Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/1-XD03hAXlRf145QGXouVbNMPe8Q.roa
File: 1-XD03hAXlRf145QGXouVbNMPe8Q.roa (raw, json)
Hash identifier: b1sNIbzUWmJ3vDQ29YPPkioG34cF8uiHubOfFS1YiA8=
Subject key identifier: F9:70:F4:DE:10:17:95:17:F5:E3:94:06:5E:8B:95:6C:D3:0F:7B:C4
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 01A18400FD2141FCE3130BD72925EFC84CF2
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/1-XD03hAXlRf145QGXouVbNMPe8Q.roa
Signing time: Wed 28 Oct 2026 19:33:39 +0000
ROA not before: Wed 28 Oct 2026 19:33:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57027
IP address blocks: 2a09:2b80::/29 maxlen: 29
2a09:2b80:2::/48 maxlen: 48
2a09:2b80:4::/48 maxlen: 48
2a09:2b80:5::/48 maxlen: 48
2a09:2b80:6::/48 maxlen: 48
2a09:2b80:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:00:fd:21:41:fc:e3:13:0b:d7:29:25:ef:c8:4c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Oct 28 19:33:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f970f4de10179517f5e394065e8b956cd30f7bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:bf:29:b0:65:3d:4a:f6:5a:00:36:eb:62:
d2:59:0d:8e:15:62:0f:bb:0c:f1:13:f2:64:39:ac:
55:a3:43:69:25:8a:4d:43:2b:c7:5a:3b:9e:fa:83:
9a:8a:50:c9:6b:62:19:84:59:1c:38:87:c3:96:19:
45:f6:f4:04:0d:79:32:8c:35:23:47:56:d1:90:9e:
5d:5c:40:16:03:06:b7:5d:8b:3c:83:4f:b7:04:0d:
4a:17:46:9e:76:40:e0:9f:4c:07:94:6e:dd:54:ec:
2b:98:0c:17:1a:c8:b2:13:d5:43:ed:76:25:e7:4b:
62:db:28:6f:33:af:ee:ce:ff:24:5a:35:ab:f4:3b:
05:d0:51:71:80:d3:5d:0f:59:9e:7e:a6:f9:fc:dd:
94:2a:54:b8:c4:29:8a:87:8e:e0:a0:1e:d0:6c:ae:
37:f3:b1:6f:cf:7f:42:79:57:40:e6:b0:d5:0f:1d:
73:26:9b:ed:17:c7:c7:b6:74:a3:38:af:6d:55:bd:
09:52:a0:15:96:30:9d:6e:3f:fd:14:33:5a:1a:c0:
22:b9:25:a7:2e:e4:4c:03:e9:52:6d:68:36:d9:be:
01:3d:57:e6:ce:15:73:5f:1c:52:af:9e:ad:b8:96:
f9:30:fd:df:9b:4a:2a:1f:e6:24:fb:02:27:fb:7f:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:70:F4:DE:10:17:95:17:F5:E3:94:06:5E:8B:95:6C:D3:0F:7B:C4
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/1-XD03hAXlRf145QGXouVbNMPe8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
28:a0:6b:de:7c:aa:14:2d:97:b2:d9:34:5a:1f:f7:c2:e5:ee:
a3:1f:ed:7b:6d:d0:f5:48:21:4d:e8:d7:2f:e5:da:27:6d:6e:
53:52:1c:a8:89:68:d2:f6:10:9e:5a:39:5d:37:51:88:2e:d8:
a4:67:d7:eb:b2:6b:0d:47:9d:5f:cc:bd:ba:0a:36:01:f8:76:
96:a2:03:dc:7c:ef:ce:8f:28:1b:02:df:81:cd:88:7d:4d:5c:
a7:e3:d0:35:17:50:2f:d7:fa:5c:55:2a:bb:bb:4a:1e:17:ce:
bd:c0:88:56:bb:c0:8f:5e:46:85:6c:fc:7b:10:17:78:ed:3c:
d0:31:26:2c:a6:6a:d1:ff:2b:30:65:4d:78:79:2f:bb:cc:15:
42:d6:a7:f6:45:24:b5:05:d7:ea:76:37:f4:50:ab:cf:ea:8c:
df:da:0d:60:8d:bf:35:00:f6:2e:73:1e:c8:8f:6a:3a:88:2f:
41:0e:00:d0:13:8e:de:77:4b:e3:3f:b8:de:95:ec:e1:10:59:
63:fc:30:97:b2:2e:f8:bc:a2:7a:f7:e3:c1:6c:36:7d:bb:5a:
29:3d:97:6c:a6:40:0d:d7:29:c0:7b:28:9e:8b:84:16:95:16:
6b:a8:cc:41:5c:a0:98:42:4a:34:cc:fd:0b:67:32:f5:69:86:
a6:95:91:35
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaGEAP0hQfzjEwvXKSXvyEzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy
NjllMzkwHhcNMjYxMDI4MTkzMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTcwZjRkZTEwMTc5NTE3ZjVlMzk0MDY1ZThiOTU2Y2QzMGY3YmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTy/KbBlPUr2WgA262LSWQ2OFWIP
uwzxE/JkOaxVo0NpJYpNQyvHWjue+oOailDJa2IZhFkcOIfDlhlF9vQEDXkyjDUj
R1bRkJ5dXEAWAwa3XYs8g0+3BA1KF0aedkDgn0wHlG7dVOwrmAwXGsiyE9VD7XYl
50ti2yhvM6/uzv8kWjWr9DsF0FFxgNNdD1mefqb5/N2UKlS4xCmKh47goB7QbK43
87Fvz39CeVdA5rDVDx1zJpvtF8fHtnSjOK9tVb0JUqAVljCdbj/9FDNaGsAiuSWn
LuRMA+lSbWg22b4BPVfmzhVzXxxSr56tuJb5MP3fm0oqH+Yk+wIn+39rNQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPlw9N4QF5UX9eOUBl6LlWzTD3vEMB8GA1UdIwQY
MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct
Yzk0NTdlYzgxMTUxLzEvMS1YRDAzaEFYbFJmMTQ1UUdYb3VWYk5NUGU4US5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGEvZTZkODgwLTM5MDMtNGExMS1iYTI3LWM5NDU3ZWM4MTE1
MS8xL1phWmx1UUJwdlhHRkJnTG5RQXhTbDVNbW5qay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoJK4Aw
DQYJKoZIhvcNAQELBQADggEBACiga958qhQtl7LZNFof98Ll7qMf7Xtt0PVIIU3o
1y/l2idtblNSHKiJaNL2EJ5aOV03UYgu2KRn1+uyaw1HnV/MvboKNgH4dpaiA9x8
786PKBsC34HNiH1NXKfj0DUXUC/X+lxVKru7Sh4Xzr3AiFa7wI9eRoVs/HsQF3jt
PNAxJiymatH/KzBlTXh5L7vMFULWp/ZFJLUF1+p2N/RQq8/qjN/aDWCNvzUA9i5z
HsiPajqIL0EOANATjt53S+M/uN6V7OEQWWP8MJeyLvi8onr348FsNn27Wik9l2ym
QA3XKcB7KJ6LhBaVFmuozEFcoJhCSjTM/QtnMvVphqaVkTU=
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:51:57 2026 by rpki-client