Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/_65TQQa2lDYa7SLCtFzoS6XVE0U.roa
File: _65TQQa2lDYa7SLCtFzoS6XVE0U.roa (raw, json)
Hash identifier: 6e5rcCTHzzr1GhWvBaLCo3yEBEEAmszZxrtHucA18KI=
Subject key identifier: FF:AE:53:41:06:B6:94:36:1A:ED:22:C2:B4:5C:E8:4B:A5:D5:13:45
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019E7309DECB5857170E32629DBC6FD391F1
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/_65TQQa2lDYa7SLCtFzoS6XVE0U.roa
Signing time: Fri 29 May 2026 09:21:27 +0000
ROA not before: Fri 29 May 2026 09:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199651
IP address blocks: 212.22.80.0/24 maxlen: 24
2a09:d007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:09:de:cb:58:57:17:0e:32:62:9d:bc:6f:d3:91:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: May 29 09:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffae534106b694361aed22c2b45ce84ba5d51345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:52:e0:15:f9:48:d0:2c:fc:9e:45:99:3c:
43:cf:03:d6:cb:32:8e:05:69:ea:8f:f7:db:25:e1:
92:c2:e7:d9:d1:1d:80:1e:f1:3a:f3:66:17:29:dd:
ca:e8:ab:d3:b0:99:68:e9:cb:ee:3e:36:c0:19:da:
92:6b:33:a9:3b:80:9b:6a:3e:77:32:9c:ef:a4:a6:
bc:9c:78:4d:c5:1d:7c:41:41:00:e1:07:b2:f1:d2:
f3:2c:0b:ee:8a:93:6b:2f:0b:d3:c2:b3:16:77:51:
79:75:51:37:9b:7a:99:8f:8d:da:f4:eb:96:1d:24:
e3:26:09:6e:0f:ef:c8:58:03:80:f0:df:7e:fd:55:
48:82:7c:fa:51:9e:a3:ec:f2:b4:09:e6:19:4d:c4:
81:bd:06:15:ed:29:2f:f9:17:7d:4c:d6:6b:6f:cb:
49:56:0f:d0:0f:98:c0:4b:d2:5e:9e:d7:bf:68:a3:
3d:65:a7:73:d7:ab:f2:b1:a6:57:4a:e6:3e:15:0e:
97:77:16:b3:69:ee:d4:f0:c8:31:8f:dd:16:9c:a6:
e6:7f:3e:10:a4:ab:61:b7:29:52:32:aa:d5:62:d2:
15:0a:b3:71:fb:1f:5e:b2:59:af:5f:4b:1c:0d:73:
3f:ec:92:21:77:d6:19:21:12:7f:d5:bf:64:55:50:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:53:41:06:B6:94:36:1A:ED:22:C2:B4:5C:E8:4B:A5:D5:13:45
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/_65TQQa2lDYa7SLCtFzoS6XVE0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.80.0/24
IPv6:
2a09:d007::/48
Signature Algorithm: sha256WithRSAEncryption
13:53:f6:99:28:9f:46:b2:86:c1:d7:55:47:25:68:aa:c9:05:
7b:5e:6f:77:db:aa:6c:e9:ae:9a:e1:1f:fd:87:84:3c:6d:94:
2f:fb:7d:64:f5:6b:b5:dc:bb:4e:e5:4e:5c:94:40:57:4d:1e:
3c:ee:32:11:fd:18:92:8f:6a:6e:47:de:65:45:bc:c3:20:41:
a6:2d:75:b3:96:f8:25:de:eb:6c:f6:17:a2:c0:44:d2:a9:f7:
4a:51:9c:4e:21:e0:41:9c:80:d0:22:10:dc:d4:79:24:7d:3d:
43:9f:e2:ea:c6:60:cf:ba:9b:c6:6a:c6:44:e7:10:bd:95:4d:
34:db:17:79:c0:20:95:c1:5a:7e:50:f4:a3:ef:e6:0c:b3:0b:
55:17:93:d8:19:36:9d:76:d4:76:30:ec:1e:16:f6:14:8f:22:
72:c6:32:72:b5:22:e1:d5:7e:e4:43:26:67:2f:bb:45:45:00:
76:a3:fa:f5:8b:ae:f6:fb:7a:b4:fb:6c:c8:e8:c2:6f:5c:88:
77:81:bc:a3:2c:9e:d2:8c:a5:4f:94:02:87:7d:0e:89:a3:0a:
fd:c3:9e:d4:aa:af:3f:6b:ba:d6:f8:0b:78:07:92:9d:6f:fe:
67:05:fa:61:cc:60:56:09:ba:ef:29:9f:16:dc:78:0b:b3:d0:
9b:cb:42:66
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ5zCd7LWFcXDjJinbxv05HxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjYwNTI5MDkyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmFlNTM0MTA2YjY5NDM2MWFlZDIyYzJiNDVjZTg0YmE1ZDUxMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDFS4BX5SNAs/J5FmTxDzwPWyzKO
BWnqj/fbJeGSwufZ0R2AHvE682YXKd3K6KvTsJlo6cvuPjbAGdqSazOpO4Cbaj53
MpzvpKa8nHhNxR18QUEA4Qey8dLzLAvuipNrLwvTwrMWd1F5dVE3m3qZj43a9OuW
HSTjJgluD+/IWAOA8N9+/VVIgnz6UZ6j7PK0CeYZTcSBvQYV7Skv+Rd9TNZrb8tJ
Vg/QD5jAS9Jente/aKM9Zadz16vysaZXSuY+FQ6Xdxazae7U8Mgxj90WnKbmfz4Q
pKthtylSMqrVYtIVCrNx+x9eslmvX0scDXM/7JIhd9YZIRJ/1b9kVVBWxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP+uU0EGtpQ2Gu0iwrRc6Eul1RNFMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvXzY1VFFRYTJsRFlhN1NMQ3RGem9TNlhWRTBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1BZQMA8E
AgACMAkDBwAqCdAHAAAwDQYJKoZIhvcNAQELBQADggEBABNT9pkon0ayhsHXVUcl
aKrJBXteb3fbqmzprprhH/2HhDxtlC/7fWT1a7Xcu07lTlyUQFdNHjzuMhH9GJKP
am5H3mVFvMMgQaYtdbOW+CXe62z2F6LARNKp90pRnE4h4EGcgNAiENzUeSR9PUOf
4urGYM+6m8ZqxkTnEL2VTTTbF3nAIJXBWn5Q9KPv5gyzC1UXk9gZNp121HYw7B4W
9hSPInLGMnK1IuHVfuRDJmcvu0VFAHaj+vWLrvb7erT7bMjowm9ciHeBvKMsntKM
pU+UAod9DomjCv3DntSqrz9rutb4C3gHkp1v/mcF+mHMYFYJuu8pnxbceAuz0JvL
QmY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:29:53 2026 by rpki-client