Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TIcttsRwhtyWkiz1acCpd0-FQk0.roa
File: TIcttsRwhtyWkiz1acCpd0-FQk0.roa (raw, json)
Hash identifier: jpIgFfWqJ7tfBWjUu1PjL+kXKcuW3Iba6A7r4jMIG1k=
Subject key identifier: 4C:87:2D:B6:C4:70:86:DC:96:92:2C:F5:69:C0:A9:77:4F:85:42:4D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0C8B0D799442EC3FCFCA768D71C29817D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TIcttsRwhtyWkiz1acCpd0-FQk0.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a0e:bac0::/29 maxlen: 29
2a0e:be80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d7:99:44:2e:c3:fc:fc:a7:68:d7:1c:29:81:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c872db6c47086dc96922cf569c0a9774f85424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:66:4e:84:b6:3e:c4:4f:7e:97:cd:63:60:
66:88:7d:82:db:21:10:ea:97:3d:5f:46:5c:12:48:
6e:37:2c:4c:76:c5:6b:23:b5:8c:2d:ba:0b:75:5d:
00:23:d2:bf:f9:bc:de:9f:28:78:69:7b:1d:a8:27:
3c:b6:f3:c6:1e:b6:80:35:5c:58:fc:3f:b4:1c:3e:
2c:c8:9a:22:bb:4f:33:a2:4c:af:ca:d5:ca:f7:8b:
20:ed:a4:4c:15:df:fd:ae:01:db:c8:92:a0:5d:4e:
50:47:7f:e0:e8:0c:38:33:eb:c8:5f:36:4e:6c:eb:
4e:83:cb:2f:51:f6:26:fd:a3:c0:97:e0:ee:8f:f5:
f0:e8:2b:83:d1:1f:1c:3f:e4:af:d9:3f:51:46:8a:
08:c7:a2:93:2e:fa:ca:f5:7f:c8:99:91:ce:9a:74:
69:7b:4c:d4:c0:95:f5:ea:95:91:55:1e:a9:2f:14:
d1:12:ec:d0:9f:c3:6b:05:84:7f:b0:f7:e0:43:fc:
17:3f:f0:3b:04:41:ab:68:65:38:0b:92:31:cf:bb:
5d:2d:de:dc:6f:d9:af:a9:26:48:0b:ba:b3:b6:96:
c4:f2:81:61:9a:c6:77:50:a0:b3:0e:18:68:09:e3:
09:f3:c4:0b:b7:f9:a3:f3:fc:1a:cc:00:f3:1b:c4:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:87:2D:B6:C4:70:86:DC:96:92:2C:F5:69:C0:A9:77:4F:85:42:4D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TIcttsRwhtyWkiz1acCpd0-FQk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:bac0::/29
2a0e:be80::/29
Signature Algorithm: sha256WithRSAEncryption
80:92:c3:67:6c:16:5c:26:19:8d:5b:b9:8d:fd:59:24:78:cc:
ed:f9:4a:a8:61:d2:cf:0a:5c:cb:6c:3a:b8:bb:e5:f4:52:07:
0d:04:15:72:b3:ef:d5:9b:c4:44:c1:fe:65:83:ac:3c:8b:e6:
79:6e:17:33:4d:13:bd:66:96:ea:68:79:6b:c8:43:ca:fb:ba:
e5:a7:48:f6:f3:68:ab:b6:d8:c3:66:16:f2:53:a6:f8:d9:c9:
71:db:5b:55:c5:35:4d:64:04:ee:45:9d:d0:3a:d8:ad:46:30:
3d:d3:e4:a3:ae:d5:01:e4:aa:80:93:a2:df:46:58:89:28:d2:
da:7b:fd:13:71:c7:b0:5f:cd:82:34:5a:7f:30:3b:b5:71:0c:
7e:36:8e:99:61:46:01:f8:9d:19:de:70:22:3c:16:3e:fa:9d:
db:c0:ae:9e:c4:2c:eb:90:0b:08:69:79:44:eb:ae:6d:fb:7a:
cc:29:22:7b:fe:f9:24:7f:c4:f5:4e:b1:2c:7a:aa:94:e2:87:
1f:ab:54:c1:1f:c1:09:e6:69:70:b5:6a:96:bd:94:e0:3c:01:
eb:ce:f6:24:55:02:d9:14:71:94:02:3f:9d:d7:1e:36:f5:76:
48:c2:64:b2:0f:b3:2b:54:6c:54:e7:23:18:a7:3a:17:ee:94:
f7:6a:3c:80
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaDIsNeZRC7D/PynaNccKYF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjYwOTIyMTAzNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzg3MmRiNmM0NzA4NmRjOTY5MjJjZjU2OWMwYTk3NzRmODU0MjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiFmToS2PsRPfpfNY2BmiH2C2yEQ
6pc9X0ZcEkhuNyxMdsVrI7WMLboLdV0AI9K/+bzenyh4aXsdqCc8tvPGHraANVxY
/D+0HD4syJoiu08zokyvytXK94sg7aRMFd/9rgHbyJKgXU5QR3/g6Aw4M+vIXzZO
bOtOg8svUfYm/aPAl+Duj/Xw6CuD0R8cP+Sv2T9RRooIx6KTLvrK9X/ImZHOmnRp
e0zUwJX16pWRVR6pLxTREuzQn8NrBYR/sPfgQ/wXP/A7BEGraGU4C5Ixz7tdLd7c
b9mvqSZIC7qztpbE8oFhmsZ3UKCzDhhoCeMJ88QLt/mj8/wazADzG8Qg1wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEyHLbbEcIbclpIs9WnAqXdPhUJNMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvVEljdHRzUndodHlXa2l6MWFjQ3BkMC1GUWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKg66wAMF
AyoOvoAwDQYJKoZIhvcNAQELBQADggEBAICSw2dsFlwmGY1buY39WSR4zO35Sqhh
0s8KXMtsOri75fRSBw0EFXKz79WbxETB/mWDrDyL5nluFzNNE71mlupoeWvIQ8r7
uuWnSPbzaKu22MNmFvJTpvjZyXHbW1XFNU1kBO5FndA62K1GMD3T5KOu1QHkqoCT
ot9GWIko0tp7/RNxx7BfzYI0Wn8wO7VxDH42jplhRgH4nRnecCI8Fj76ndvArp7E
LOuQCwhpeUTrrm37eswpInv++SR/xPVOsSx6qpTihx+rVMEfwQnmaXC1apa9lOA8
AevO9iRVAtkUcZQCP53XHjb1dkjCZLIPsytUbFTnIxinOhfulPdqPIA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:04:59 2026 by rpki-client