Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/9iFENB2hmlqD3TDEXX5p9kqgKVA.roa
File: 9iFENB2hmlqD3TDEXX5p9kqgKVA.roa (raw, json)
Hash identifier: O5aqIeOA3+G+W077TPrLU4j9DOFmgjmlG+7o4CEkzww=
Subject key identifier: F6:21:44:34:1D:A1:9A:5A:83:DD:30:C4:5D:7E:69:F6:4A:A0:29:50
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 019F7FCE4CFD96EDA06889720EB2DC9D598F
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/9iFENB2hmlqD3TDEXX5p9kqgKVA.roa
Signing time: Mon 20 Jul 2026 13:54:14 +0000
ROA not before: Mon 20 Jul 2026 13:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 2a03:1e84:abf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:ce:4c:fd:96:ed:a0:68:89:72:0e:b2:dc:9d:59:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Jul 20 13:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f62144341da19a5a83dd30c45d7e69f64aa02950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:d2:df:3f:ef:74:fa:bd:52:d4:09:fe:ee:
c2:47:f1:54:2d:44:c2:c5:5a:c2:50:0f:0f:e3:ec:
1a:b4:fb:de:78:35:59:2c:da:ed:8a:ca:34:16:c4:
aa:19:be:57:ed:d9:15:2e:c3:9f:8f:b6:30:5e:28:
f5:2c:a8:20:01:62:b9:05:ac:a6:99:18:68:9e:d4:
01:8a:f7:ee:1c:41:51:bc:8f:df:ee:86:db:84:30:
90:53:01:c0:bf:6f:86:cb:53:ac:78:1d:0e:97:fd:
9e:19:8f:7d:21:d8:f0:30:78:45:88:67:7d:b9:e5:
62:72:89:bb:9a:78:1b:66:f8:56:dd:1c:d0:9f:9f:
fa:e0:91:d6:5d:70:c6:15:f2:f8:15:b6:b2:9b:a3:
e6:2f:3e:c4:5a:96:6e:8b:2f:b2:22:f8:90:b1:cd:
cc:c1:e6:95:c1:1e:a0:d1:f9:33:e8:0b:4d:3b:78:
c7:f3:5b:ea:2d:b0:0b:28:7c:67:da:74:a8:8e:01:
3e:a5:9d:e1:06:ef:f1:88:99:7e:5c:32:e4:a3:49:
37:37:3f:4b:25:5b:18:39:cc:a3:9a:40:5b:3a:96:
34:31:e8:d5:cf:23:2a:dd:30:10:22:5d:55:f5:83:
83:6f:81:de:de:2b:cd:8f:1e:34:97:58:2c:43:fd:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:21:44:34:1D:A1:9A:5A:83:DD:30:C4:5D:7E:69:F6:4A:A0:29:50
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/9iFENB2hmlqD3TDEXX5p9kqgKVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1e84:abf::/48
Signature Algorithm: sha256WithRSAEncryption
85:01:7f:c5:cd:88:63:b8:5d:24:8f:90:00:30:e6:ba:2e:e2:
29:b3:d4:f9:e9:c1:82:b4:0a:09:42:33:3d:f9:9a:f8:4c:12:
5f:19:d7:08:86:69:eb:a9:86:b0:f8:86:4a:a1:65:e8:2e:1b:
77:22:8d:11:a8:ec:d5:66:dd:0a:36:22:e1:45:5c:35:0f:40:
a5:5e:74:dd:91:5c:27:be:ed:ed:1e:f6:fc:71:0c:23:ae:19:
52:7a:f3:69:df:b6:e0:63:6c:73:3c:7b:63:55:94:9c:9c:36:
a9:b6:ee:c3:90:0a:12:e7:cf:e2:9a:47:6a:64:7b:95:36:f1:
18:36:1a:d3:80:d1:a0:12:b2:72:50:91:71:4d:32:ff:5d:d3:
83:ab:53:ff:50:8d:a6:7a:82:9f:2c:89:bc:7f:17:19:db:3e:
f6:cc:04:83:10:eb:01:06:f9:ee:2a:10:93:0d:8d:2f:5d:49:
76:45:21:bd:4a:2e:d0:dd:7d:7a:c5:fa:16:c1:15:f4:9f:09:
3d:ba:06:b0:65:e4:7d:b8:ea:45:3f:75:12:ff:05:9f:21:3e:
80:aa:ab:fd:94:e0:61:48:b7:b4:2f:8d:7b:80:67:fb:57:01:
3b:eb:cd:a2:af:c6:d2:ae:fa:95:a6:91:f5:c1:55:64:db:b6:
2d:08:0b:6b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ9/zkz9lu2gaIlyDrLcnVmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5
MmFjOTIwHhcNMjYwNzIwMTM1NDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjIxNDQzNDFkYTE5YTVhODNkZDMwYzQ1ZDdlNjlmNjRhYTAyOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxPS3z/vdPq9UtQJ/u7CR/FULUTC
xVrCUA8P4+watPveeDVZLNrtiso0FsSqGb5X7dkVLsOfj7YwXij1LKggAWK5Baym
mRhontQBivfuHEFRvI/f7obbhDCQUwHAv2+Gy1OseB0Ol/2eGY99IdjwMHhFiGd9
ueVicom7mngbZvhW3RzQn5/64JHWXXDGFfL4Fbaym6PmLz7EWpZuiy+yIviQsc3M
weaVwR6g0fkz6AtNO3jH81vqLbALKHxn2nSojgE+pZ3hBu/xiJl+XDLko0k3Nz9L
JVsYOcyjmkBbOpY0MejVzyMq3TAQIl1V9YODb4He3ivNjx40l1gsQ/1xKwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPYhRDQdoZpag90wxF1+afZKoClQMB8GA1UdIwQY
MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt
NTdlOTBjNTZhMGUyLzEvOWlGRU5CMmhtbHFEM1RERVhYNXA5a3FnS1ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy
LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMehAq/
MA0GCSqGSIb3DQEBCwUAA4IBAQCFAX/FzYhjuF0kj5AAMOa6LuIps9T56cGCtAoJ
QjM9+Zr4TBJfGdcIhmnrqYaw+IZKoWXoLht3Io0RqOzVZt0KNiLhRVw1D0ClXnTd
kVwnvu3tHvb8cQwjrhlSevNp37bgY2xzPHtjVZScnDaptu7DkAoS58/imkdqZHuV
NvEYNhrTgNGgErJyUJFxTTL/XdODq1P/UI2meoKfLIm8fxcZ2z72zASDEOsBBvnu
KhCTDY0vXUl2RSG9Si7Q3X16xfoWwRX0nwk9ugawZeR9uOpFP3US/wWfIT6Aqqv9
lOBhSLe0L417gGf7VwE7682ir8bSrvqVppH1wVVk27YtCAtr
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:47 2026 by rpki-client