Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RowVnJJK69T5V5Q-Ese-VqcF7AA.roa
File: RowVnJJK69T5V5Q-Ese-VqcF7AA.roa (raw, json)
Hash identifier: +bhABjT6YT0ZNQMUhR7/c/LtNsQmcle0lzFEgs8LXvA=
Subject key identifier: 46:8C:15:9C:92:4A:EB:D4:F9:57:94:3E:12:C7:BE:56:A7:05:EC:00
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0CA4EAA3084E37C0F1F5630EF08D9A9A9
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RowVnJJK69T5V5Q-Ese-VqcF7AA.roa
Signing time: Tue 22 Sep 2026 18:09:08 +0000
ROA not before: Tue 22 Sep 2026 18:09:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211009
IP address blocks: 2a11:ab84::/32 maxlen: 32
2a11:bdc4::/32 maxlen: 32
2a12:2806::/32 maxlen: 32
2a12:6480::/32 maxlen: 32
2a12:6486::/32 maxlen: 32
2a12:bc82::/32 maxlen: 32
2a12:f981::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:4e:aa:30:84:e3:7c:0f:1f:56:30:ef:08:d9:a9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 22 18:09:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=468c159c924aebd4f957943e12c7be56a705ec00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:2b:c8:d0:5a:22:fc:86:f4:ae:bb:34:1b:
75:8b:ef:9f:f4:55:95:bd:09:c4:dc:9c:70:e6:c1:
f9:93:bd:98:7a:ce:9c:64:1a:42:16:d4:a2:3a:33:
d7:86:74:a2:fe:ef:d8:a4:84:1d:f4:7a:5c:18:e7:
5e:d8:1f:77:1b:62:e5:5a:0b:fb:49:dd:80:0a:3f:
61:5e:be:d2:de:6d:9f:d1:26:f5:10:ce:d0:e7:ab:
40:1b:aa:df:be:92:26:ed:72:3d:e1:ca:87:e4:27:
6f:b3:ce:96:a2:a0:2d:f5:6f:01:90:28:24:60:42:
1e:4d:59:85:f4:ba:a0:69:19:d3:55:ef:58:c0:df:
5f:cc:f0:a1:80:7f:64:0f:d0:17:03:b9:94:5b:e2:
16:2c:79:47:3b:6e:0b:68:19:4c:00:1b:12:7b:d8:
6a:f8:6e:c8:55:7d:96:85:86:93:1e:93:d6:ad:b0:
28:e0:6b:1a:0d:83:34:06:a8:ce:65:f5:6a:b6:f2:
6c:95:13:e8:84:10:33:6e:e9:d1:dd:a8:5d:e8:03:
70:7b:60:19:38:e8:d7:91:21:74:d4:8d:b1:24:a9:
82:c6:92:3e:c9:6a:a1:3a:cf:d4:c7:2d:c6:94:55:
37:b3:88:f3:97:dd:d6:fa:b2:9f:55:ab:b3:75:31:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8C:15:9C:92:4A:EB:D4:F9:57:94:3E:12:C7:BE:56:A7:05:EC:00
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RowVnJJK69T5V5Q-Ese-VqcF7AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ab84::/32
2a11:bdc4::/32
2a12:2806::/32
2a12:6480::/32
2a12:6486::/32
2a12:bc82::/32
2a12:f981::/32
Signature Algorithm: sha256WithRSAEncryption
04:36:ca:40:ea:76:19:ea:25:fd:7c:f8:b4:80:cb:4f:01:b8:
8e:c3:95:b0:79:d2:79:bd:e7:ec:f8:ee:45:01:69:ab:60:b6:
6f:07:59:a4:ca:c1:a5:4a:60:51:84:c6:93:70:33:c1:24:76:
3c:d0:92:f5:21:3e:25:8d:2a:f5:ac:0a:89:3e:9e:6f:3b:42:
a6:82:1d:98:a4:92:56:88:c6:70:7a:98:03:d1:9b:9e:0b:22:
13:c1:0a:fc:72:92:3c:40:99:3d:da:c5:ea:65:f2:12:f8:be:
bf:52:91:55:a5:36:03:8c:36:0f:c0:0d:55:d6:97:82:68:99:
f1:94:c3:41:12:30:68:81:7e:97:89:a0:42:59:58:c9:d4:48:
b1:07:d6:1e:56:d1:96:c1:07:ba:fa:98:eb:d6:13:9e:25:ed:
75:3b:48:14:46:27:15:c5:48:9a:ce:ea:5b:7e:fb:63:c5:ee:
f8:a8:35:78:c4:9e:0d:65:37:fd:00:54:44:81:f4:6a:77:d6:
a6:74:33:3a:cb:1a:a6:ee:2b:80:ba:82:94:a1:1a:3a:a5:1a:
2d:aa:32:04:41:eb:ae:e1:cb:54:df:15:91:b6:4c:66:a0:d1:
81:b2:89:5f:d7:ff:3f:df:c3:ca:d8:83:9a:57:f1:04:be:61:
cd:b2:e1:79
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAaDKTqowhON8Dx9WMO8I2ampMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwOTIyMTgwOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjhjMTU5YzkyNGFlYmQ0Zjk1Nzk0M2UxMmM3YmU1NmE3MDVlYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QoryNBaIvyG9K67NBt1i++f9FWV
vQnE3Jxw5sH5k72Yes6cZBpCFtSiOjPXhnSi/u/YpIQd9HpcGOde2B93G2LlWgv7
Sd2ACj9hXr7S3m2f0Sb1EM7Q56tAG6rfvpIm7XI94cqH5Cdvs86WoqAt9W8BkCgk
YEIeTVmF9LqgaRnTVe9YwN9fzPChgH9kD9AXA7mUW+IWLHlHO24LaBlMABsSe9hq
+G7IVX2WhYaTHpPWrbAo4GsaDYM0BqjOZfVqtvJslRPohBAzbunR3ahd6ANwe2AZ
OOjXkSF01I2xJKmCxpI+yWqhOs/Uxy3GlFU3s4jzl93W+rKfVauzdTEcYwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFEaMFZySSuvU+VeUPhLHvlanBewAMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvUm93Vm5KSks2OVQ1VjVRLUVzZS1WcWNGN0FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUAKhGrhAMF
ACoRvcQDBQAqEigGAwUAKhJkgAMFACoSZIYDBQAqEryCAwUAKhL5gTANBgkqhkiG
9w0BAQsFAAOCAQEABDbKQOp2Geol/Xz4tIDLTwG4jsOVsHnSeb3n7PjuRQFpq2C2
bwdZpMrBpUpgUYTGk3AzwSR2PNCS9SE+JY0q9awKiT6ebztCpoIdmKSSVojGcHqY
A9GbngsiE8EK/HKSPECZPdrF6mXyEvi+v1KRVaU2A4w2D8ANVdaXgmiZ8ZTDQRIw
aIF+l4mgQllYydRIsQfWHlbRlsEHuvqY69YTniXtdTtIFEYnFcVIms7qW377Y8Xu
+Kg1eMSeDWU3/QBURIH0anfWpnQzOssapu4rgLqClKEaOqUaLaoyBEHrruHLVN8V
kbZMZqDRgbKJX9f/P9/DytiDmlfxBL5hzbLheQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:49:51 2026 by rpki-client