Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_HEEL6r_CEdMWHwMFgdgvsOkNpA.roa
File: _HEEL6r_CEdMWHwMFgdgvsOkNpA.roa (raw, json)
Hash identifier: s3WwQf1eo+tn3EROi9fXf5nzEya9TzfrM976esU5yl0=
Subject key identifier: FC:71:04:2F:AA:FF:08:47:4C:58:7C:0C:16:07:60:BE:C3:A4:36:90
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C8B0D59745408A546F42E63802D2A7DE
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_HEEL6r_CEdMWHwMFgdgvsOkNpA.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a11:5340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d5:97:45:40:8a:54:6f:42:e6:38:02:d2:a7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc71042faaff08474c587c0c160760bec3a43690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:c0:16:36:37:a7:f6:94:9b:d8:56:c8:0a:
ad:c5:c3:4e:ad:80:52:3b:f5:cc:12:f8:c3:e0:f6:
2d:b5:00:d5:da:e3:72:b5:41:2f:57:2d:bb:99:71:
c7:19:6d:f3:56:11:25:05:76:ab:ee:bd:30:6d:f8:
a6:55:a6:84:7e:f8:8b:16:2a:4e:8a:b7:9c:6b:e7:
18:9a:e1:ee:ba:38:53:86:c0:18:00:c9:66:c4:ed:
d8:78:f1:a6:c7:65:af:81:aa:47:bf:44:8c:5d:17:
ee:dc:46:37:97:72:ab:29:11:00:68:99:55:94:e6:
e7:da:7d:4f:7f:52:46:12:d4:36:91:5f:81:53:27:
fc:9f:ec:10:78:70:b3:ea:52:64:f8:78:be:68:e3:
5b:b2:56:5a:94:22:2a:49:38:79:a3:1c:07:07:ac:
a2:ab:2b:1d:5b:3a:69:be:2f:a6:43:b4:12:13:b7:
7d:bc:36:7e:f4:85:91:76:79:2c:c9:c6:13:7f:32:
64:4e:e7:a9:5a:18:93:81:9e:1a:e5:58:8e:6c:3f:
18:8b:32:45:40:43:42:56:96:49:bb:44:27:11:a6:
11:0d:55:e4:a7:bb:13:9f:49:2f:5c:37:5c:f0:10:
17:9b:b6:76:e2:9b:d0:45:c6:35:67:ba:f0:d9:55:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:71:04:2F:AA:FF:08:47:4C:58:7C:0C:16:07:60:BE:C3:A4:36:90
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/_HEEL6r_CEdMWHwMFgdgvsOkNpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5340::/29
Signature Algorithm: sha256WithRSAEncryption
2f:d4:46:d1:8f:f5:b5:a5:25:aa:07:54:e9:ad:a9:72:5f:ae:
7b:fc:92:35:60:bf:b3:a0:9e:0e:c0:e9:c9:26:73:84:31:a7:
45:11:bc:bc:16:c5:44:d0:ec:78:f5:bb:ac:03:03:96:6b:49:
ce:90:35:8c:36:c3:a3:53:ce:da:de:9d:a5:57:4e:e5:69:4a:
48:12:b8:ab:fa:fd:e2:24:17:94:00:ad:71:95:1c:4f:d3:2d:
0a:4f:12:4e:0d:e1:29:9e:b7:e4:08:83:02:27:e6:39:84:2b:
2c:bd:33:16:33:6a:e3:5b:a1:32:72:35:72:af:15:a9:fa:84:
ac:3a:cc:3e:87:87:18:07:08:54:d4:fe:03:f1:17:ea:e6:4e:
10:06:60:35:c1:2e:9a:f1:a5:59:28:51:09:65:14:f1:6d:57:
e1:a7:a7:93:34:e7:7a:0f:de:cd:62:ad:db:74:c1:3b:38:7e:
d7:e4:45:45:db:cc:34:35:21:b5:71:18:f3:90:fb:cb:7a:b7:
3f:a8:13:ef:ea:59:bf:14:a7:ff:15:dd:01:85:fb:7f:02:ff:
a6:49:17:20:79:9b:63:44:2c:cf:ad:61:cf:21:50:40:45:f7:
e7:71:ec:ee:25:b8:fc:d1:f8:ee:a8:dc:cb:80:5d:56:52:dd:
7c:0d:60:2b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDIsNWXRUCKVG9C5jgC0qfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjYwOTIyMTAzNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzcxMDQyZmFhZmYwODQ3NGM1ODdjMGMxNjA3NjBiZWMzYTQzNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySDAFjY3p/aUm9hWyAqtxcNOrYBS
O/XMEvjD4PYttQDV2uNytUEvVy27mXHHGW3zVhElBXar7r0wbfimVaaEfviLFipO
ireca+cYmuHuujhThsAYAMlmxO3YePGmx2WvgapHv0SMXRfu3EY3l3KrKREAaJlV
lObn2n1Pf1JGEtQ2kV+BUyf8n+wQeHCz6lJk+Hi+aONbslZalCIqSTh5oxwHB6yi
qysdWzppvi+mQ7QSE7d9vDZ+9IWRdnksycYTfzJkTuepWhiTgZ4a5ViObD8YizJF
QENCVpZJu0QnEaYRDVXkp7sTn0kvXDdc8BAXm7Z24pvQRcY1Z7rw2VWxfwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPxxBC+q/whHTFh8DBYHYL7DpDaQMB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvX0hFRUw2cl9DRWRNV0h3TUZnZGd2c09rTnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFTQDAN
BgkqhkiG9w0BAQsFAAOCAQEAL9RG0Y/1taUlqgdU6a2pcl+ue/ySNWC/s6CeDsDp
ySZzhDGnRRG8vBbFRNDsePW7rAMDlmtJzpA1jDbDo1PO2t6dpVdO5WlKSBK4q/r9
4iQXlACtcZUcT9MtCk8STg3hKZ635AiDAifmOYQrLL0zFjNq41uhMnI1cq8VqfqE
rDrMPoeHGAcIVNT+A/EX6uZOEAZgNcEumvGlWShRCWUU8W1X4aenkzTneg/ezWKt
23TBOzh+1+RFRdvMNDUhtXEY85D7y3q3P6gT7+pZvxSn/xXdAYX7fwL/pkkXIHmb
Y0Qsz61hzyFQQEX353Hs7iW4/NH47qjcy4BdVlLdfA1gKw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:46:43 2026 by rpki-client