Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/m5xvyqWguiM9o_m2SNXo8CXYn_Y.roa
File: m5xvyqWguiM9o_m2SNXo8CXYn_Y.roa (raw, json)
Hash identifier: L1ifCZ/lpcCqhfhywoza60yVvKF8HYMbgjCFz4+qb5Q=
Subject key identifier: 9B:9C:6F:CA:A5:A0:BA:23:3D:A3:F9:B6:48:D5:E8:F0:25:D8:9F:F6
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019A0D272EE21B50C4A9FE49F6E6B24009A5
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/m5xvyqWguiM9o_m2SNXo8CXYn_Y.roa
Signing time: Wed 22 Oct 2025 18:21:02 +0000
ROA not before: Wed 22 Oct 2025 18:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6886
IP address blocks: 2a09:10c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:27:2e:e2:1b:50:c4:a9:fe:49:f6:e6:b2:40:09:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Oct 22 18:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b9c6fcaa5a0ba233da3f9b648d5e8f025d89ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b7:f6:5b:5a:9f:7f:06:f4:6b:df:2e:24:c7:
3b:7b:a1:27:55:8a:45:8a:ab:a3:b4:e1:ab:e9:60:
aa:13:76:18:d4:5c:6d:14:89:71:5e:f8:34:69:98:
3a:9d:91:bb:c6:40:b0:6f:f8:ca:c2:5d:13:64:7e:
ed:75:9e:cb:91:00:da:05:96:93:31:b8:2e:82:31:
fe:84:b0:4e:bf:c3:03:b4:f0:8d:00:61:4d:30:36:
42:a9:c4:bb:9e:5c:02:fc:b8:fe:6e:5c:af:3a:2c:
e7:db:69:06:ad:cb:eb:80:13:3b:ce:68:84:fe:2f:
08:7d:30:6f:f8:bf:42:2f:a4:c2:b9:0b:77:f7:d6:
e2:5a:ca:cf:d5:3c:c0:51:3e:72:3c:17:f2:b8:8b:
2c:f0:2a:f5:45:22:af:2b:3c:cd:d1:d8:6c:dd:5b:
68:91:51:34:05:50:8a:f8:44:7d:97:03:c5:b5:64:
9c:15:be:c0:8e:61:ef:7e:3a:0b:77:0b:68:63:d3:
5c:2a:74:6e:3d:84:e0:b7:6b:12:db:17:2e:2c:e7:
fc:ba:cc:da:3f:e6:70:3d:30:12:71:8c:ad:9c:72:
62:20:e1:02:ac:5a:34:fa:b9:50:6b:14:2d:90:43:
a0:4c:76:58:8e:89:c7:6c:ba:00:db:09:82:53:ae:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:6F:CA:A5:A0:BA:23:3D:A3:F9:B6:48:D5:E8:F0:25:D8:9F:F6
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/m5xvyqWguiM9o_m2SNXo8CXYn_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:01:bb:86:a8:8d:71:32:e0:b6:32:9f:4b:8f:d9:95:25:b6:
2f:c6:7a:b0:db:94:1a:65:ae:fe:2a:df:c3:28:8c:9d:96:27:
6d:50:bf:1a:ea:6a:ac:13:94:f9:f0:98:ed:bc:00:4c:56:73:
e7:ab:53:35:46:e6:b8:f6:ea:ab:1f:e1:08:2e:b0:83:2a:75:
52:7f:73:49:a8:0d:36:04:5f:6e:a8:09:b2:5d:4b:4b:01:bf:
97:05:f0:29:f0:be:9a:08:86:aa:70:00:59:49:58:5e:85:67:
a4:6d:54:bb:d8:9f:1d:68:b0:d1:de:a0:4c:36:f2:f1:90:b3:
31:59:fb:9e:b4:6c:bc:8e:aa:c0:f4:67:d0:8c:ab:70:e5:c1:
a3:5c:6d:cd:50:cb:8a:d5:8c:05:3c:67:11:09:ee:e1:01:ae:
29:63:ca:ff:e6:eb:ef:5c:6d:e9:54:99:a6:10:34:86:57:85:
5a:90:39:96:3c:c6:ae:99:dd:57:b1:f8:01:4a:37:d3:fc:01:
74:f1:c7:ec:b1:73:06:4d:d8:f7:18:10:9e:fe:b5:bd:45:7f:
6e:f8:a4:eb:85:ee:f5:25:bb:a4:45:94:ff:d9:c7:e5:41:f8:
36:23:88:2c:1e:6e:6c:6e:b1:b9:1b:cd:44:40:de:c7:d0:0a:
5d:cd:16:c2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZoNJy7iG1DEqf5J9uayQAmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjUxMDIyMTgyMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjljNmZjYWE1YTBiYTIzM2RhM2Y5YjY0OGQ1ZThmMDI1ZDg5ZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bf2W1qffwb0a98uJMc7e6EnVYpF
iqujtOGr6WCqE3YY1FxtFIlxXvg0aZg6nZG7xkCwb/jKwl0TZH7tdZ7LkQDaBZaT
MbgugjH+hLBOv8MDtPCNAGFNMDZCqcS7nlwC/Lj+blyvOizn22kGrcvrgBM7zmiE
/i8IfTBv+L9CL6TCuQt399biWsrP1TzAUT5yPBfyuIss8Cr1RSKvKzzN0dhs3Vto
kVE0BVCK+ER9lwPFtWScFb7AjmHvfjoLdwtoY9NcKnRuPYTgt2sS2xcuLOf8usza
P+ZwPTAScYytnHJiIOECrFo0+rlQaxQtkEOgTHZYjonHbLoA2wmCU66LmQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJucb8qloLojPaP5tkjV6PAl2J/2MB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEvbTV4dnlxV2d1aU05b19tMlNOWG84Q1hZbl9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgkQwDAN
BgkqhkiG9w0BAQsFAAOCAQEAbwG7hqiNcTLgtjKfS4/ZlSW2L8Z6sNuUGmWu/irf
wyiMnZYnbVC/GupqrBOU+fCY7bwATFZz56tTNUbmuPbqqx/hCC6wgyp1Un9zSagN
NgRfbqgJsl1LSwG/lwXwKfC+mgiGqnAAWUlYXoVnpG1Uu9ifHWiw0d6gTDby8ZCz
MVn7nrRsvI6qwPRn0IyrcOXBo1xtzVDLitWMBTxnEQnu4QGuKWPK/+br71xt6VSZ
phA0hleFWpA5ljzGrpndV7H4AUo30/wBdPHH7LFzBk3Y9xgQnv61vUV/bvik64Xu
9SW7pEWU/9nH5UH4NiOILB5ubG6xuRvNREDex9AKXc0Wwg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:05:17 2025 by rpki-client