Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/AsAgHDGHPs_ZlrSxEpOeJcGc1l0.roa
File: AsAgHDGHPs_ZlrSxEpOeJcGc1l0.roa (raw, json)
Hash identifier: DWt+8Og+H/O75gxgwKwydNR/wXC9yr0q3HVKTxoYYIE=
Subject key identifier: 02:C0:20:1C:31:87:3E:CF:D9:96:B4:B1:12:93:9E:25:C1:9C:D6:5D
Certificate issuer: /CN=2d1ec27ddd3e05d14df31f9df785cd3f871ca17d
Certificate serial: 019F23683E67D923C32FB444316987D43FFD
Authority key identifier: 2D:1E:C2:7D:DD:3E:05:D1:4D:F3:1F:9D:F7:85:CD:3F:87:1C:A1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR7Cfd0-BdFN8x-d94XNP4ccoX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/AsAgHDGHPs_ZlrSxEpOeJcGc1l0.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2119
IP address blocks: 2001:67c:c60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LR7Cfd0-BdFN8x-d94XNP4ccoX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3e:67:d9:23:c3:2f:b4:44:31:69:87:d4:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1ec27ddd3e05d14df31f9df785cd3f871ca17d
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02c0201c31873ecfd996b4b112939e25c19cd65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:6b:24:e3:0c:04:87:8f:d2:7d:38:b3:be:
52:fe:c1:7a:d2:61:68:00:1d:94:99:43:6b:c2:1f:
cf:10:1d:1a:b4:1a:71:fe:2a:0d:6b:04:dd:d0:e7:
b3:0e:ba:11:2e:8b:5e:ad:2f:d0:dc:85:f6:b3:1a:
47:32:8e:3d:59:4b:f7:aa:38:36:8c:14:d0:6f:cd:
cb:90:dd:4c:2b:50:25:83:41:e3:83:a7:6a:52:10:
14:99:3a:20:b9:8a:c9:3c:a0:9c:d7:eb:fd:c2:ad:
71:25:0e:38:9a:46:f2:8b:ce:c1:2e:15:4f:e4:e8:
d9:98:3d:0e:19:79:5e:8b:18:e0:b5:3d:3d:f3:d0:
6f:3d:ea:1a:3c:b1:e5:0b:f2:05:f0:e6:ce:c4:33:
4c:ac:35:1c:1a:1e:4b:8b:f8:3e:68:c9:8c:fc:2b:
f1:e6:ac:87:34:ed:7d:39:3a:ba:f6:d6:fb:be:4c:
39:07:fc:0f:62:8a:90:1d:f7:37:0c:ec:6b:1b:9f:
90:ac:c6:bc:80:1c:6b:2b:de:a5:e5:1a:5b:4d:23:
d6:3a:6f:e5:87:88:d0:49:d1:9c:07:e9:99:af:01:
ef:27:ca:ee:2b:ee:ea:fa:1c:fa:2a:a0:83:54:ae:
50:ce:be:ee:dd:4c:0b:21:0a:78:a1:20:d2:15:c8:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C0:20:1C:31:87:3E:CF:D9:96:B4:B1:12:93:9E:25:C1:9C:D6:5D
X509v3 Authority Key Identifier:
keyid:2D:1E:C2:7D:DD:3E:05:D1:4D:F3:1F:9D:F7:85:CD:3F:87:1C:A1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR7Cfd0-BdFN8x-d94XNP4ccoX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/AsAgHDGHPs_ZlrSxEpOeJcGc1l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/LR7Cfd0-BdFN8x-d94XNP4ccoX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c60::/48
Signature Algorithm: sha256WithRSAEncryption
46:e3:60:e5:43:3e:15:13:39:4e:9e:df:f4:e4:00:c7:a7:2a:
98:28:0c:b9:4f:3f:46:dd:e8:a5:d7:ec:19:29:5d:e8:c5:e1:
23:ae:0d:40:51:94:bc:c6:ea:c4:2c:df:a8:62:9b:c0:7b:ea:
2c:5d:56:0f:04:80:12:77:2a:9b:94:78:8f:3a:e8:2f:7e:62:
05:77:92:85:d5:d4:3b:26:2f:b2:df:22:44:38:a0:9c:a7:06:
31:8e:ed:2c:2b:f1:cf:7a:26:49:34:ca:c0:dc:2d:36:58:be:
0b:4b:15:60:45:88:c7:96:71:ee:4a:c0:e1:1d:19:8e:b0:b8:
f4:8e:5c:13:ee:17:fc:93:f9:d4:b5:0c:67:b9:3a:ad:39:f8:
12:51:7e:08:ab:70:50:65:df:1e:7f:9c:e2:38:7a:f8:79:2b:
2d:b7:38:f1:c1:04:1e:10:af:f2:e8:be:1e:53:25:c1:f6:31:
0a:82:36:bd:36:51:a9:db:d5:07:d0:2d:b0:a6:2c:50:ae:31:
73:f3:52:72:03:9a:d9:d5:8e:a9:cc:13:21:85:0a:e6:5f:3e:
5a:0d:e4:0b:15:6f:86:a5:5e:9c:42:2e:f2:64:f0:27:03:ef:
5c:e3:59:60:77:55:b4:cd:60:fd:bd:64:e6:d9:95:e0:a5:e7:
b5:3b:80:55
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaD5n2SPDL7REMWmH1D/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWVjMjdkZGQzZTA1ZDE0ZGYzMWY5ZGY3ODVjZDNmODcx
Y2ExN2QwHhcNMjYwNzAyMTUxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmMwMjAxYzMxODczZWNmZDk5NmI0YjExMjkzOWUyNWMxOWNkNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm9rJOMMBIeP0n04s75S/sF60mFo
AB2UmUNrwh/PEB0atBpx/ioNawTd0OezDroRLoterS/Q3IX2sxpHMo49WUv3qjg2
jBTQb83LkN1MK1Alg0Hjg6dqUhAUmToguYrJPKCc1+v9wq1xJQ44mkbyi87BLhVP
5OjZmD0OGXleixjgtT0989BvPeoaPLHlC/IF8ObOxDNMrDUcGh5Li/g+aMmM/Cvx
5qyHNO19OTq69tb7vkw5B/wPYoqQHfc3DOxrG5+QrMa8gBxrK96l5RpbTSPWOm/l
h4jQSdGcB+mZrwHvJ8ruK+7q+hz6KqCDVK5Qzr7u3UwLIQp4oSDSFchsAQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFALAIBwxhz7P2Za0sRKTniXBnNZdMB8GA1UdIwQY
MBaAFC0ewn3dPgXRTfMfnfeFzT+HHKF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFI3Q2ZkMC1CZEZOOHgtZDk0WE5QNGNjb1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2It
OGY1ZjcxM2IzN2FhLzEvQXNBZ0hER0hQc19abHJTeEVwT2VKY0djMWwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2ItOGY1ZjcxM2IzN2Fh
LzEvTFI3Q2ZkMC1CZEZOOHgtZDk0WE5QNGNjb1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAxg
MA0GCSqGSIb3DQEBCwUAA4IBAQBG42DlQz4VEzlOnt/05ADHpyqYKAy5Tz9G3eil
1+wZKV3oxeEjrg1AUZS8xurELN+oYpvAe+osXVYPBIASdyqblHiPOugvfmIFd5KF
1dQ7Ji+y3yJEOKCcpwYxju0sK/HPeiZJNMrA3C02WL4LSxVgRYjHlnHuSsDhHRmO
sLj0jlwT7hf8k/nUtQxnuTqtOfgSUX4Iq3BQZd8ef5ziOHr4eSsttzjxwQQeEK/y
6L4eUyXB9jEKgja9NlGp29UH0C2wpixQrjFz81JyA5rZ1Y6pzBMhhQrmXz5aDeQL
FW+GpV6cQi7yZPAnA+9c41lgd1W0zWD9vWTm2ZXgpee1O4BV
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:27:21 2026 by rpki-client