Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/ryKoULiPThDFI5-2ZH5mj4le3Ao.roa
File: ryKoULiPThDFI5-2ZH5mj4le3Ao.roa (raw, json)
Hash identifier: XAp4EsZVhHFdrajZwEUqNkUHITyNVK0uVEbZXbmbP6A=
Subject key identifier: AF:22:A8:50:B8:8F:4E:10:C5:23:9F:B6:64:7E:66:8F:89:5E:DC:0A
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 01A13BBAB17CC52A9BC10D4C597E0DD98DF5
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/ryKoULiPThDFI5-2ZH5mj4le3Ao.roa
Signing time: Wed 14 Oct 2026 18:44:13 +0000
ROA not before: Wed 14 Oct 2026 18:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 2a14:1bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:ba:b1:7c:c5:2a:9b:c1:0d:4c:59:7e:0d:d9:8d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Oct 14 18:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af22a850b88f4e10c5239fb6647e668f895edc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:c6:8e:b0:13:39:a4:a4:58:23:5f:5d:fa:
55:a3:49:cd:f7:e8:0f:22:85:37:7f:10:e6:37:66:
0a:f1:90:67:c5:af:b6:47:2b:dd:88:4b:bf:77:f9:
76:7d:8b:5e:e7:e9:d7:9e:14:f4:99:85:34:96:7c:
e3:33:71:4d:7b:27:70:05:8e:13:71:72:5d:d9:b8:
a1:7e:e0:0e:6e:52:e4:7d:87:04:83:21:ea:39:01:
3b:b8:1b:30:ab:08:e4:8a:10:71:2b:f3:02:eb:5d:
1c:75:d4:96:02:f1:94:1e:e2:a6:b6:3d:9d:b0:30:
a2:59:73:3d:dd:c5:da:02:f6:dc:59:f7:93:53:d4:
64:91:07:12:ef:06:eb:60:fd:ec:96:32:97:3a:d9:
4b:27:1f:cb:19:20:5e:5f:ea:97:db:53:97:a0:12:
d8:d5:9e:30:f7:44:e9:d0:53:85:e4:1c:ff:77:89:
dd:67:9e:06:58:e8:74:d1:90:d2:fb:97:bb:d8:64:
37:b0:7a:61:b9:69:1f:4c:5c:f2:ff:f0:a8:1e:38:
b2:7f:00:fe:c3:ce:82:63:ef:37:7d:38:eb:08:05:
ca:12:11:86:9a:0f:18:1c:9a:17:93:00:59:83:35:
33:ae:a3:0c:7a:90:0c:bf:a0:90:ed:4c:45:bd:bd:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:22:A8:50:B8:8F:4E:10:C5:23:9F:B6:64:7E:66:8F:89:5E:DC:0A
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/ryKoULiPThDFI5-2ZH5mj4le3Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:ab:76:fa:7b:71:3f:c3:d9:b8:94:0e:b5:0c:27:31:30:b9:
0c:47:00:90:2b:49:8d:7f:91:d1:e2:0c:c0:a2:0f:e1:48:5e:
36:c5:53:43:0b:05:df:b5:fa:fe:57:52:eb:06:5d:c9:1a:b1:
3d:8f:c5:02:dd:b8:0b:3b:d8:f0:bf:ad:d9:db:29:c6:30:da:
36:3b:e5:23:55:78:2d:b7:bb:1e:7d:46:2c:b7:d0:82:d6:63:
70:1a:30:d7:ff:f9:8c:a9:47:16:fa:af:f3:ae:c0:74:4e:bb:
3b:9e:cd:ce:73:06:92:51:9e:80:32:08:3a:87:22:62:e0:a7:
96:8a:11:09:30:95:de:de:a2:8d:d9:e4:a7:35:5c:b5:69:12:
bc:2f:9b:9b:d9:b8:76:71:60:64:a6:f9:7c:6b:2c:3b:a5:d1:
91:6a:29:5b:1e:b4:76:33:5c:df:e6:5f:b9:10:ac:79:9d:9d:
81:f2:bd:fa:dd:80:0a:65:b7:b9:fc:b9:bf:69:de:4b:8d:9f:
91:df:e8:20:c0:60:f2:8a:25:71:e2:57:59:d8:88:9f:a4:3e:
4a:df:d4:0f:84:da:32:7b:ec:67:e8:1d:4d:5a:de:2f:7a:d5:
03:ec:0d:c2:b4:a4:ca:c6:95:4c:61:01:24:3c:4b:ae:e7:42:
d6:38:32:16
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE7urF8xSqbwQ1MWX4N2Y31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTYyMDlkN2RlZjk4YTJiYjM0OTc3ZjY1MDA5YjM1MjBk
YTI1NmUwHhcNMjYxMDE0MTg0NDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjIyYTg1MGI4OGY0ZTEwYzUyMzlmYjY2NDdlNjY4Zjg5NWVkYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4HGjrATOaSkWCNfXfpVo0nN9+gP
IoU3fxDmN2YK8ZBnxa+2RyvdiEu/d/l2fYte5+nXnhT0mYU0lnzjM3FNeydwBY4T
cXJd2bihfuAOblLkfYcEgyHqOQE7uBswqwjkihBxK/MC610cddSWAvGUHuKmtj2d
sDCiWXM93cXaAvbcWfeTU9RkkQcS7wbrYP3sljKXOtlLJx/LGSBeX+qX21OXoBLY
1Z4w90Tp0FOF5Bz/d4ndZ54GWOh00ZDS+5e72GQ3sHphuWkfTFzy//CoHjiyfwD+
w86CY+83fTjrCAXKEhGGmg8YHJoXkwBZgzUzrqMMepAMv6CQ7UxFvb0XcQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFK8iqFC4j04QxSOftmR+Zo+JXtwKMB8GA1UdIwQY
MBaAFNcWIJ1975iiuzSXf2UAmzUg2iVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMt
ODUxZDljMDQ0ZTcwLzEvcnlLb1VMaVBUaERGSTUtMlpINW1qNGxlM0FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMtODUxZDljMDQ0ZTcw
LzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQbwDAN
BgkqhkiG9w0BAQsFAAOCAQEALKt2+ntxP8PZuJQOtQwnMTC5DEcAkCtJjX+R0eIM
wKIP4UheNsVTQwsF37X6/ldS6wZdyRqxPY/FAt24CzvY8L+t2dspxjDaNjvlI1V4
Lbe7Hn1GLLfQgtZjcBow1//5jKlHFvqv867AdE67O57NznMGklGegDIIOociYuCn
looRCTCV3t6ijdnkpzVctWkSvC+bm9m4dnFgZKb5fGssO6XRkWopWx60djNc3+Zf
uRCseZ2dgfK9+t2ACmW3ufy5v2neS42fkd/oIMBg8oolceJXWdiIn6Q+St/UD4Ta
MnvsZ+gdTVreL3rVA+wNwrSkysaVTGEBJDxLrudC1jgyFg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:04 2026 by rpki-client