Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1iBMJpIlXMLjjQkUn4nZDLczAow.roa
File: 1iBMJpIlXMLjjQkUn4nZDLczAow.roa (raw, json)
Hash identifier: 8NPnBEbUPN1SqKmDUPdeUFqBPKaBctzQ72AI7Zirisw=
Subject key identifier: D6:20:4C:26:92:25:5C:C2:E3:8D:09:14:9F:89:D9:0C:B7:33:02:8C
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01A0C8B0D6AE91E20C6DC89CF85D58B73346
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1iBMJpIlXMLjjQkUn4nZDLczAow.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a12:9880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d6:ae:91:e2:0c:6d:c8:9c:f8:5d:58:b7:33:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6204c2692255cc2e38d09149f89d90cb733028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:da:fd:15:01:e9:a9:d4:ce:05:64:6e:8f:
36:4d:d0:3c:19:86:f5:7e:87:16:af:0e:86:ca:f1:
25:5f:58:d5:e7:1c:04:3f:d4:a0:81:8d:20:8d:81:
73:79:40:0d:34:a4:5e:40:0e:a2:a5:52:a9:42:2b:
ce:58:ce:15:98:59:9b:cc:8a:a5:da:3c:27:a7:ea:
01:9b:dc:53:29:48:d3:d4:cb:e8:2c:ef:9f:5a:97:
67:ed:45:1d:48:b9:1e:1f:69:7d:cd:fc:0e:7e:cc:
02:65:f8:10:b0:93:c1:d0:c1:10:80:39:e7:42:d1:
9e:9f:9e:7f:61:b7:65:a6:db:14:e9:c8:84:ec:30:
fe:d7:17:4d:e0:ea:2b:01:94:1d:d4:64:9c:73:4a:
e7:03:f3:c3:dc:60:24:03:a5:5d:ec:13:35:8c:c5:
b9:47:15:2c:c9:7b:25:c4:46:f8:f9:01:a6:65:0d:
2d:1e:d7:bf:d5:4c:f7:e1:51:c7:e8:85:60:77:4d:
07:1d:96:66:1b:2f:ce:3a:5b:d6:86:ec:f3:0a:c0:
3b:69:e9:32:0e:34:db:0d:c7:b9:03:f3:ea:cb:76:
96:70:78:4b:69:36:28:c2:82:b8:3e:c6:0f:d0:ab:
14:7e:05:74:6e:2a:52:1d:a5:c0:e2:6f:2c:bb:db:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:20:4C:26:92:25:5C:C2:E3:8D:09:14:9F:89:D9:0C:B7:33:02:8C
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1iBMJpIlXMLjjQkUn4nZDLczAow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9880::/29
Signature Algorithm: sha256WithRSAEncryption
7d:21:0d:33:21:be:ec:12:1e:fe:df:0b:c3:ff:8a:9f:cf:01:
00:c9:c0:0b:35:55:38:da:26:c3:6a:e9:30:61:c5:4f:8e:c8:
0c:ac:21:61:7d:4d:6f:93:26:55:04:c0:1d:e8:bb:60:0a:16:
e3:18:63:e3:4f:62:78:ff:2b:1a:f3:73:2a:ee:2e:dd:aa:6c:
21:6b:ba:d2:c7:ec:ab:69:eb:07:8e:3e:55:15:80:49:d1:ae:
78:80:0b:e1:59:2a:be:77:d9:98:1d:c1:e5:d3:69:27:ae:7c:
88:c8:60:0d:48:2c:ca:e7:75:04:4a:3b:02:25:ea:35:51:93:
13:de:11:54:73:5a:25:70:61:a2:b4:08:1d:a2:b7:03:e4:9c:
ce:9b:34:0a:8f:15:b8:e5:d1:fd:d1:1d:bd:6d:2a:4b:a5:22:
5c:10:48:67:bb:9f:aa:12:69:9e:67:00:fc:c1:d9:a4:10:4e:
cc:22:24:df:4c:06:a7:4d:a7:3d:05:5c:97:a2:8f:2f:b6:ee:
90:83:2d:40:c3:a8:ef:fa:57:f2:44:04:17:9c:ae:9e:dc:4e:
92:5b:cd:2f:ed:3c:1e:36:fe:2b:a6:38:cd:08:00:45:36:77:
af:b3:cd:7b:55:85:92:61:29:b3:9d:ad:57:e3:83:8f:2a:76:
44:ef:ac:f1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDIsNaukeIMbcic+F1YtzNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjYwOTIyMTAzNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjIwNGMyNjkyMjU1Y2MyZTM4ZDA5MTQ5Zjg5ZDkwY2I3MzMwMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rba/RUB6anUzgVkbo82TdA8GYb1
focWrw6GyvElX1jV5xwEP9SggY0gjYFzeUANNKReQA6ipVKpQivOWM4VmFmbzIql
2jwnp+oBm9xTKUjT1MvoLO+fWpdn7UUdSLkeH2l9zfwOfswCZfgQsJPB0MEQgDnn
QtGen55/YbdlptsU6ciE7DD+1xdN4OorAZQd1GScc0rnA/PD3GAkA6Vd7BM1jMW5
RxUsyXslxEb4+QGmZQ0tHte/1Uz34VHH6IVgd00HHZZmGy/OOlvWhuzzCsA7aeky
DjTbDce5A/Pqy3aWcHhLaTYowoK4PsYP0KsUfgV0bipSHaXA4m8su9u7rQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNYgTCaSJVzC440JFJ+J2Qy3MwKMMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvMWlCTUpwSWxYTUxqalFrVW40blpETGN6QW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhKYgDAN
BgkqhkiG9w0BAQsFAAOCAQEAfSENMyG+7BIe/t8Lw/+Kn88BAMnACzVVONomw2rp
MGHFT47IDKwhYX1Nb5MmVQTAHei7YAoW4xhj409ieP8rGvNzKu4u3apsIWu60sfs
q2nrB44+VRWASdGueIAL4VkqvnfZmB3B5dNpJ658iMhgDUgsyud1BEo7AiXqNVGT
E94RVHNaJXBhorQIHaK3A+Sczps0Co8VuOXR/dEdvW0qS6UiXBBIZ7ufqhJpnmcA
/MHZpBBOzCIk30wGp02nPQVcl6KPL7bukIMtQMOo7/pX8kQEF5yuntxOklvNL+08
Hjb+K6Y4zQgARTZ3r7PNe1WFkmEps52tV+ODjyp2RO+s8Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:12:05 2026 by rpki-client