Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/A6OT-fb--rqUtmZHSlBfqHGwoR4.roa
File: A6OT-fb--rqUtmZHSlBfqHGwoR4.roa (raw, json)
Hash identifier: Hjob8qIhm/ZZvMCqBuLDpJpFpTEXuiZwGkh8XZDVltg=
Subject key identifier: 03:A3:93:F9:F6:FE:FA:BA:94:B6:66:47:4A:50:5F:A8:71:B0:A1:1E
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F8FA52BD90A5ECB32584D76822F151E57
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/A6OT-fb--rqUtmZHSlBfqHGwoR4.roa
Signing time: Thu 23 Jul 2026 15:43:14 +0000
ROA not before: Thu 23 Jul 2026 15:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a13:d0c5::/32 maxlen: 32
2a13:d0c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:a5:2b:d9:0a:5e:cb:32:58:4d:76:82:2f:15:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 23 15:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03a393f9f6fefaba94b666474a505fa871b0a11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:36:b4:87:ff:ef:ce:ad:00:a5:ba:63:bb:
53:af:97:c8:c9:e5:39:88:0a:67:d3:a9:1c:cb:02:
02:2f:d9:87:24:fe:41:4c:8c:1a:2f:2d:55:6a:fd:
55:92:75:9e:47:9a:a0:f4:76:0b:85:c0:08:2f:31:
43:4d:ca:4a:7d:55:61:71:40:16:c6:8c:79:7c:86:
83:34:3c:60:e1:3c:18:4b:75:fa:48:e4:5a:ef:61:
32:24:3f:90:fb:43:bd:47:24:68:23:1c:a7:10:31:
89:62:c1:6c:eb:6c:bd:7b:ba:69:07:f7:c7:9f:3e:
b6:0f:3e:96:94:63:7a:eb:c8:74:de:36:d9:f2:71:
b9:8a:e4:9e:d8:b6:50:d5:d4:a0:73:af:7e:97:b3:
c4:a7:20:5c:57:7e:b9:37:e2:45:45:cc:dd:57:b1:
1d:de:66:f5:dc:7f:a1:ea:09:c9:a0:38:a8:2a:07:
f6:57:6b:74:75:0d:0e:6c:62:9e:7f:67:39:1d:2b:
2d:d1:7e:46:32:9b:fc:ca:46:2b:fe:3d:87:85:94:
68:07:e3:d5:74:51:a2:75:f9:a8:1b:d8:46:e9:99:
3d:43:45:36:bb:81:ea:dd:0e:66:59:79:6a:7d:63:
f4:69:08:06:b0:ec:ee:65:15:a7:1c:b7:f6:cd:8b:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:93:F9:F6:FE:FA:BA:94:B6:66:47:4A:50:5F:A8:71:B0:A1:1E
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/A6OT-fb--rqUtmZHSlBfqHGwoR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d0c5::/32
2a13:d0c7::/32
Signature Algorithm: sha256WithRSAEncryption
8f:27:3e:56:75:03:12:02:13:df:58:8c:c3:07:9a:fb:00:58:
57:97:ff:4e:75:54:46:c3:ce:03:4a:8c:b4:ad:d9:1c:24:ac:
da:e4:3a:32:1a:d1:0c:56:b1:d4:ae:58:aa:f3:c8:e5:d6:04:
6a:fd:aa:fd:0f:10:f8:06:cc:4e:98:0c:0c:74:f6:4f:72:f7:
ef:0f:ba:0c:96:24:aa:40:ae:8f:85:04:e0:d8:20:e6:e2:56:
a4:6f:87:b5:86:74:fb:15:fe:28:8d:60:75:93:9f:d9:e6:03:
12:78:28:9d:55:0e:a5:69:36:ec:e6:a0:03:66:1c:36:51:2e:
0b:5a:de:02:a2:b0:a8:6c:04:95:7e:bc:f7:6c:2d:30:8d:8d:
27:4b:8e:f6:00:d4:22:89:e6:5e:d6:ed:c6:ec:03:4e:db:d9:
87:51:ad:46:3b:72:f6:48:17:42:d3:df:81:6d:6c:42:f7:d9:
4f:9c:e4:01:43:0e:e0:27:72:f9:8e:24:18:b3:ab:d5:6a:fb:
27:a9:d3:37:e0:8c:23:8d:e8:af:a1:df:c0:78:c3:a5:86:a0:
7f:08:ad:84:13:5e:ed:6c:8a:a6:a8:86:6b:4d:15:78:b2:63:
53:00:b5:73:2a:8d:bd:ae:d9:8b:de:8e:e3:d3:4a:18:b8:10:
e7:d5:f1:0a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ+PpSvZCl7LMlhNdoIvFR5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwNzIzMTU0MzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2EzOTNmOWY2ZmVmYWJhOTRiNjY2NDc0YTUwNWZhODcxYjBhMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxes2tIf/786tAKW6Y7tTr5fIyeU5
iApn06kcywICL9mHJP5BTIwaLy1Vav1VknWeR5qg9HYLhcAILzFDTcpKfVVhcUAW
xox5fIaDNDxg4TwYS3X6SORa72EyJD+Q+0O9RyRoIxynEDGJYsFs62y9e7ppB/fH
nz62Dz6WlGN668h03jbZ8nG5iuSe2LZQ1dSgc69+l7PEpyBcV365N+JFRczdV7Ed
3mb13H+h6gnJoDioKgf2V2t0dQ0ObGKef2c5HSst0X5GMpv8ykYr/j2HhZRoB+PV
dFGidfmoG9hG6Zk9Q0U2u4Hq3Q5mWXlqfWP0aQgGsOzuZRWnHLf2zYvz0wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAOjk/n2/vq6lLZmR0pQX6hxsKEeMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvQTZPVC1mYi0tcnFVdG1aSFNsQmZxSEd3b1I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhPQxQMF
ACoT0McwDQYJKoZIhvcNAQELBQADggEBAI8nPlZ1AxICE99YjMMHmvsAWFeX/051
VEbDzgNKjLSt2RwkrNrkOjIa0QxWsdSuWKrzyOXWBGr9qv0PEPgGzE6YDAx09k9y
9+8PugyWJKpAro+FBODYIObiVqRvh7WGdPsV/iiNYHWTn9nmAxJ4KJ1VDqVpNuzm
oANmHDZRLgta3gKisKhsBJV+vPdsLTCNjSdLjvYA1CKJ5l7W7cbsA07b2YdRrUY7
cvZIF0LT34FtbEL32U+c5AFDDuAncvmOJBizq9Vq+yep0zfgjCON6K+h38B4w6WG
oH8IrYQTXu1siqaohmtNFXiyY1MAtXMqjb2u2YvejuPTShi4EOfV8Qo=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:47 2026 by rpki-client