Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/dX7fCd5oPY9fmwZUIfcAQHfrCRs.roa
File: dX7fCd5oPY9fmwZUIfcAQHfrCRs.roa (raw, json)
Hash identifier: m88oh8owdEFH3tUoKjfEUIRkfalCTEAQLA+89duR55g=
Subject key identifier: 75:7E:DF:09:DE:68:3D:8F:5F:9B:06:54:21:F7:00:40:77:EB:09:1B
Certificate issuer: /CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Certificate serial: 01A03B9F409B55743FB0E59196803A51CE6E
Authority key identifier: 86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/dX7fCd5oPY9fmwZUIfcAQHfrCRs.roa
Signing time: Wed 26 Aug 2026 01:11:27 +0000
ROA not before: Wed 26 Aug 2026 01:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219018
IP address blocks: 2a0b:a500:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:9f:40:9b:55:74:3f:b0:e5:91:96:80:3a:51:ce:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Validity
Not Before: Aug 26 01:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=757edf09de683d8f5f9b065421f7004077eb091b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:cd:26:a5:d2:c6:4f:40:af:37:a9:3c:e2:
f7:8d:8f:7a:a9:b0:47:ec:84:a2:84:c6:7e:04:7a:
68:00:c6:ef:ae:9f:55:ee:87:7e:aa:f9:0e:d5:9f:
c3:48:8e:6d:13:27:68:22:b0:03:7b:29:7d:26:1f:
15:be:fc:35:ae:75:e4:02:5b:5c:c2:ca:e0:1f:9c:
06:f3:f3:37:ea:ab:15:c7:f6:b5:b3:da:1d:0a:99:
be:b8:89:60:29:d5:7b:bb:35:4c:aa:fa:f8:02:13:
0a:b9:be:95:f1:c6:c2:89:4b:8d:ed:97:96:c6:9b:
47:26:ab:5c:94:09:b3:ca:fd:ed:c0:d3:bc:ae:78:
fb:86:33:a7:10:9e:fc:ba:56:ef:72:e7:c5:32:72:
0b:63:06:30:cd:39:2f:ae:4d:e8:30:22:7b:1d:99:
19:45:36:a8:2c:7f:3d:14:49:7c:b2:40:8a:89:12:
69:6d:e5:bf:41:9d:7c:16:85:4a:f0:f3:1e:76:bc:
61:8b:ea:d9:29:01:87:d0:07:b7:9d:85:4d:96:a7:
f4:db:fc:46:27:c8:3a:00:09:a4:28:e9:1c:cb:7e:
b8:f3:11:10:b3:79:c4:a7:10:b5:4e:32:82:c4:83:
6a:f8:c7:65:7b:8c:d7:8d:da:d6:c4:e5:93:09:e3:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7E:DF:09:DE:68:3D:8F:5F:9B:06:54:21:F7:00:40:77:EB:09:1B
X509v3 Authority Key Identifier:
keyid:86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/dX7fCd5oPY9fmwZUIfcAQHfrCRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a500:1000::/48
Signature Algorithm: sha256WithRSAEncryption
4b:67:de:12:08:49:9e:01:9e:6a:e6:61:82:75:69:ba:a8:05:
4a:44:f5:b9:de:b7:17:1e:ad:3b:62:c0:47:7e:41:95:21:95:
d5:90:e9:4f:01:98:b0:79:f8:04:99:61:dc:d0:fe:88:bc:27:
c8:ed:8c:9f:f3:95:1c:52:cc:53:1b:e2:87:7d:37:1a:3b:11:
52:69:e0:be:79:c0:e3:b4:99:d7:f1:0d:fe:4b:a9:96:99:1f:
2d:a3:a4:9c:6f:59:02:b8:b7:6b:82:5d:80:ad:df:2b:eb:22:
1f:19:d3:33:2e:44:a2:2d:b3:6d:95:a3:6c:d1:38:5d:73:ad:
53:1e:1e:0c:18:bc:9a:b0:2c:07:62:c8:d9:d0:51:43:44:0a:
f7:b2:0f:b0:5c:fe:d9:f8:75:9d:58:7b:c7:e8:f3:79:07:80:
cb:42:fc:7d:ae:45:70:88:b6:be:06:2c:29:e2:94:76:78:30:
b8:ff:14:29:33:df:0c:6d:ed:e6:89:a7:ea:37:6e:4c:0a:00:
c9:9d:ef:47:4a:b4:ed:78:e7:10:4b:59:46:61:cd:c0:0c:f3:
b0:44:62:ce:aa:4b:60:1c:ef:f2:c3:32:79:aa:2f:01:0e:0c:
2d:86:75:0b:37:ae:ad:6d:35:f7:bf:f0:77:1d:47:71:82:61:
5f:d5:2f:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaA7n0CbVXQ/sOWRloA6Uc5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWY1MDY1MjFiNGY5YmQxZmExN2YzMDg3NjU5ZmIyYzU0
NmUwZDgwHhcNMjYwODI2MDExMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTdlZGYwOWRlNjgzZDhmNWY5YjA2NTQyMWY3MDA0MDc3ZWIwOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC3NJqXSxk9ArzepPOL3jY96qbBH
7ISihMZ+BHpoAMbvrp9V7od+qvkO1Z/DSI5tEydoIrADeyl9Jh8Vvvw1rnXkAltc
wsrgH5wG8/M36qsVx/a1s9odCpm+uIlgKdV7uzVMqvr4AhMKub6V8cbCiUuN7ZeW
xptHJqtclAmzyv3twNO8rnj7hjOnEJ78ulbvcufFMnILYwYwzTkvrk3oMCJ7HZkZ
RTaoLH89FEl8skCKiRJpbeW/QZ18FoVK8PMedrxhi+rZKQGH0Ae3nYVNlqf02/xG
J8g6AAmkKOkcy3648xEQs3nEpxC1TjKCxINq+Mdle4zXjdrWxOWTCeMaiQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHV+3wneaD2PX5sGVCH3AEB36wkbMB8GA1UdIwQY
MBaAFIbvUGUhtPm9H6F/MIdln7LFRuDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU5UVpTRzAtYjBmb1g4d2gyV2Zzc1ZHNE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83MWYwZDYtMmU2ZS00ZDExLWI4NjMt
YTYxY2E1NjQzMDIwLzEvZFg3ZkNkNW9QWTlmbXdaVUlmY0FRSGZyQ1JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83MWYwZDYtMmU2ZS00ZDExLWI4NjMtYTYxY2E1NjQzMDIw
LzEvaHU5UVpTRzAtYjBmb1g4d2gyV2Zzc1ZHNE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgulABAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBLZ94SCEmeAZ5q5mGCdWm6qAVKRPW53rcXHq07
YsBHfkGVIZXVkOlPAZiwefgEmWHc0P6IvCfI7Yyf85UcUsxTG+KHfTcaOxFSaeC+
ecDjtJnX8Q3+S6mWmR8to6Scb1kCuLdrgl2Ard8r6yIfGdMzLkSiLbNtlaNs0Thd
c61THh4MGLyasCwHYsjZ0FFDRAr3sg+wXP7Z+HWdWHvH6PN5B4DLQvx9rkVwiLa+
Biwp4pR2eDC4/xQpM98Mbe3miafqN25MCgDJne9HSrTteOcQS1lGYc3ADPOwRGLO
qktgHO/ywzJ5qi8BDgwthnULN66tbTX3v/B3HUdxgmFf1S/6
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:41 2026 by rpki-client