Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/4BaFgiySl9ZuiLKt3cqa-GBtHZ0.roa
File: 4BaFgiySl9ZuiLKt3cqa-GBtHZ0.roa (raw, json)
Hash identifier: N8kdOninId/klp3EyFdJsImC3+vMapb24sb5Y1paYvQ=
Subject key identifier: E0:16:85:82:2C:92:97:D6:6E:88:B2:AD:DD:CA:9A:F8:60:6D:1D:9D
Certificate issuer: /CN=01697790ad0428089ffc96637199418890ffe889
Certificate serial: 019E21681F4BBFD85650EB608E2C734D9040
Authority key identifier: 01:69:77:90:AD:04:28:08:9F:FC:96:63:71:99:41:88:90:FF:E8:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/4BaFgiySl9ZuiLKt3cqa-GBtHZ0.roa
Signing time: Wed 13 May 2026 12:55:32 +0000
ROA not before: Wed 13 May 2026 12:55:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206639
IP address blocks: 2001:67c:2b2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:68:1f:4b:bf:d8:56:50:eb:60:8e:2c:73:4d:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01697790ad0428089ffc96637199418890ffe889
Validity
Not Before: May 13 12:55:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e01685822c9297d66e88b2adddca9af8606d1d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:37:ae:3d:c1:41:f5:e1:b1:31:35:88:66:
c9:ab:66:a3:40:a5:bd:0a:9a:b2:ec:35:25:19:16:
ad:67:46:f1:44:8f:ba:ff:1a:3e:ff:2c:09:54:d6:
08:fd:9f:31:96:b8:bb:71:3b:55:13:e8:5a:c2:5f:
88:58:31:ea:c9:37:07:b6:1f:77:50:b4:09:d5:71:
98:74:58:ed:49:3f:c1:75:2a:d2:ee:0a:0f:03:5d:
9d:44:2e:5e:06:c6:82:1c:77:74:93:4a:fe:76:23:
df:ee:da:c9:c3:5b:2c:dc:f6:2b:49:e5:d7:49:1a:
27:76:cf:12:db:d6:fa:01:bd:a7:3e:2c:02:b7:bf:
df:1a:18:16:9c:0b:1b:12:76:d7:62:ee:7a:61:cc:
ad:1b:cc:08:d0:bf:54:24:fa:0e:23:f7:68:96:9b:
d7:85:f6:34:c2:0c:8e:9f:e0:81:6a:50:93:9e:6d:
e4:cd:ea:6a:3c:fd:7c:5f:9f:7f:06:2a:97:f0:42:
59:71:df:c2:53:48:8c:d7:ad:1c:b7:25:da:77:a1:
b3:22:4f:78:5f:81:52:21:9b:54:19:13:94:65:d6:
93:87:19:9e:2f:c8:2f:36:48:40:0d:14:0f:71:55:
74:07:1b:ff:de:3a:f4:b2:02:68:d7:4f:a9:78:43:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:85:82:2C:92:97:D6:6E:88:B2:AD:DD:CA:9A:F8:60:6D:1D:9D
X509v3 Authority Key Identifier:
keyid:01:69:77:90:AD:04:28:08:9F:FC:96:63:71:99:41:88:90:FF:E8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/4BaFgiySl9ZuiLKt3cqa-GBtHZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2b2c::/48
Signature Algorithm: sha256WithRSAEncryption
64:86:f2:ad:7f:dc:08:30:b1:2e:13:ea:f9:3c:eb:9a:42:b2:
1e:67:3c:53:2e:60:59:a5:47:7d:06:95:d0:e4:d0:f5:65:25:
79:06:fd:7e:5d:4d:8b:df:c9:03:b6:f4:9c:46:9d:83:9a:8b:
38:d9:6f:65:aa:87:c3:df:c2:9f:6b:e1:5c:51:3d:b5:aa:31:
60:24:73:c0:17:fc:79:12:95:62:f4:b0:f4:0f:70:ed:e6:b1:
02:16:c2:fd:68:29:17:9c:db:19:46:0e:5d:21:3e:28:ea:84:
e2:90:a2:80:f9:9a:8b:05:d1:d4:83:a3:56:8e:84:02:ed:8d:
1f:55:6a:28:c3:d6:af:7a:eb:00:40:86:e2:1f:9b:b9:a6:99:
f1:f6:cf:83:bd:6b:89:05:3e:18:a7:a6:29:5c:87:66:51:e8:
47:16:d0:8e:a7:b1:a0:fa:c7:22:5d:0e:c6:bc:29:a6:27:e7:
26:1c:43:31:2f:ee:ca:70:c3:b5:cb:09:32:94:1c:97:6a:bb:
a9:2b:79:fc:e6:e4:ed:86:66:0d:15:bf:8a:f5:2f:00:30:b0:
30:30:af:07:3c:c5:16:3d:54:9e:5d:10:70:97:d6:6d:2b:1d:
c5:e3:19:bd:3c:7f:0b:33:fd:e3:61:fa:bd:9d:f9:c6:fb:ed:
41:11:58:f5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ4haB9Lv9hWUOtgjixzTZBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjk3NzkwYWQwNDI4MDg5ZmZjOTY2MzcxOTk0MTg4OTBm
ZmU4ODkwHhcNMjYwNTEzMTI1NTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDE2ODU4MjJjOTI5N2Q2NmU4OGIyYWRkZGNhOWFmODYwNmQxZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogE3rj3BQfXhsTE1iGbJq2ajQKW9
Cpqy7DUlGRatZ0bxRI+6/xo+/ywJVNYI/Z8xlri7cTtVE+hawl+IWDHqyTcHth93
ULQJ1XGYdFjtST/BdSrS7goPA12dRC5eBsaCHHd0k0r+diPf7trJw1ss3PYrSeXX
SRonds8S29b6Ab2nPiwCt7/fGhgWnAsbEnbXYu56YcytG8wI0L9UJPoOI/dolpvX
hfY0wgyOn+CBalCTnm3kzepqPP18X59/BiqX8EJZcd/CU0iM160ctyXad6GzIk94
X4FSIZtUGROUZdaThxmeL8gvNkhADRQPcVV0Bxv/3jr0sgJo10+peENbMQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOAWhYIskpfWboiyrd3KmvhgbR2dMB8GA1UdIwQY
MBaAFAFpd5CtBCgIn/yWY3GZQYiQ/+iJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdsM2tLMEVLQWlmX0paamNabEJpSkRfNklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wOWYxM2MtY2JmMS00ODRmLWI0Yjct
NmJiN2MzMTQyMGM3LzEvNEJhRmdpeVNsOVp1aUxLdDNjcWEtR0J0SFowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8wOWYxM2MtY2JmMS00ODRmLWI0YjctNmJiN2MzMTQyMGM3
LzEvQVdsM2tLMEVLQWlmX0paamNabEJpSkRfNklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCss
MA0GCSqGSIb3DQEBCwUAA4IBAQBkhvKtf9wIMLEuE+r5POuaQrIeZzxTLmBZpUd9
BpXQ5ND1ZSV5Bv1+XU2L38kDtvScRp2Dmos42W9lqofD38Kfa+FcUT21qjFgJHPA
F/x5EpVi9LD0D3Dt5rECFsL9aCkXnNsZRg5dIT4o6oTikKKA+ZqLBdHUg6NWjoQC
7Y0fVWoow9aveusAQIbiH5u5ppnx9s+DvWuJBT4Yp6YpXIdmUehHFtCOp7Gg+sci
XQ7GvCmmJ+cmHEMxL+7KcMO1ywkylByXarupK3n85uTthmYNFb+K9S8AMLAwMK8H
PMUWPVSeXRBwl9ZtKx3F4xm9PH8LM/3jYfq9nfnG++1BEVj1
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:52 2026 by rpki-client