Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/4kq7dteNeJi6orDq2wDfl47yffg.roa
File: 4kq7dteNeJi6orDq2wDfl47yffg.roa (raw, json)
Hash identifier: FvB62BTp8U+l1nGxty+CTd6gllgdGGFHeeWIegN8Akk=
Subject key identifier: E2:4A:BB:76:D7:8D:78:98:BA:A2:B0:EA:DB:00:DF:97:8E:F2:7D:F8
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01A1D5344005CBC2D157652CA9108215D9B3
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/4kq7dteNeJi6orDq2wDfl47yffg.roa
Signing time: Fri 13 Nov 2026 13:58:53 +0000
ROA not before: Fri 13 Nov 2026 13:58:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212483
IP address blocks: 2a0d:2587::/32 maxlen: 48
2a0d:2587::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:34:40:05:cb:c2:d1:57:65:2c:a9:10:82:15:d9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Nov 13 13:58:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e24abb76d78d7898baa2b0eadb00df978ef27df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:18:59:9c:da:63:ce:b9:0b:7d:53:9c:73:
ba:61:ed:71:9b:8c:dd:0e:cb:70:df:f7:21:f8:f7:
94:49:61:aa:17:ae:88:26:b9:b9:07:7b:38:3c:a8:
13:59:ea:67:56:e4:9a:be:e6:3e:e8:ca:24:f9:1f:
fb:a3:47:f2:59:3a:1a:c4:6c:df:9e:4a:ed:01:a8:
81:3f:61:8b:0d:ec:96:15:81:b0:f1:98:be:64:3a:
a4:ad:25:7f:f0:43:2e:0d:95:20:c6:a0:53:6d:e2:
87:cf:ba:26:1b:87:84:05:a5:98:40:f5:19:a3:7b:
ba:24:d1:86:9f:a8:fe:2a:3c:d3:3e:a8:af:6b:89:
0e:b7:fa:a7:f0:ed:5d:e4:3c:53:35:fa:7c:3c:b5:
7d:4d:3d:73:66:45:67:9e:9f:2e:95:a5:92:b6:f4:
ac:b6:2f:2a:0f:ea:30:d4:c2:5e:8c:b0:55:f2:69:
62:9e:9d:10:ca:19:99:bb:48:0d:65:62:df:be:ae:
08:8f:1c:5f:a7:ca:df:b4:32:6d:f6:c2:5f:32:66:
49:56:cc:36:2a:80:8e:d7:48:51:21:22:97:3b:8b:
ec:a0:51:e7:7f:6d:1c:f8:e5:82:bc:dd:43:f6:5e:
3c:46:a2:48:2e:a2:6f:9c:df:ce:a5:a8:c8:87:71:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4A:BB:76:D7:8D:78:98:BA:A2:B0:EA:DB:00:DF:97:8E:F2:7D:F8
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/4kq7dteNeJi6orDq2wDfl47yffg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2587::/32
Signature Algorithm: sha256WithRSAEncryption
b4:29:4f:33:ae:10:94:93:8c:01:03:10:4d:30:85:75:13:df:
91:7a:00:47:f7:55:68:9f:03:1d:66:d8:39:32:93:b3:82:e8:
9a:f7:92:41:d2:7c:74:5a:60:5d:50:0a:dc:75:00:44:25:71:
68:f1:77:12:0f:bc:f0:f8:b0:a1:0f:a7:fc:e7:f4:20:1c:c8:
17:bb:07:26:0e:d5:b6:f5:df:77:62:92:a2:69:90:77:88:cb:
e0:94:3b:c7:b8:58:0d:a8:17:64:4e:53:4c:79:5d:7a:46:2b:
67:06:76:45:d7:64:f6:01:5c:62:27:61:db:aa:dd:8f:7e:a6:
f9:a5:85:b1:19:f9:15:05:e0:2a:0c:49:9b:f6:3e:83:a8:5a:
4c:5a:89:7d:c2:d0:2d:a2:a7:92:30:5c:1c:b2:aa:dc:a4:d3:
f3:37:25:2b:32:86:fd:23:dc:c7:9f:9b:95:e6:70:f3:4f:2d:
77:ac:00:27:ce:a3:20:55:da:ae:c8:c1:2f:8f:b1:18:00:03:
78:78:87:23:4e:2a:25:0f:7e:5e:76:39:b4:28:10:6d:7b:d5:
e2:02:de:82:0c:5a:cd:7b:5c:03:76:81:ca:5e:d5:02:6f:af:
88:ec:c9:8e:7e:61:3a:6d:18:87:bb:20:d4:bc:49:91:c3:37:
0f:c5:67:95
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaHVNEAFy8LRV2UsqRCCFdmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjYxMTEzMTM1ODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjRhYmI3NmQ3OGQ3ODk4YmFhMmIwZWFkYjAwZGY5NzhlZjI3ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0MYWZzaY865C31TnHO6Ye1xm4zd
Dstw3/ch+PeUSWGqF66IJrm5B3s4PKgTWepnVuSavuY+6Mok+R/7o0fyWToaxGzf
nkrtAaiBP2GLDeyWFYGw8Zi+ZDqkrSV/8EMuDZUgxqBTbeKHz7omG4eEBaWYQPUZ
o3u6JNGGn6j+KjzTPqiva4kOt/qn8O1d5DxTNfp8PLV9TT1zZkVnnp8ulaWStvSs
ti8qD+ow1MJejLBV8mlinp0QyhmZu0gNZWLfvq4Ijxxfp8rftDJt9sJfMmZJVsw2
KoCO10hRISKXO4vsoFHnf20c+OWCvN1D9l48RqJILqJvnN/OpajIh3F1ywIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOJKu3bXjXiYuqKw6tsA35eO8n34MB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvNGtxN2R0ZU5lSmk2b3JEcTJ3RGZsNDd5ZmZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg0lhzAN
BgkqhkiG9w0BAQsFAAOCAQEAtClPM64QlJOMAQMQTTCFdRPfkXoAR/dVaJ8DHWbY
OTKTs4LomveSQdJ8dFpgXVAK3HUARCVxaPF3Eg+88PiwoQ+n/Of0IBzIF7sHJg7V
tvXfd2KSommQd4jL4JQ7x7hYDagXZE5TTHldekYrZwZ2Rddk9gFcYidh26rdj36m
+aWFsRn5FQXgKgxJm/Y+g6haTFqJfcLQLaKnkjBcHLKq3KTT8zclKzKG/SPcx5+b
leZw808td6wAJ86jIFXarsjBL4+xGAADeHiHI04qJQ9+XnY5tCgQbXvV4gLeggxa
zXtcA3aByl7VAm+viOzJjn5hOm0Yh7sg1LxJkcM3D8VnlQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:32:48 2026 by rpki-client