Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/avrucIi0djcCrIy6x1fFo0v4f2c.roa
File: avrucIi0djcCrIy6x1fFo0v4f2c.roa (raw, json)
Hash identifier: WOnk2uQgrei5vK2bgB2aJn6KU5gSaufmTMk+qAqXzrA=
Subject key identifier: 6A:FA:EE:70:88:B4:76:37:02:AC:8C:BA:C7:57:C5:A3:4B:F8:7F:67
Certificate issuer: /CN=afc974dfb24cca6b20f335027baf352823a6ad89
Certificate serial: 01A18183DECFD16D05F4E87F3F00156D172C
Authority key identifier: AF:C9:74:DF:B2:4C:CA:6B:20:F3:35:02:7B:AF:35:28:23:A6:AD:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8l037JMymsg8zUCe681KCOmrYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/avrucIi0djcCrIy6x1fFo0v4f2c.roa
Signing time: Wed 28 Oct 2026 07:57:45 +0000
ROA not before: Wed 28 Oct 2026 07:57:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 143.53.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8l037JMymsg8zUCe681KCOmrYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:83:de:cf:d1:6d:05:f4:e8:7f:3f:00:15:6d:17:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc974dfb24cca6b20f335027baf352823a6ad89
Validity
Not Before: Oct 28 07:57:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6afaee7088b4763702ac8cbac757c5a34bf87f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:17:15:b0:b7:0a:e5:9e:fa:5f:1f:7c:06:
5b:12:2b:10:8b:eb:c2:a0:02:24:68:d8:b2:02:3d:
27:b3:c9:41:45:28:81:49:e8:1c:1e:30:89:52:86:
0d:46:78:f6:bd:f2:e2:f7:85:c0:be:a8:d2:f2:e4:
4f:8e:90:34:e8:ab:08:46:b4:e8:05:a7:a1:64:40:
ad:de:d3:9f:41:fb:06:51:00:dd:b5:49:09:c0:eb:
c5:c7:19:39:50:cb:f3:b5:32:57:1a:6a:80:62:7d:
86:c5:74:64:f1:a3:c9:cf:d7:7d:0f:33:7e:56:a9:
95:69:75:8b:3e:81:c4:18:75:6b:f3:39:52:69:94:
b6:fc:af:b2:60:fb:30:4d:f5:27:e3:d9:73:c1:c8:
3a:98:1a:fa:52:e0:9e:a9:67:20:ec:be:c8:ae:22:
e4:1b:6e:b8:73:73:57:03:ff:58:86:98:30:04:56:
8b:c4:19:8e:50:86:67:4c:8b:1e:82:7a:44:ab:63:
7e:93:f7:27:89:19:25:fb:a0:fe:35:d8:8d:b8:2a:
57:e3:4d:20:ce:f6:ac:38:b8:73:54:48:2a:a2:59:
6c:be:d6:7a:5a:c4:4e:11:62:6a:15:b1:4a:66:f2:
8c:99:65:e6:f3:d5:eb:14:3a:c6:ad:05:6d:e6:74:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FA:EE:70:88:B4:76:37:02:AC:8C:BA:C7:57:C5:A3:4B:F8:7F:67
X509v3 Authority Key Identifier:
keyid:AF:C9:74:DF:B2:4C:CA:6B:20:F3:35:02:7B:AF:35:28:23:A6:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8l037JMymsg8zUCe681KCOmrYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/avrucIi0djcCrIy6x1fFo0v4f2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:cd:66:ab:eb:ef:3c:7f:5e:3b:e0:f4:a4:0c:bd:52:83:48:
b4:79:b2:c6:13:67:7f:8d:1b:7c:5e:01:eb:68:b3:b2:77:5b:
2e:d6:e0:ad:97:c2:b1:53:af:e0:c0:97:76:df:d7:f0:6f:4b:
9f:09:f0:7c:19:8d:0b:56:73:44:76:bf:90:17:22:ad:0f:0a:
23:c5:02:7f:48:b1:fa:3b:0c:fe:1c:6c:e1:20:62:b9:5a:97:
ce:b8:f9:c2:0b:72:13:d8:f8:31:78:c8:f4:2e:c9:da:e6:19:
db:0f:3f:ad:59:2c:30:ff:7a:36:93:67:21:c5:3c:ff:2c:9d:
0f:0a:84:8a:01:45:ee:15:2c:65:74:05:22:e7:84:70:aa:53:
a8:6f:ce:a9:71:18:c1:53:c4:1f:e4:7a:d9:9b:5b:8f:fc:0b:
01:c6:04:f5:48:b7:00:b7:98:4b:6b:cb:fe:30:15:6a:e1:76:
bf:2b:c0:f7:7c:4c:91:0b:e6:bb:39:6c:89:49:44:28:28:fd:
0a:1e:e3:ec:74:cf:ff:42:05:a2:d8:a9:1b:c8:1d:1c:cc:1f:
ac:ed:18:f6:4a:94:e8:bc:f3:ca:60:b7:bc:7a:19:ed:77:c1:
32:03:1f:37:dd:7a:20:45:dd:2a:9a:ec:00:ac:9a:9a:a3:68:
cc:ee:af:1d
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAaGBg97P0W0F9Oh/PwAVbRcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYzk3NGRmYjI0Y2NhNmIyMGYzMzUwMjdiYWYzNTI4MjNh
NmFkODkwHhcNMjYxMDI4MDc1NzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWZhZWU3MDg4YjQ3NjM3MDJhYzhjYmFjNzU3YzVhMzRiZjg3ZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AcXFbC3CuWe+l8ffAZbEisQi+vC
oAIkaNiyAj0ns8lBRSiBSegcHjCJUoYNRnj2vfLi94XAvqjS8uRPjpA06KsIRrTo
BaehZECt3tOfQfsGUQDdtUkJwOvFxxk5UMvztTJXGmqAYn2GxXRk8aPJz9d9DzN+
VqmVaXWLPoHEGHVr8zlSaZS2/K+yYPswTfUn49lzwcg6mBr6UuCeqWcg7L7IriLk
G264c3NXA/9YhpgwBFaLxBmOUIZnTIsegnpEq2N+k/cniRkl+6D+NdiNuCpX400g
zvasOLhzVEgqollsvtZ6WsROEWJqFbFKZvKMmWXm89XrFDrGrQVt5nR6xwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFGr67nCItHY3AqyMusdXxaNL+H9nMB8GA1UdIwQY
MBaAFK/JdN+yTMprIPM1AnuvNSgjpq2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjhsMDM3Sk15bXNnOHpVQ2U2ODFLQ09tcllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wNTEyY2QtMjNkMS00ZWM4LWJjMmEt
YzViNGQ1Nzg5NTAxLzEvYXZydWNJaTBkamNDckl5NngxZkZvMHY0ZjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wNTEyY2QtMjNkMS00ZWM4LWJjMmEtYzViNGQ1Nzg5NTAx
LzEvcjhsMDM3Sk15bXNnOHpVQ2U2ODFLQ09tcllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjzUwDQYJ
KoZIhvcNAQELBQADggEBAADNZqvr7zx/Xjvg9KQMvVKDSLR5ssYTZ3+NG3xeAeto
s7J3Wy7W4K2XwrFTr+DAl3bf1/BvS58J8HwZjQtWc0R2v5AXIq0PCiPFAn9Isfo7
DP4cbOEgYrlal864+cILchPY+DF4yPQuydrmGdsPP61ZLDD/ejaTZyHFPP8snQ8K
hIoBRe4VLGV0BSLnhHCqU6hvzqlxGMFTxB/ketmbW4/8CwHGBPVItwC3mEtry/4w
FWrhdr8rwPd8TJEL5rs5bIlJRCgo/Qoe4+x0z/9CBaLYqRvIHRzMH6ztGPZKlOi8
88pgt7x6Ge13wTIDHzfdeiBF3Sqa7ACsmpqjaMzurx0=
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:59:04 2026 by rpki-client