Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/FrvY4JP2iLacq07f2hX8CLMlfjU.roa
File: FrvY4JP2iLacq07f2hX8CLMlfjU.roa (raw, json)
Hash identifier: MpiHVdBjryp6MtfrC56keye70ElW/CTBHKK+RhPw8aw=
Subject key identifier: 16:BB:D8:E0:93:F6:88:B6:9C:AB:4E:DF:DA:15:FC:08:B3:25:7E:35
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01A0C85F59D529DE66FB77674E86F614D3A0
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/FrvY4JP2iLacq07f2hX8CLMlfjU.roa
Signing time: Tue 22 Sep 2026 09:08:07 +0000
ROA not before: Tue 22 Sep 2026 09:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a05:b1c0::/29 maxlen: 29
2a11:3cc0::/29 maxlen: 29
2a11:5680::/29 maxlen: 29
2a11:5e00::/29 maxlen: 29
2a12:bd00::/29 maxlen: 29
2a12:dc80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:5f:59:d5:29:de:66:fb:77:67:4e:86:f6:14:d3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Sep 22 09:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16bbd8e093f688b69cab4edfda15fc08b3257e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:fd:26:58:f4:03:1c:b0:c1:78:3b:f8:4c:
69:95:b5:cb:51:fe:08:98:c3:64:96:6e:d6:0c:e2:
29:65:59:f4:93:3d:e6:bf:82:20:e9:ff:9c:cd:09:
c7:f6:02:fe:61:84:18:bf:97:1b:e5:ac:03:69:d6:
0c:96:29:03:e8:95:5e:43:89:d7:22:11:b4:e4:dc:
2c:9f:e3:c8:2a:a8:1b:db:37:c7:10:4b:e0:1f:3d:
d4:14:e3:0f:99:53:20:eb:66:1d:9c:b9:7a:17:4e:
f2:f4:35:b5:33:be:e3:4f:1b:54:8b:d2:48:35:08:
2d:0e:a3:af:5c:16:ce:68:90:2a:da:e3:4d:79:e6:
33:8b:ca:d3:bf:5b:02:22:0c:55:17:e1:c6:e5:32:
9e:d8:dc:b1:38:68:0e:d3:e4:1a:2b:95:c2:f9:9b:
52:c1:09:9d:13:10:88:3b:d3:3a:65:87:f1:95:8e:
45:f9:85:a6:1a:cf:1d:42:68:b0:e9:64:59:38:93:
11:7b:79:70:61:4d:63:f3:82:eb:df:32:0c:ba:45:
5f:39:a2:99:5e:9c:b9:53:23:81:1a:2c:ff:16:13:
ea:8b:2b:d4:53:55:d1:52:1b:d6:12:26:96:c8:a2:
d7:04:33:cf:c2:d1:93:26:17:af:27:42:ec:8d:1f:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:D8:E0:93:F6:88:B6:9C:AB:4E:DF:DA:15:FC:08:B3:25:7E:35
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/FrvY4JP2iLacq07f2hX8CLMlfjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b1c0::/29
2a11:3cc0::/29
2a11:5680::/29
2a11:5e00::/29
2a12:bd00::/29
2a12:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
1a:8b:15:af:c8:4a:66:59:d1:8d:9c:6a:64:17:01:2b:f2:ad:
c1:cb:12:88:25:9c:74:e6:df:00:50:f6:19:a5:a3:53:b6:e6:
46:bf:ba:14:50:9a:e8:73:45:c7:ca:e3:92:9d:f6:57:65:0b:
4b:91:be:80:cb:3a:aa:f0:69:bf:cb:b0:e1:98:92:c8:43:ee:
55:c8:ab:da:f8:c1:4a:e2:0d:9a:37:27:d0:c2:2b:cb:6a:b9:
de:99:d5:9d:76:11:6f:b7:d0:01:c8:a0:bb:d7:ab:68:f4:a9:
2d:94:58:1b:2d:7c:5d:da:df:ac:03:c1:a3:df:ad:4a:ad:7c:
a5:cd:ef:62:dc:3b:76:92:ce:1d:44:af:6e:e6:4d:ce:9c:23:
78:a5:b4:26:37:8d:44:18:cd:c6:a6:8e:76:70:95:b8:b3:c6:
b6:0e:eb:47:dd:b7:42:65:56:6d:e5:4c:ca:8c:64:80:4a:4a:
dd:ee:9a:eb:67:61:9a:37:89:54:31:48:9c:52:56:e8:51:0c:
ca:d8:73:f0:bc:63:cd:9f:1c:25:f7:be:82:13:a9:ee:32:e1:
5f:44:8a:94:9b:a6:28:88:a3:77:0b:d6:03:38:2d:24:0a:ba:
01:a7:30:cc:2c:af:14:95:8b:49:a4:ab:ce:4e:8b:94:d5:bd:
77:d9:6b:1c
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaDIX1nVKd5m+3dnTob2FNOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjYwOTIyMDkwODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmJiZDhlMDkzZjY4OGI2OWNhYjRlZGZkYTE1ZmMwOGIzMjU3ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq479Jlj0AxywwXg7+ExplbXLUf4I
mMNklm7WDOIpZVn0kz3mv4Ig6f+czQnH9gL+YYQYv5cb5awDadYMlikD6JVeQ4nX
IhG05Nwsn+PIKqgb2zfHEEvgHz3UFOMPmVMg62YdnLl6F07y9DW1M77jTxtUi9JI
NQgtDqOvXBbOaJAq2uNNeeYzi8rTv1sCIgxVF+HG5TKe2NyxOGgO0+QaK5XC+ZtS
wQmdExCIO9M6ZYfxlY5F+YWmGs8dQmiw6WRZOJMRe3lwYU1j84Lr3zIMukVfOaKZ
Xpy5UyOBGiz/FhPqiyvUU1XRUhvWEiaWyKLXBDPPwtGTJhevJ0LsjR/MtQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBa72OCT9oi2nKtO39oV/AizJX41MB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvRnJ2WTRKUDJpTGFjcTA3ZjJoWDhDTE1sZmpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKgWxwAMF
AyoRPMADBQMqEVaAAwUDKhFeAAMFAyoSvQADBQMqEtyAMA0GCSqGSIb3DQEBCwUA
A4IBAQAaixWvyEpmWdGNnGpkFwEr8q3ByxKIJZx05t8AUPYZpaNTtuZGv7oUUJro
c0XHyuOSnfZXZQtLkb6Ayzqq8Gm/y7DhmJLIQ+5VyKva+MFK4g2aNyfQwivLarne
mdWddhFvt9AByKC716to9KktlFgbLXxd2t+sA8Gj361KrXylze9i3Dt2ks4dRK9u
5k3OnCN4pbQmN41EGM3Gpo52cJW4s8a2DutH3bdCZVZt5UzKjGSASkrd7prrZ2Ga
N4lUMUicUlboUQzK2HPwvGPNnxwl976CE6nuMuFfRIqUm6YoiKN3C9YDOC0kCroB
pzDMLK8UlYtJpKvOTouU1b132Wsc
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:44:09 2026 by rpki-client