLb8nLEXGnhCjLqwt9/VhAOVj
bjTISn9uPVlfYSiaiCh6r03QEs+gM6Rn8FsFn+JrF72uLOawI82rNrRpwmA1WQ++
Cy6sXzrILBhXin0UXHgNhLumdJshbA1wL5DoiBY2qD0RkTU2vLnk+vroi5iqGHVO
z08/jheBkJpWT7K+hxeDI5nUFzqpO9xpVx23BoJazgQ06hirDodydu18cwIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFPs9n3rSD7tVWlfBhN+rzR77IWFcMB8GA1UdIwQY
MBaAFCcMQv3sLiLg19mu01Orfremz43YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnd4Q19ld3VJdURYMmE3VFU2dC10NmJQamRnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNDlhMTctZmUzYi00ZjRmLTgxNDUt
OTJmNGJmYTdlMGI1LzEvMS16MmZldElQdTFWYVY4R0UzNnZOSHZzaFlWdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGYvZTQ5YTE3LWZlM2ItNGY0Zi04MTQ1LTkyZjRiZmE3ZTBi
NS8xL0p3eENfZXd1SXVEWDJhN1RVNnQtdDZiUGpkZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBhBggrBgEFBQcBBwEB/wRSMFAwTgQCAAIwSAMHACoB6QEB
BwMHACoB6QEBFwMHACoB6QEBJwMHACoB6QEBNwMHACoB6QEBRwMHACoB6QEBVwMH
ACoB6QEBZwMHACoB6QEBdzANBgkqhkiG9w0BAQsFAAOCAQEAsqZIeSSU0l+vvmhr
yi4hXByeVyOcZwVh8EwuRNVHvalTwkWujnE3QtpeUngS+nF6tCuBs3P7OLiyXue9
z2Bf/v5fsp40ZKvBQeDAjWj41XFlzo3gIpo73gghZd1TI/eT7XDalH7G81iFUaFf
6I5uoqROt/mBOQLttbb5lh4y7PZxQJHb6/TLlU75L7tNFiWSzZT3VDmdIdKHB5KE
+dTEftiMowkXPynfxomYqGZPgz3rdZk8HPWqln6ChQVEUInFJWZ7bEewpV+FnNlA
wFOcmyZhwUYnkZevroWvgUjFKvsf1SobmVmLv9yTdUxz3DcnDQmf5VMUYx+gA/rh
XzWEvA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:59:08 2026 by rpki-client