Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/e318M7hSUOjsitnBIC4zPfzDATs.roa
File: e318M7hSUOjsitnBIC4zPfzDATs.roa (raw, json)
Hash identifier: nnEmRkN2+rCsS8QCE+A7YOtlo39KwIUf4f+yO7WtXDs=
Subject key identifier: 7B:7D:7C:33:B8:52:50:E8:EC:8A:D9:C1:20:2E:33:3D:FC:C3:01:3B
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 01A0D8B7D09960F7924E719F8C3892FC2F65
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/e318M7hSUOjsitnBIC4zPfzDATs.roa
Signing time: Fri 25 Sep 2026 13:18:40 +0000
ROA not before: Fri 25 Sep 2026 13:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a02:4a00:8075::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:b7:d0:99:60:f7:92:4e:71:9f:8c:38:92:fc:2f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Sep 25 13:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b7d7c33b85250e8ec8ad9c1202e333dfcc3013b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:46:8c:04:f0:d3:03:91:de:5e:51:d9:14:18:
0f:54:e5:dc:1b:c8:ca:dc:73:6f:f9:4a:37:10:1b:
72:79:35:fc:2e:36:94:e6:95:33:ce:4d:85:5b:6a:
9b:96:d8:f6:ad:cd:3d:95:6c:d0:79:10:44:44:66:
66:1e:04:7b:e4:02:81:fa:88:37:44:51:42:68:97:
34:1a:0f:c9:20:3a:a1:f8:8e:f5:ee:91:47:c3:dd:
47:03:46:44:70:2b:2d:26:86:61:1e:6b:7c:f8:f3:
f9:ed:97:f3:68:38:49:2e:96:dd:cb:90:97:e4:4b:
78:7d:1e:84:24:f6:11:6e:f8:44:ba:1d:7d:a5:63:
d4:c8:f5:4b:bc:e8:b9:09:e6:ea:7b:23:2a:28:93:
20:59:04:55:be:4f:4c:a2:ef:b8:af:13:b6:18:b9:
ca:7d:a7:a9:d4:bb:73:8a:5a:20:ee:b1:bc:3a:67:
52:13:13:2e:70:78:33:08:78:0b:6b:22:0a:dd:a4:
ea:8f:b5:71:f0:f7:89:2f:33:5f:ba:ba:06:b9:33:
1d:b5:79:1c:12:14:06:21:8f:05:0a:f8:e3:b9:34:
56:bc:41:48:b5:c2:61:9f:53:77:81:92:20:2f:6a:
38:c1:34:53:1f:31:45:9e:d4:af:61:11:f6:08:3c:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7D:7C:33:B8:52:50:E8:EC:8A:D9:C1:20:2E:33:3D:FC:C3:01:3B
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/e318M7hSUOjsitnBIC4zPfzDATs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:4a00:8075::/48
Signature Algorithm: sha256WithRSAEncryption
7d:ef:28:f6:ad:5d:05:3e:4d:7f:4d:97:11:53:4b:48:aa:d1:
fe:99:8d:7e:6f:42:b1:0f:b3:69:e5:77:78:f3:8c:ef:9e:ad:
53:e9:f5:aa:63:14:42:e0:78:70:0e:aa:d8:cc:27:61:c5:8d:
92:fe:fd:b2:76:58:f4:2b:7e:0c:5a:34:12:1d:ae:bc:08:00:
c2:e9:d1:f3:0c:8c:84:2a:36:5c:df:9b:11:d2:e4:f5:0c:65:
1a:80:ad:6f:d1:29:db:8b:b1:6b:f6:d9:39:05:52:1e:f5:05:
60:ba:e5:50:0b:b2:bb:0c:29:b3:5a:cd:b6:82:1a:45:33:2d:
52:13:09:b1:5e:94:3c:ec:11:9e:96:66:25:9e:ab:c9:35:4e:
e9:21:24:73:01:59:7e:43:04:e0:aa:59:ed:a8:f0:b5:32:e4:
52:1a:89:41:af:19:38:8f:f2:77:2d:dd:41:35:b0:66:a1:16:
16:13:9e:ba:15:e6:a1:32:79:7d:37:a1:4e:6a:14:82:f5:f8:
2b:11:aa:df:1f:87:07:72:db:49:1e:10:eb:fb:0c:cf:16:d8:
0b:96:47:10:08:e3:ca:62:2c:89:53:59:cc:a5:bc:c1:19:e6:
87:f1:70:da:23:8f:46:5c:66:bf:a1:fc:be:29:0a:13:14:6b:
5b:40:c2:c5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDYt9CZYPeSTnGfjDiS/C9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZmIwMjQzMjY4ODY3NDI2MGM2ZDAxMmE1OTdkNzBiY2Q1
MTQ5YzQwHhcNMjYwOTI1MTMxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjdkN2MzM2I4NTI1MGU4ZWM4YWQ5YzEyMDJlMzMzZGZjYzMwMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EaMBPDTA5HeXlHZFBgPVOXcG8jK
3HNv+Uo3EBtyeTX8LjaU5pUzzk2FW2qbltj2rc09lWzQeRBERGZmHgR75AKB+og3
RFFCaJc0Gg/JIDqh+I717pFHw91HA0ZEcCstJoZhHmt8+PP57ZfzaDhJLpbdy5CX
5Et4fR6EJPYRbvhEuh19pWPUyPVLvOi5CebqeyMqKJMgWQRVvk9Mou+4rxO2GLnK
faep1Ltzilog7rG8OmdSExMucHgzCHgLayIK3aTqj7Vx8PeJLzNfuroGuTMdtXkc
EhQGIY8FCvjjuTRWvEFItcJhn1N3gZIgL2o4wTRTHzFFntSvYRH2CDxeqwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHt9fDO4UlDo7IrZwSAuMz38wwE7MB8GA1UdIwQY
MBaAFKz7AkMmiGdCYMbQEqWX1wvNUUnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQt
MzFkNzAxMGE3MjU2LzEvZTMxOE03aFNVT2pzaXRuQklDNHpQZnpEQVRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQtMzFkNzAxMGE3MjU2
LzEvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJKAIB1
MA0GCSqGSIb3DQEBCwUAA4IBAQB97yj2rV0FPk1/TZcRU0tIqtH+mY1+b0KxD7Np
5Xd484zvnq1T6fWqYxRC4HhwDqrYzCdhxY2S/v2ydlj0K34MWjQSHa68CADC6dHz
DIyEKjZc35sR0uT1DGUagK1v0Snbi7Fr9tk5BVIe9QVguuVQC7K7DCmzWs22ghpF
My1SEwmxXpQ87BGelmYlnqvJNU7pISRzAVl+QwTgqlntqPC1MuRSGolBrxk4j/J3
Ld1BNbBmoRYWE566FeahMnl9N6FOahSC9fgrEarfH4cHcttJHhDr+wzPFtgLlkcQ
COPKYiyJU1nMpbzBGeaH8XDaI49GXGa/ofy+KQoTFGtbQMLF
-----END CERTIFICATE-----
Generated at Wed Sep 30 08:15:46 2026 by rpki-client