Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa
File: ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa (raw, json)
Hash identifier: lZ1vDi/rrrr51AW0R6YsNcHKSikuFPwLBuW6UAowH/0=
Subject key identifier: 11:35:4E:78:D7:40:5C:63:20:94:C8:BD:69:22:77:45:A0:D6:43:A9
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019F236852633906BDC3DFE32CEEC61AD47B
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202590
IP address blocks: 2a04:5d00:70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:52:63:39:06:bd:c3:df:e3:2c:ee:c6:1a:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11354e78d7405c632094c8bd69227745a0d643a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:1c:30:0e:3a:73:0e:06:78:72:de:18:ed:
25:ba:da:f5:7e:72:19:c2:0a:c7:7a:ba:a3:dd:bf:
df:cb:bc:09:61:6f:60:9d:58:de:8f:54:3d:8e:8d:
26:65:b2:48:b2:de:9e:6d:cf:0a:78:a8:88:f9:92:
ed:7f:8f:b7:c8:59:7f:b9:f6:58:18:3b:a9:c4:6a:
f1:30:0f:2b:65:d9:cd:44:2e:5f:ad:87:6e:fd:2e:
7a:f8:ed:eb:8d:05:28:39:42:40:a7:92:59:51:07:
b9:4a:c7:6f:9a:b1:7c:f8:da:78:ce:75:fb:48:cc:
1a:5a:2d:08:b0:e4:a4:2a:53:6c:00:d9:37:4e:47:
86:89:2c:af:f6:fc:b9:15:cf:8a:b5:36:52:23:da:
d0:05:03:e2:77:27:00:b0:6f:19:bc:f7:e0:52:50:
21:0c:59:17:57:6f:38:b6:86:95:12:6e:b1:75:a9:
83:3e:1d:4f:aa:a6:2c:91:9b:d8:18:5b:4b:2f:b9:
8f:40:c3:65:0a:30:8a:dc:a9:5d:56:4f:f4:09:b1:
84:2c:0d:ea:7b:1a:3e:0c:0d:ff:f1:0f:c9:b2:c8:
54:56:7a:e7:c8:99:a2:eb:33:30:8c:44:d8:2b:b9:
8c:cf:50:18:9e:6c:e9:d6:6f:fb:7d:0d:00:a0:33:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:4E:78:D7:40:5C:63:20:94:C8:BD:69:22:77:45:A0:D6:43:A9
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5d00:70::/48
Signature Algorithm: sha256WithRSAEncryption
94:d4:4f:04:93:64:47:57:77:26:1a:41:a4:c2:62:90:10:16:
f8:44:a7:7c:e5:da:2b:ba:99:da:77:2b:6b:65:82:c7:14:e7:
63:5d:1d:b6:9e:d2:dc:52:cd:56:a1:61:15:2e:ad:25:f5:68:
ff:a8:c6:ea:a3:2d:9c:33:02:64:07:93:5c:fe:07:b9:5a:fe:
71:cc:04:e4:15:84:70:9a:16:20:0f:08:c5:93:96:f9:a2:fb:
30:d4:36:96:72:06:bf:8b:8a:08:27:7c:9d:dc:18:15:b8:8e:
29:34:b3:d0:d9:96:86:f1:66:84:1d:ad:3a:36:a2:0b:b8:bc:
4b:f3:22:fa:61:eb:20:35:79:4c:76:54:a4:dc:7d:b2:f6:71:
e7:be:78:6a:ec:ef:5e:11:6d:57:43:26:0c:78:9b:42:1a:fb:
dd:7d:b5:5b:e3:52:be:5d:f2:d3:0b:83:38:f1:0d:ec:d1:a8:
db:41:f6:7a:7c:73:6f:0b:1f:01:c7:06:ce:6f:85:82:eb:c3:
18:35:b7:54:6e:8e:0c:0d:0b:a7:26:d1:cb:1e:ca:79:99:eb:
ce:bd:6d:be:f1:5d:df:28:4e:d7:51:5c:41:f4:04:13:3a:b4:
0a:aa:db:7d:3c:c9:93:e0:aa:ff:4f:9c:a3:e4:aa:f5:31:b6:
65:9f:4e:9d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaFJjOQa9w9/jLO7GGtR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjgzNTc2MGUxNDJhY2VhNGJmMGE3ZmY4YWU3Njc2OGY1
ZGNkYzcwHhcNMjYwNzAyMTUxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTM1NGU3OGQ3NDA1YzYzMjA5NGM4YmQ2OTIyNzc0NWEwZDY0M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJMcMA46cw4GeHLeGO0lutr1fnIZ
wgrHerqj3b/fy7wJYW9gnVjej1Q9jo0mZbJIst6ebc8KeKiI+ZLtf4+3yFl/ufZY
GDupxGrxMA8rZdnNRC5frYdu/S56+O3rjQUoOUJAp5JZUQe5SsdvmrF8+Np4znX7
SMwaWi0IsOSkKlNsANk3TkeGiSyv9vy5Fc+KtTZSI9rQBQPidycAsG8ZvPfgUlAh
DFkXV284toaVEm6xdamDPh1PqqYskZvYGFtLL7mPQMNlCjCK3KldVk/0CbGELA3q
exo+DA3/8Q/JsshUVnrnyJmi6zMwjETYK7mMz1AYnmzp1m/7fQ0AoDNKjQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBE1TnjXQFxjIJTIvWkid0Wg1kOpMB8GA1UdIwQY
MBaAFAH4NXYOFCrOpL8Kf/iudnaPXc3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZnMWRnNFVLczZrdndwXy1LNTJkbzlkemNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvRVRWT2VOZEFYR01nbE1pOWFTSjNSYURXUTZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvQWZnMWRnNFVLczZrdndwXy1LNTJkbzlkemNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRdAABw
MA0GCSqGSIb3DQEBCwUAA4IBAQCU1E8Ek2RHV3cmGkGkwmKQEBb4RKd85dorupna
dytrZYLHFOdjXR22ntLcUs1WoWEVLq0l9Wj/qMbqoy2cMwJkB5Nc/ge5Wv5xzATk
FYRwmhYgDwjFk5b5ovsw1DaWcga/i4oIJ3yd3BgVuI4pNLPQ2ZaG8WaEHa06NqIL
uLxL8yL6YesgNXlMdlSk3H2y9nHnvnhq7O9eEW1XQyYMeJtCGvvdfbVb41K+XfLT
C4M48Q3s0ajbQfZ6fHNvCx8BxwbOb4WC68MYNbdUbo4MDQunJtHLHsp5mevOvW2+
8V3fKE7XUVxB9AQTOrQKqtt9PMmT4Kr/T5yj5Kr1MbZln06d
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:04 2026 by rpki-client