Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/v7sb-ddXVntsBTLD_1XCaXcDAcQ.roa
File: v7sb-ddXVntsBTLD_1XCaXcDAcQ.roa (raw, json)
Hash identifier: biM1aFHbCZlBUo4OzDJSYEHppH1aAPsD2cIhIW+wz1U=
Subject key identifier: BF:BB:1B:F9:D7:57:56:7B:6C:05:32:C3:FF:55:C2:69:77:03:01:C4
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C89CF3DB6EECD35C2DCACF540F7E385A
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/v7sb-ddXVntsBTLD_1XCaXcDAcQ.roa
Signing time: Tue 22 Sep 2026 10:15:24 +0000
ROA not before: Tue 22 Sep 2026 10:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402402
IP address blocks: 2a11:1e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:9c:f3:db:6e:ec:d3:5c:2d:ca:cf:54:0f:7e:38:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfbb1bf9d757567b6c0532c3ff55c269770301c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:32:a1:f9:34:21:d8:a3:f2:6c:ac:52:08:
f2:b0:4b:ee:29:e5:71:28:4d:9b:a0:f4:c7:57:b0:
65:73:11:18:0d:75:07:36:7d:61:00:a9:03:5a:aa:
eb:75:39:a0:56:a6:d7:07:12:59:38:e9:6d:dd:c2:
04:e6:af:2e:ae:d8:35:6c:73:8e:ee:20:04:a0:7a:
a7:3c:e7:43:7f:2a:1a:6c:df:77:c3:40:11:f2:54:
88:2b:5f:c6:14:03:61:3b:be:10:c2:b3:61:a1:09:
0a:09:02:1c:dd:e1:4e:bc:aa:e6:31:7f:5e:01:f7:
6a:78:95:d5:de:a5:82:20:36:31:8a:a7:5c:19:da:
73:75:47:f5:23:09:5e:78:ec:00:23:1e:eb:a4:10:
3c:64:14:67:11:61:8d:88:bf:17:52:58:d7:3a:1e:
73:c0:f2:5b:2b:0c:b7:0c:90:96:e5:f1:6e:db:1b:
28:24:0c:1e:74:43:18:c0:c5:5f:26:de:aa:cc:dc:
d0:b2:07:0a:0d:80:16:1a:19:10:d7:6b:9d:d3:f6:
7d:ee:9d:64:55:bb:11:d8:17:eb:f4:8f:ba:0e:f5:
67:a5:a9:23:82:86:9e:62:cd:0b:de:6f:da:68:a5:
ea:01:00:e4:45:70:aa:cc:ae:56:bc:c6:76:2e:b4:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:1B:F9:D7:57:56:7B:6C:05:32:C3:FF:55:C2:69:77:03:01:C4
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/v7sb-ddXVntsBTLD_1XCaXcDAcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
21:58:8b:7b:ad:26:78:45:02:21:79:a5:a0:d6:c1:78:f1:f4:
b1:fc:89:aa:90:36:98:b8:52:ba:9e:69:bb:95:1c:c3:71:ea:
c6:c8:9e:aa:71:19:c8:54:e6:8e:81:66:3c:cb:7e:d2:42:68:
a1:b7:50:00:26:6b:4d:58:b7:66:42:b0:56:2d:d1:fc:18:b9:
9c:d7:63:e9:25:b1:fd:61:15:ae:be:78:c5:8e:e0:93:de:89:
e1:c5:0d:d5:ba:86:11:3a:20:dc:0a:f8:84:09:c8:56:67:13:
6f:7f:6d:2b:c8:06:6d:cf:91:56:af:a8:65:35:52:d5:e1:c5:
aa:81:89:d4:d4:43:4d:61:7f:d0:32:e5:15:c2:7f:11:55:6f:
8c:e7:36:6f:d7:9e:31:3f:a8:c6:9d:62:0f:9c:35:3f:68:6a:
57:8b:b7:a0:a9:8c:b1:8f:d3:c0:34:be:ed:29:4b:7a:90:b1:
1a:51:05:85:9a:0f:4e:51:2b:b2:67:cb:cb:fd:be:f3:a2:88:
db:cc:92:36:91:b3:56:e0:f3:ac:f6:01:01:23:fa:a2:a0:e1:
77:df:d5:58:4c:34:fe:c4:fd:9d:80:bd:af:84:79:f6:32:be:
4b:67:7b:18:46:bc:d1:58:53:d8:cf:00:75:37:e2:26:44:41:
6f:00:c4:1d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDInPPbbuzTXC3Kz1QPfjhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwOTIyMTAxNTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmJiMWJmOWQ3NTc1NjdiNmMwNTMyYzNmZjU1YzI2OTc3MDMwMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfMyofk0Idij8mysUgjysEvuKeVx
KE2boPTHV7BlcxEYDXUHNn1hAKkDWqrrdTmgVqbXBxJZOOlt3cIE5q8urtg1bHOO
7iAEoHqnPOdDfyoabN93w0AR8lSIK1/GFANhO74QwrNhoQkKCQIc3eFOvKrmMX9e
AfdqeJXV3qWCIDYxiqdcGdpzdUf1IwleeOwAIx7rpBA8ZBRnEWGNiL8XUljXOh5z
wPJbKwy3DJCW5fFu2xsoJAwedEMYwMVfJt6qzNzQsgcKDYAWGhkQ12ud0/Z97p1k
VbsR2Bfr9I+6DvVnpakjgoaeYs0L3m/aaKXqAQDkRXCqzK5WvMZ2LrT4vwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFL+7G/nXV1Z7bAUyw/9Vwml3AwHEMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvdjdzYi1kZFhWbnRzQlRMRF8xWENhWGNEQWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhEegDAN
BgkqhkiG9w0BAQsFAAOCAQEAIViLe60meEUCIXmloNbBePH0sfyJqpA2mLhSup5p
u5Ucw3HqxsieqnEZyFTmjoFmPMt+0kJoobdQACZrTVi3ZkKwVi3R/Bi5nNdj6SWx
/WEVrr54xY7gk96J4cUN1bqGETog3Ar4hAnIVmcTb39tK8gGbc+RVq+oZTVS1eHF
qoGJ1NRDTWF/0DLlFcJ/EVVvjOc2b9eeMT+oxp1iD5w1P2hqV4u3oKmMsY/TwDS+
7SlLepCxGlEFhZoPTlErsmfLy/2+86KI28ySNpGzVuDzrPYBASP6oqDhd9/VWEw0
/sT9nYC9r4R59jK+S2d7GEa80VhT2M8AdTfiJkRBbwDEHQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:11:00 2026 by rpki-client