Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/w_yQbyKdiE94Mb72dKd-SbLSx2k.roa
File: w_yQbyKdiE94Mb72dKd-SbLSx2k.roa (raw, json)
Hash identifier: vGGx9ettkcYhX5Bp4/XEoGqQrwKQfoK/xf0et5bahxg=
Subject key identifier: C3:FC:90:6F:22:9D:88:4F:78:31:BE:F6:74:A7:7E:49:B2:D2:C7:69
Certificate issuer: /CN=d2f42d3a35a24cd17457ee22183271d393105d6d
Certificate serial: 01A13F278DF8F0A84DCCCCBA911E200C2838
Authority key identifier: D2:F4:2D:3A:35:A2:4C:D1:74:57:EE:22:18:32:71:D3:93:10:5D:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vQtOjWiTNF0V-4iGDJx05MQXW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/w_yQbyKdiE94Mb72dKd-SbLSx2k.roa
Signing time: Thu 15 Oct 2026 10:41:59 +0000
ROA not before: Thu 15 Oct 2026 10:41:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218414
IP address blocks: 2001:678:1380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vQtOjWiTNF0V-4iGDJx05MQXW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:27:8d:f8:f0:a8:4d:cc:cc:ba:91:1e:20:0c:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f42d3a35a24cd17457ee22183271d393105d6d
Validity
Not Before: Oct 15 10:41:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3fc906f229d884f7831bef674a77e49b2d2c769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:67:47:07:4c:ff:2f:7c:1f:fd:76:be:eb:
39:11:1e:ee:d2:61:58:54:85:b3:f4:4d:e6:de:da:
fc:55:e7:aa:28:27:00:ac:89:71:03:8f:57:66:f7:
2a:d0:db:c2:c4:75:c9:cb:5e:59:2b:e8:bb:90:dc:
91:1d:3a:56:95:f5:48:79:7c:b3:26:17:2f:a7:31:
35:f2:9a:a2:f5:d6:5e:cf:3e:4d:b3:98:99:ec:65:
2e:a7:24:37:dc:9b:b0:fd:a2:d6:6f:64:8c:53:54:
40:2e:e5:a4:7f:7a:6f:43:ba:44:fe:7a:ac:e8:81:
06:2d:bc:cb:3b:a1:fe:ed:07:07:84:f2:6f:5e:a8:
d0:e2:c5:8e:c4:88:dd:9b:91:fa:60:e6:8f:43:b4:
5d:1c:30:92:9b:de:76:c0:f7:01:16:ec:18:f5:56:
e3:4b:7c:ff:a8:37:09:2a:e0:b1:2b:32:06:67:63:
1e:e8:70:c1:68:a0:3e:cb:ef:de:40:80:93:c8:65:
7f:70:b8:96:1f:ba:b9:7b:6d:c5:9d:78:1c:e9:4e:
7e:6c:47:16:bc:88:b2:0d:6a:12:98:50:2e:e6:b1:
56:6b:f6:01:17:99:88:08:67:af:13:46:30:b3:a3:
e7:3b:c0:82:7e:0d:c2:d3:74:fa:a8:8f:5e:4b:d5:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FC:90:6F:22:9D:88:4F:78:31:BE:F6:74:A7:7E:49:B2:D2:C7:69
X509v3 Authority Key Identifier:
keyid:D2:F4:2D:3A:35:A2:4C:D1:74:57:EE:22:18:32:71:D3:93:10:5D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vQtOjWiTNF0V-4iGDJx05MQXW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/w_yQbyKdiE94Mb72dKd-SbLSx2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1380::/48
Signature Algorithm: sha256WithRSAEncryption
71:5c:c0:71:24:f3:d4:fd:aa:15:59:3f:30:b1:c9:d3:9f:2c:
57:fa:1e:1b:45:1f:a7:c8:b1:14:5c:9b:5e:f7:c4:fd:88:d7:
1e:3c:0f:f8:b3:da:b5:71:61:bd:0c:bc:39:62:d6:b0:c9:88:
6a:19:8d:6c:af:23:81:62:64:b0:27:7e:b9:a6:b2:a2:88:64:
86:83:8f:29:53:78:7a:2f:4a:fb:ae:9e:aa:c2:93:7e:10:fc:
9e:34:72:62:d1:30:ad:f3:9d:41:46:a1:db:5d:84:c2:be:db:
28:d5:fd:1e:2f:0a:bf:3f:6a:f5:31:d1:83:e9:b9:7c:24:01:
3b:d0:81:2e:cc:d3:0d:f9:7a:d0:80:ba:0c:08:3e:a3:c3:14:
ce:05:3d:0b:2d:5e:a2:4e:59:bc:8a:4b:c9:a7:56:9e:bf:9f:
d3:16:b6:87:bc:74:d4:f0:04:7c:26:5c:1c:ae:2c:04:c4:aa:
91:7d:f5:50:45:7c:84:a9:23:cd:1e:50:69:f6:de:d9:0f:b2:
be:a4:5f:9f:03:c3:0b:d7:8c:b6:91:74:42:14:fd:41:f1:d2:
f2:05:b5:dc:52:68:36:f4:1d:30:a1:c2:ce:d3:b2:ad:95:c6:
bf:87:d1:59:64:1f:23:be:ec:85:d5:3c:89:e0:ac:dd:96:b0:
00:55:4e:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaE/J4348KhNzMy6kR4gDCg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjQyZDNhMzVhMjRjZDE3NDU3ZWUyMjE4MzI3MWQzOTMx
MDVkNmQwHhcNMjYxMDE1MTA0MTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2ZjOTA2ZjIyOWQ4ODRmNzgzMWJlZjY3NGE3N2U0OWIyZDJjNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq1nRwdM/y98H/12vus5ER7u0mFY
VIWz9E3m3tr8VeeqKCcArIlxA49XZvcq0NvCxHXJy15ZK+i7kNyRHTpWlfVIeXyz
JhcvpzE18pqi9dZezz5Ns5iZ7GUupyQ33Juw/aLWb2SMU1RALuWkf3pvQ7pE/nqs
6IEGLbzLO6H+7QcHhPJvXqjQ4sWOxIjdm5H6YOaPQ7RdHDCSm952wPcBFuwY9Vbj
S3z/qDcJKuCxKzIGZ2Me6HDBaKA+y+/eQICTyGV/cLiWH7q5e23FnXgc6U5+bEcW
vIiyDWoSmFAu5rFWa/YBF5mICGevE0Yws6PnO8CCfg3C03T6qI9eS9Vv0QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMP8kG8inYhPeDG+9nSnfkmy0sdpMB8GA1UdIwQY
MBaAFNL0LTo1okzRdFfuIhgycdOTEF1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZRdE9qV2lUTkYwVi00aUdESngwNU1RWFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni81ODQ2YzItNmNkNi00MTVhLTgyMzYt
ODJlYjhlYWE5ZWYxLzEvd195UWJ5S2RpRTk0TWI3MmRLZC1TYkxTeDJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni81ODQ2YzItNmNkNi00MTVhLTgyMzYtODJlYjhlYWE5ZWYx
LzEvMHZRdE9qV2lUTkYwVi00aUdESngwNU1RWFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBOA
MA0GCSqGSIb3DQEBCwUAA4IBAQBxXMBxJPPU/aoVWT8wscnTnyxX+h4bRR+nyLEU
XJte98T9iNcePA/4s9q1cWG9DLw5YtawyYhqGY1sryOBYmSwJ365prKiiGSGg48p
U3h6L0r7rp6qwpN+EPyeNHJi0TCt851BRqHbXYTCvtso1f0eLwq/P2r1MdGD6bl8
JAE70IEuzNMN+XrQgLoMCD6jwxTOBT0LLV6iTlm8ikvJp1aev5/TFraHvHTU8AR8
JlwcriwExKqRffVQRXyEqSPNHlBp9t7ZD7K+pF+fA8ML14y2kXRCFP1B8dLyBbXc
Umg29B0wocLO07Ktlca/h9FZZB8jvuyF1TyJ4KzdlrAAVU6r
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:32:54 2026 by rpki-client