Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/N2ndGpXf-utuXMpVW3U1_7pDn-w.roa
File: N2ndGpXf-utuXMpVW3U1_7pDn-w.roa (raw, json)
Hash identifier: LZMGg6JvCLMnGsBEYHeXewXwFkLcZk6xf4xWfxV0L98=
Subject key identifier: 37:69:DD:1A:95:DF:FA:EB:6E:5C:CA:55:5B:75:35:FF:BA:43:9F:EC
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019E1A6880A40BA7B854A64AE3EC67027176
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/N2ndGpXf-utuXMpVW3U1_7pDn-w.roa
Signing time: Tue 12 May 2026 04:18:36 +0000
ROA not before: Tue 12 May 2026 04:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62563
IP address blocks: 2a10:7ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:68:80:a4:0b:a7:b8:54:a6:4a:e3:ec:67:02:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: May 12 04:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3769dd1a95dffaeb6e5cca555b7535ffba439fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:85:bb:af:20:01:2b:15:fb:bf:59:7d:d5:
ee:70:59:14:71:dc:b4:ad:52:f8:ac:dd:a9:60:24:
37:f3:7c:40:0d:9c:8d:03:e6:82:fa:23:05:16:b1:
07:6c:04:30:57:54:4b:fa:31:4f:eb:b5:f4:65:f9:
82:f9:f8:2f:17:44:c1:8a:11:a4:ce:fe:df:7b:78:
a8:fe:a6:0d:38:ec:cd:81:3c:1f:48:94:7a:39:49:
2f:d4:5c:89:91:8d:34:dd:59:3f:83:55:1b:ba:39:
3d:b7:27:e2:86:32:96:f2:48:ff:b5:2e:a7:77:37:
db:54:37:c7:18:41:ae:a7:4a:f6:79:50:70:83:65:
14:9b:11:33:7d:35:9e:d6:a0:8a:5f:be:92:cf:bc:
6d:b7:9c:6f:cf:b3:02:74:1d:d3:e0:96:c2:fa:33:
ae:c9:20:ac:f0:9c:60:56:e8:1f:30:c5:67:fc:88:
cc:50:af:9d:5f:e9:9d:b2:93:be:87:0b:56:79:90:
b7:21:a7:d5:ff:06:d7:f7:1b:4c:5d:37:2a:2b:94:
93:bf:c6:6e:9c:98:54:38:6b:90:20:16:ae:7a:91:
95:85:83:9b:b6:77:6d:cd:49:8b:3b:95:76:fe:dc:
35:2b:2b:ad:36:bd:44:b2:6f:fe:e9:36:29:c2:07:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:69:DD:1A:95:DF:FA:EB:6E:5C:CA:55:5B:75:35:FF:BA:43:9F:EC
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/N2ndGpXf-utuXMpVW3U1_7pDn-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7ac0::/29
Signature Algorithm: sha256WithRSAEncryption
03:fd:09:c6:02:cf:97:b4:9d:19:c8:6b:81:81:e4:71:57:6f:
52:31:b3:a4:51:e0:9d:e2:3f:38:41:c9:0e:53:30:4c:d6:ad:
74:63:92:86:ea:d7:01:a5:8e:b9:b4:e5:c7:4d:b4:34:98:7a:
11:f5:1f:ab:ba:6a:fc:23:c7:b8:3e:13:89:7f:1d:6c:2a:a6:
ef:1c:94:e1:9f:a4:43:01:36:b6:a4:61:ab:ba:24:02:95:0b:
9c:03:9f:f4:b0:02:6f:56:7d:bd:ec:cf:2d:cd:4d:5a:a0:cc:
b9:f6:c1:42:c9:5c:86:3d:a4:8e:19:cd:4a:ac:d5:90:ef:23:
6e:eb:32:ed:a4:1c:42:eb:e2:f5:19:34:83:06:d5:0d:5f:b5:
5d:8e:df:be:ca:42:ae:50:93:b2:78:25:8d:55:62:2b:1c:73:
60:42:c8:1f:e6:a6:39:d9:31:ac:37:8c:fb:c7:6d:01:43:a1:
aa:34:da:ab:f4:96:a6:97:a2:62:ab:c6:43:83:47:1c:3c:6e:
d9:bc:dd:9c:72:19:84:10:28:83:55:53:78:e5:75:e0:bf:75:
b5:26:9b:c2:44:1c:d0:7a:5b:80:b9:7a:2e:db:8c:ac:b7:22:
91:32:74:79:2a:6a:51:f1:aa:78:fb:93:91:eb:b7:a0:19:b7:
24:a5:cc:92
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ4aaICkC6e4VKZK4+xnAnF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwNTEyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY5ZGQxYTk1ZGZmYWViNmU1Y2NhNTU1Yjc1MzVmZmJhNDM5ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH+Fu68gASsV+79ZfdXucFkUcdy0
rVL4rN2pYCQ383xADZyNA+aC+iMFFrEHbAQwV1RL+jFP67X0ZfmC+fgvF0TBihGk
zv7fe3io/qYNOOzNgTwfSJR6OUkv1FyJkY003Vk/g1Ubujk9tyfihjKW8kj/tS6n
dzfbVDfHGEGup0r2eVBwg2UUmxEzfTWe1qCKX76Sz7xtt5xvz7MCdB3T4JbC+jOu
ySCs8JxgVugfMMVn/IjMUK+dX+mdspO+hwtWeZC3IafV/wbX9xtMXTcqK5STv8Zu
nJhUOGuQIBauepGVhYObtndtzUmLO5V2/tw1KyutNr1Esm/+6TYpwgdFvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDdp3RqV3/rrblzKVVt1Nf+6Q5/sMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvTjJuZEdwWGYtdXR1WE1wVlczVTFfN3BEbi13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhB6wDAN
BgkqhkiG9w0BAQsFAAOCAQEAA/0JxgLPl7SdGchrgYHkcVdvUjGzpFHgneI/OEHJ
DlMwTNatdGOShurXAaWOubTlx020NJh6EfUfq7pq/CPHuD4TiX8dbCqm7xyU4Z+k
QwE2tqRhq7okApULnAOf9LACb1Z9vezPLc1NWqDMufbBQslchj2kjhnNSqzVkO8j
busy7aQcQuvi9Rk0gwbVDV+1XY7fvspCrlCTsngljVViKxxzYELIH+amOdkxrDeM
+8dtAUOhqjTaq/SWppeiYqvGQ4NHHDxu2bzdnHIZhBAog1VTeOV14L91tSabwkQc
0HpbgLl6LtuMrLcikTJ0eSpqUfGqePuTkeu3oBm3JKXMkg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:02:54 2026 by rpki-client