Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/rnB7B0dlGiAgHHJ2JEK_JS1pZwc.roa
File: rnB7B0dlGiAgHHJ2JEK_JS1pZwc.roa (raw, json)
Hash identifier: z7xVpVDo4p29gWhMgH3syt/OPqjvg9xQKtlsye+MoVo=
Subject key identifier: AE:70:7B:07:47:65:1A:20:20:1C:72:76:24:42:BF:25:2D:69:67:07
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 01A1D795128825B92262103614A8D511DB82
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/rnB7B0dlGiAgHHJ2JEK_JS1pZwc.roa
Signing time: Sat 14 Nov 2026 01:03:53 +0000
ROA not before: Sat 14 Nov 2026 01:03:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218664
IP address blocks: 2a10:ab80:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d7:95:12:88:25:b9:22:62:10:36:14:a8:d5:11:db:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Nov 14 01:03:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae707b0747651a20201c72762442bf252d696707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:e8:c5:3b:c4:47:95:c0:a9:3a:db:55:a5:
4f:d4:42:35:d6:81:b6:95:64:c2:3c:9d:6b:33:0f:
d6:40:db:f2:f1:cf:25:19:ab:d7:f3:c3:70:5b:dd:
c0:22:7a:7c:27:24:c7:e8:c5:ea:d6:0d:7a:d0:cb:
f3:7d:09:9f:6c:ae:8b:2b:29:14:5a:ed:fd:d8:a9:
c9:23:b5:50:5d:3a:ed:7c:c7:0a:7c:5b:f9:f1:84:
bc:12:b6:ac:c8:db:b7:14:dc:ce:d0:82:99:6e:17:
88:5c:6a:66:ec:94:74:78:85:ea:d4:17:c1:df:e7:
ab:3b:f2:9b:7a:3a:9c:70:33:cd:d8:be:17:e6:aa:
61:41:f4:df:47:5a:49:c3:65:4b:bb:74:0a:95:d8:
e1:71:95:46:cc:8f:78:c6:68:53:20:83:52:ba:37:
c4:60:5b:10:68:c8:11:34:c8:ce:7f:9a:e1:85:e5:
8c:3b:c8:a1:5e:42:af:e9:65:9e:a4:c4:42:7a:18:
98:18:9d:b3:b7:2e:0d:72:64:75:0b:3f:ae:5a:43:
98:69:7d:b7:68:af:aa:16:51:ba:10:36:d0:34:94:
1b:29:c4:fd:69:13:42:f9:a8:5f:32:8c:7b:52:ab:
d9:0d:9a:c9:a9:b5:4b:40:3c:c9:e7:02:0d:ed:44:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:70:7B:07:47:65:1A:20:20:1C:72:76:24:42:BF:25:2D:69:67:07
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/rnB7B0dlGiAgHHJ2JEK_JS1pZwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:100::/44
Signature Algorithm: sha256WithRSAEncryption
84:5d:e5:d2:a7:fb:56:ce:fc:82:be:12:2f:fa:e7:bb:9a:f3:
da:dc:5e:33:79:89:d6:04:86:9f:5e:8b:2e:83:73:d9:25:9f:
68:1a:b5:e6:93:57:65:5a:21:bb:05:80:71:64:8b:05:61:9c:
35:72:f6:e0:01:f2:af:85:8d:1c:11:86:29:86:b8:05:47:e5:
aa:f1:a0:59:49:16:43:da:fb:1e:bd:4d:2b:1e:40:1c:63:37:
c1:e8:ac:d6:d0:96:0f:8d:17:fd:0f:ae:88:32:58:90:77:f2:
56:7a:75:c0:55:0b:15:ea:30:01:fa:16:21:be:1c:a4:83:e1:
db:4e:dd:83:15:c7:c3:7c:42:72:c6:4d:28:51:83:fa:3d:8f:
62:9b:11:47:2b:1e:4b:ea:6f:70:7c:bd:38:c3:c2:95:d8:26:
6e:0e:1e:b0:e5:fe:49:6e:b1:67:a1:d7:3c:62:29:f5:d4:d9:
37:a0:ce:3a:dc:77:77:1e:88:70:8c:9a:eb:5f:ec:6c:97:8b:
19:22:0d:31:4f:0c:79:8d:32:58:f8:c4:c2:f6:4d:61:dd:79:
34:2b:c2:6d:01:c5:6e:49:a4:a0:15:29:6a:35:f2:ab:ae:b6:
eb:3f:92:19:0c:f4:4b:e7:69:6e:64:41:b8:a8:66:b8:37:4d:
6e:62:1b:ff
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaHXlRKIJbkiYhA2FKjVEduCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2
NGM2ZDEwHhcNMjYxMTE0MDEwMzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTcwN2IwNzQ3NjUxYTIwMjAxYzcyNzYyNDQyYmYyNTJkNjk2NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gvoxTvER5XAqTrbVaVP1EI11oG2
lWTCPJ1rMw/WQNvy8c8lGavX88NwW93AInp8JyTH6MXq1g160MvzfQmfbK6LKykU
Wu392KnJI7VQXTrtfMcKfFv58YS8ErasyNu3FNzO0IKZbheIXGpm7JR0eIXq1BfB
3+erO/KbejqccDPN2L4X5qphQfTfR1pJw2VLu3QKldjhcZVGzI94xmhTIINSujfE
YFsQaMgRNMjOf5rhheWMO8ihXkKv6WWepMRCehiYGJ2zty4NcmR1Cz+uWkOYaX23
aK+qFlG6EDbQNJQbKcT9aRNC+ahfMox7UqvZDZrJqbVLQDzJ5wIN7UQnUwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK5wewdHZRogIBxydiRCvyUtaWcHMB8GA1UdIwQY
MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt
Y2ZhNWE0Yjg5ODZiLzEvcm5CN0IwZGxHaUFnSEhKMkpFS19KUzFwWndjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi
LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhCrgAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQCEXeXSp/tWzvyCvhIv+ue7mvPa3F4zeYnWBIaf
Xosug3PZJZ9oGrXmk1dlWiG7BYBxZIsFYZw1cvbgAfKvhY0cEYYphrgFR+Wq8aBZ
SRZD2vsevU0rHkAcYzfB6KzW0JYPjRf9D66IMliQd/JWenXAVQsV6jAB+hYhvhyk
g+HbTt2DFcfDfEJyxk0oUYP6PY9imxFHKx5L6m9wfL04w8KV2CZuDh6w5f5JbrFn
odc8Yin11Nk3oM463Hd3HohwjJrrX+xsl4sZIg0xTwx5jTJY+MTC9k1h3Xk0K8Jt
AcVuSaSgFSlqNfKrrrbrP5IZDPRL52luZEG4qGa4N01uYhv/
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:36 2026 by rpki-client