Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/zKoqr2AHpdD6h0Di-u6O91o2qr4.roa
File: zKoqr2AHpdD6h0Di-u6O91o2qr4.roa (raw, json)
Hash identifier: C7O0OLcevVEKUGD2h9jR8PHv05Lfi5ttiMBjrZhaHCw=
Subject key identifier: CC:AA:2A:AF:60:07:A5:D0:FA:87:40:E2:FA:EE:8E:F7:5A:36:AA:BE
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 01A04A2293FEDF4A00665DF43E8FB575585A
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/zKoqr2AHpdD6h0Di-u6O91o2qr4.roa
Signing time: Fri 28 Aug 2026 20:49:35 +0000
ROA not before: Fri 28 Aug 2026 20:49:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219090
IP address blocks: 2001:1410:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:22:93:fe:df:4a:00:66:5d:f4:3e:8f:b5:75:58:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Aug 28 20:49:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccaa2aaf6007a5d0fa8740e2faee8ef75a36aabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:7f:96:b0:4e:85:35:92:fc:02:bf:56:e2:
4b:90:cb:e6:a1:8a:ab:6f:37:a7:01:3a:3c:48:5d:
fe:ad:b9:be:d4:06:30:88:da:f4:99:f7:59:d5:a2:
b4:ad:82:17:07:09:0c:e2:00:1c:58:d9:94:43:45:
8e:94:a8:64:98:20:1e:93:4c:4e:95:9d:16:82:37:
05:c3:bc:c2:bc:dd:6e:e1:f2:7a:e6:82:2d:2e:8c:
52:37:ac:0f:e9:f3:df:fc:d6:cd:10:0a:f9:ab:5d:
68:02:4b:df:c2:eb:f8:16:05:7c:49:3e:ec:ae:f0:
80:44:35:59:b3:20:1c:5f:ac:56:cb:e2:e6:21:cc:
15:af:b9:ec:15:dc:88:a7:fe:4a:ea:22:ad:f2:46:
4c:ac:55:f5:ba:6f:1c:fe:5e:26:be:b6:d2:36:02:
df:29:08:23:9f:68:29:3a:38:d9:5b:72:5e:57:6e:
29:dc:19:c8:eb:2e:67:da:d6:b3:a1:d7:2e:19:df:
49:05:a4:ff:bd:25:c0:cb:bc:d0:4b:50:8c:df:73:
3a:54:e1:27:b0:27:f5:36:14:83:7c:a6:ef:9a:37:
9f:9d:9c:44:98:9a:10:86:ec:ff:df:2f:05:2d:eb:
c4:63:c9:76:29:a7:60:9e:6a:d9:d1:dd:7b:b9:88:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:2A:AF:60:07:A5:D0:FA:87:40:E2:FA:EE:8E:F7:5A:36:AA:BE
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/zKoqr2AHpdD6h0Di-u6O91o2qr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1410:1000::/48
Signature Algorithm: sha256WithRSAEncryption
b7:ed:76:bc:ce:17:da:97:02:f9:88:80:8e:6a:c2:79:16:af:
5f:74:23:a7:e3:e8:a0:e1:22:35:3b:48:fe:52:96:47:89:76:
02:05:59:48:aa:07:e6:ee:46:62:ff:03:fe:36:39:d9:d0:8e:
b2:ec:46:ce:cd:fb:d5:90:7c:92:cc:92:6d:ae:c7:e7:73:02:
de:e7:4b:5a:7a:04:6b:49:d4:98:8e:61:99:10:e9:b2:02:47:
1f:5c:d1:aa:fe:f0:20:b7:4d:d2:da:6d:20:33:06:32:3e:ed:
35:bb:f8:0b:6a:a3:85:7f:70:bc:83:47:c9:4a:03:b4:f9:f9:
dd:4d:44:66:01:68:f4:2f:a0:9d:9c:06:61:86:e1:b3:cc:30:
45:89:c6:ed:7a:20:60:93:49:c8:04:7a:a3:41:43:e2:0f:59:
c3:96:e7:50:85:49:65:75:ca:67:a2:66:a0:3e:6d:40:72:5e:
3e:48:28:a8:04:96:bf:42:43:85:ae:5a:2c:16:09:45:7d:5c:
a4:d0:02:32:d2:37:c1:a5:d2:f2:1f:7d:38:aa:d1:a6:3c:38:
68:ae:ae:1b:ac:15:d3:50:ec:5f:57:51:e1:2f:7f:f2:3a:23:
07:99:68:7f:c0:6c:0a:cb:82:52:9c:4f:e1:21:b1:24:ed:08:
1e:07:68:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBKIpP+30oAZl30Po+1dVhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDM2NDdlZmIyNDM2NjJlNTdlNjFkNGVjNDViNGEyNWEz
N2VhYzgwHhcNMjYwODI4MjA0OTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2FhMmFhZjYwMDdhNWQwZmE4NzQwZTJmYWVlOGVmNzVhMzZhYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd5/lrBOhTWS/AK/VuJLkMvmoYqr
bzenATo8SF3+rbm+1AYwiNr0mfdZ1aK0rYIXBwkM4gAcWNmUQ0WOlKhkmCAek0xO
lZ0WgjcFw7zCvN1u4fJ65oItLoxSN6wP6fPf/NbNEAr5q11oAkvfwuv4FgV8ST7s
rvCARDVZsyAcX6xWy+LmIcwVr7nsFdyIp/5K6iKt8kZMrFX1um8c/l4mvrbSNgLf
KQgjn2gpOjjZW3JeV24p3BnI6y5n2tazodcuGd9JBaT/vSXAy7zQS1CM33M6VOEn
sCf1NhSDfKbvmjefnZxEmJoQhuz/3y8FLevEY8l2KadgnmrZ0d17uYgKyQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMyqKq9gB6XQ+odA4vrujvdaNqq+MB8GA1UdIwQY
MBaAFBkDZH77JDZi5X5h1OxFtKJaN+rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgt
YTRjMzQzMmZiMDBmLzEvektvcXIyQUhwZEQ2aDBEaS11Nk85MW8ycXI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgtYTRjMzQzMmZiMDBm
LzEvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEUEBAA
MA0GCSqGSIb3DQEBCwUAA4IBAQC37Xa8zhfalwL5iICOasJ5Fq9fdCOn4+ig4SI1
O0j+UpZHiXYCBVlIqgfm7kZi/wP+NjnZ0I6y7EbOzfvVkHySzJJtrsfncwLe50ta
egRrSdSYjmGZEOmyAkcfXNGq/vAgt03S2m0gMwYyPu01u/gLaqOFf3C8g0fJSgO0
+fndTURmAWj0L6CdnAZhhuGzzDBFicbteiBgk0nIBHqjQUPiD1nDludQhUlldcpn
omagPm1Acl4+SCioBJa/QkOFrlosFglFfVyk0AIy0jfBpdLyH304qtGmPDhorq4b
rBXTUOxfV1HhL3/yOiMHmWh/wGwKy4JSnE/hIbEk7QgeB2jI
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:39:18 2026 by rpki-client