Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/ODokaw8dH2bgEwC2vqkh34fmVgw.roa
File: ODokaw8dH2bgEwC2vqkh34fmVgw.roa (raw, json)
Hash identifier: 7hy5NUlv+wfKrVj0j9OxBqj+/qNbcoueYUE/6UJ2K68=
Subject key identifier: 38:3A:24:6B:0F:1D:1F:66:E0:13:00:B6:BE:A9:21:DF:87:E6:56:0C
Certificate issuer: /CN=c02ea5d99d10bcdd2949693725375190909ac782
Certificate serial: 019F23686D90CCFD32E404BC7749CBB16B7A
Authority key identifier: C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/ODokaw8dH2bgEwC2vqkh34fmVgw.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214603
IP address blocks: 2a13:ccc6:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6d:90:cc:fd:32:e4:04:bc:77:49:cb:b1:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02ea5d99d10bcdd2949693725375190909ac782
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=383a246b0f1d1f66e01300b6bea921df87e6560c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:4c:a3:bd:e3:f4:75:cf:5b:6e:83:43:03:
56:fa:23:7c:0f:62:30:46:a2:26:8f:37:2c:e9:b9:
7a:b2:f0:c7:77:fc:1e:f6:be:32:33:da:b0:14:83:
32:26:38:03:8a:b8:ea:df:55:43:6f:71:73:68:76:
43:f7:fa:16:82:f9:16:d2:6f:50:68:12:81:93:4b:
e6:df:5f:d1:d2:68:12:d7:dd:61:2d:5f:1b:f3:b9:
7f:97:d5:46:e4:15:18:15:73:e0:04:d6:30:a5:ea:
4f:d8:d4:44:b7:8a:2e:76:92:e3:d1:1d:b6:94:1b:
dd:47:62:95:20:16:d5:ef:82:55:c5:58:a7:ec:91:
bc:7d:4f:db:25:78:86:7a:ef:e9:25:e0:ef:c4:02:
e5:59:95:0d:b3:d8:fa:f5:87:46:8e:15:e2:b1:9e:
8d:a9:64:89:1c:c9:99:3d:d6:fe:26:ba:f4:77:05:
f8:fa:ff:32:6d:ba:25:3b:e3:5d:af:b8:b2:40:03:
ca:a3:98:46:cf:f9:98:4e:45:c0:a1:e7:ad:66:ee:
33:e8:2f:15:ed:6c:18:51:58:c1:37:b1:ad:23:ab:
78:1d:18:a9:7d:0c:1e:23:99:e6:95:67:e5:65:0f:
20:4a:79:c5:b2:b5:f7:1b:8b:97:63:72:2e:26:f6:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:24:6B:0F:1D:1F:66:E0:13:00:B6:BE:A9:21:DF:87:E6:56:0C
X509v3 Authority Key Identifier:
keyid:C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/ODokaw8dH2bgEwC2vqkh34fmVgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ccc6:10::/44
Signature Algorithm: sha256WithRSAEncryption
ba:7d:7e:99:f5:7a:43:90:cc:17:c0:a8:a5:dc:72:13:d7:b4:
d9:a5:ab:ba:45:e5:1a:c5:84:9c:0d:06:45:12:c5:02:6e:cd:
18:d1:bb:25:36:b9:b9:4b:7c:db:83:41:a8:e9:19:ea:a6:7f:
85:a9:5a:98:66:61:9f:f5:47:77:c9:c2:6a:ab:a8:38:4e:53:
4e:fc:95:9e:9b:a8:1f:5a:52:d4:0b:a6:5b:d5:33:1f:86:3d:
ec:db:d6:a0:b2:a3:0c:ce:0c:97:9a:a9:3a:b0:dc:68:d3:07:
e7:1b:0f:41:f8:31:b0:cb:db:5f:3d:64:e9:5e:38:31:5f:50:
df:e8:67:91:95:14:49:6c:42:38:dd:17:d4:3b:32:ff:03:7a:
ea:52:39:3a:e9:29:f3:60:8a:bb:0f:34:29:be:92:6a:9a:6a:
84:e9:6e:a4:71:af:16:35:ca:79:f3:aa:cb:e7:7c:cb:49:a1:
20:07:89:3d:f0:ea:81:fd:64:59:e8:65:fc:f7:39:18:8c:81:
ec:d0:39:db:ae:73:c3:50:2d:04:33:f3:9f:b5:a3:ec:c8:ab:
bf:38:13:c7:38:14:7b:a2:4a:62:b9:83:62:68:6e:e6:c0:01:
1c:1b:6f:27:24:37:54:47:e9:43:74:03:83:5f:23:9e:6e:44:
16:e5:67:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaG2QzP0y5AS8d0nLsWt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMmVhNWQ5OWQxMGJjZGQyOTQ5NjkzNzI1Mzc1MTkwOTA5
YWM3ODIwHhcNMjYwNzAyMTUxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODNhMjQ2YjBmMWQxZjY2ZTAxMzAwYjZiZWE5MjFkZjg3ZTY1NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59ZMo73j9HXPW26DQwNW+iN8D2Iw
RqImjzcs6bl6svDHd/we9r4yM9qwFIMyJjgDirjq31VDb3FzaHZD9/oWgvkW0m9Q
aBKBk0vm31/R0mgS191hLV8b87l/l9VG5BUYFXPgBNYwpepP2NREt4oudpLj0R22
lBvdR2KVIBbV74JVxVin7JG8fU/bJXiGeu/pJeDvxALlWZUNs9j69YdGjhXisZ6N
qWSJHMmZPdb+Jrr0dwX4+v8ybbolO+Ndr7iyQAPKo5hGz/mYTkXAoeetZu4z6C8V
7WwYUVjBN7GtI6t4HRipfQweI5nmlWflZQ8gSnnFsrX3G4uXY3IuJvaWFQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDg6JGsPHR9m4BMAtr6pId+H5lYMMB8GA1UdIwQY
MBaAFMAupdmdELzdKUlpNyU3UZCQmseCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0M2bDJaMFF2TjBwU1drM0pUZFJrSkNheDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt
YzUxOTUxNjJlM2JlLzEvT0Rva2F3OGRIMmJnRXdDMnZxa2gzNGZtVmd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl
LzEvd0M2bDJaMFF2TjBwU1drM0pUZFJrSkNheDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhPMxgAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC6fX6Z9XpDkMwXwKil3HIT17TZpau6ReUaxYSc
DQZFEsUCbs0Y0bslNrm5S3zbg0Go6Rnqpn+FqVqYZmGf9Ud3ycJqq6g4TlNO/JWe
m6gfWlLUC6Zb1TMfhj3s29agsqMMzgyXmqk6sNxo0wfnGw9B+DGwy9tfPWTpXjgx
X1Df6GeRlRRJbEI43RfUOzL/A3rqUjk66SnzYIq7DzQpvpJqmmqE6W6kca8WNcp5
86rL53zLSaEgB4k98OqB/WRZ6GX89zkYjIHs0DnbrnPDUC0EM/OftaPsyKu/OBPH
OBR7okpiuYNiaG7mwAEcG28nJDdUR+lDdAODXyOebkQW5Wc7
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:17 2026 by rpki-client