Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/0qUdSlK1egMK84cFUL2xD9vza_I.roa
File: 0qUdSlK1egMK84cFUL2xD9vza_I.roa (raw, json)
Hash identifier: +RRA24eEQxCoeLXCIa32FRmyRiqw4gZq4NFf5EgQysk=
Subject key identifier: D2:A5:1D:4A:52:B5:7A:03:0A:F3:87:05:50:BD:B1:0F:DB:F3:6B:F2
Certificate issuer: /CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Certificate serial: 01A0AFBFF2599E53EB2733DD49465227BF06
Authority key identifier: 1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/0qUdSlK1egMK84cFUL2xD9vza_I.roa
Signing time: Thu 17 Sep 2026 14:23:07 +0000
ROA not before: Thu 17 Sep 2026 14:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218857
IP address blocks: 2001:678:1328::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:bf:f2:59:9e:53:eb:27:33:dd:49:46:52:27:bf:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Validity
Not Before: Sep 17 14:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2a51d4a52b57a030af3870550bdb10fdbf36bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e0:71:da:94:51:92:c1:9e:33:3b:7b:3f:91:
b0:ac:26:5d:a5:57:ec:fc:89:4f:92:22:bb:f0:09:
ab:a7:bb:a7:6f:84:33:2c:09:13:0c:a5:72:2d:ea:
dd:5d:ca:8c:bb:4f:1c:e3:a7:b4:93:24:70:f0:ed:
03:6c:b4:c1:fc:ac:2b:fa:d6:f5:8b:55:35:7e:d4:
a1:7d:d0:95:f0:8d:54:a9:5f:74:b1:3c:da:36:8d:
e5:b1:33:fb:bd:5d:1e:69:19:ff:37:73:82:3d:53:
b5:b3:09:f0:37:b8:be:71:cf:99:5e:3f:53:d7:8d:
66:77:53:e0:21:6e:9d:98:a9:07:58:46:4b:60:8b:
31:03:f3:0e:6f:3c:8b:ef:fb:d8:aa:ee:56:41:47:
5d:1d:d7:25:11:78:7c:30:12:69:42:20:fe:49:7a:
29:10:b3:6a:1e:2e:b0:ec:f1:41:01:38:4e:30:7f:
b0:ed:66:0a:8f:8b:98:84:49:1c:86:cd:13:d8:0d:
7c:f7:9a:d5:d2:3f:be:67:15:07:49:57:71:67:35:
be:1d:6e:a5:3c:95:91:d1:78:bc:ab:9f:b4:45:6a:
84:c5:7f:39:9e:89:f4:f3:71:62:92:55:91:a8:d9:
66:cf:10:16:03:de:d4:d0:08:50:1a:39:3d:db:86:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:1D:4A:52:B5:7A:03:0A:F3:87:05:50:BD:B1:0F:DB:F3:6B:F2
X509v3 Authority Key Identifier:
keyid:1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/0qUdSlK1egMK84cFUL2xD9vza_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1328::/48
Signature Algorithm: sha256WithRSAEncryption
45:3f:bc:5d:6a:d2:df:bb:fd:8d:4a:29:5a:44:a2:55:4f:20:
c5:12:e8:0b:a7:65:4a:d8:d8:2a:60:1e:22:d8:a4:54:72:5b:
82:57:8c:5d:94:81:e7:86:6b:39:cb:be:88:8b:30:8c:54:9c:
43:8f:52:15:05:65:6a:53:2e:01:20:61:dd:ca:45:c6:de:2a:
6e:f4:96:84:5d:17:01:a6:ab:99:b2:b0:0f:ec:45:7d:b0:75:
2d:45:90:34:09:75:53:6c:fb:a5:c2:de:0d:63:ea:f1:f7:68:
1d:cc:5d:9d:51:88:46:22:5c:76:9e:59:08:07:89:ae:d9:f8:
09:99:fb:ac:32:3e:d6:74:6f:22:73:dd:7c:6b:58:c7:73:71:
48:61:ef:29:7b:60:0a:71:48:b2:b1:5f:aa:44:5e:cb:27:6a:
19:01:37:b6:62:67:e2:63:04:cf:8a:43:b2:4b:35:35:43:64:
3e:47:3e:01:30:10:78:20:8f:36:e8:1a:fb:38:4e:70:9a:85:
82:00:ed:4d:d9:65:13:65:3d:5a:4f:9b:ef:d4:ac:b5:09:22:
49:45:34:13:62:02:46:b4:59:fb:52:21:f3:3a:c4:58:cd:89:
5f:4f:bf:da:9f:d9:2d:89:c1:b5:eb:11:36:4b:86:1f:be:57:
d2:40:89:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCvv/JZnlPrJzPdSUZSJ78GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNGE3NGY4MzVmYjc4ZjQ2YTc1MjI1ODJhNzAyNGMzZTk1
YTc1MDEwHhcNMjYwOTE3MTQyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmE1MWQ0YTUyYjU3YTAzMGFmMzg3MDU1MGJkYjEwZmRiZjM2YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+Bx2pRRksGeMzt7P5GwrCZdpVfs
/IlPkiK78Amrp7unb4QzLAkTDKVyLerdXcqMu08c46e0kyRw8O0DbLTB/Kwr+tb1
i1U1ftShfdCV8I1UqV90sTzaNo3lsTP7vV0eaRn/N3OCPVO1swnwN7i+cc+ZXj9T
141md1PgIW6dmKkHWEZLYIsxA/MObzyL7/vYqu5WQUddHdclEXh8MBJpQiD+SXop
ELNqHi6w7PFBAThOMH+w7WYKj4uYhEkchs0T2A1895rV0j++ZxUHSVdxZzW+HW6l
PJWR0Xi8q5+0RWqExX85non083FiklWRqNlmzxAWA97U0AhQGjk924b7bwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNKlHUpStXoDCvOHBVC9sQ/b82vyMB8GA1UdIwQY
MBaAFBtKdPg1+3j0anUiWCpwJMPpWnUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzBwMC1EWDdlUFJxZFNKWUtuQWt3LWxhZFFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTYxZDMtMTFjZS00OTE2LTg0Nzgt
MTNhMDM0Njc2MmYwLzEvMHFVZFNsSzFlZ01LODRjRlVMMnhEOXZ6YV9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTYxZDMtMTFjZS00OTE2LTg0NzgtMTNhMDM0Njc2MmYw
LzEvRzBwMC1EWDdlUFJxZFNKWUtuQWt3LWxhZFFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBMo
MA0GCSqGSIb3DQEBCwUAA4IBAQBFP7xdatLfu/2NSilaRKJVTyDFEugLp2VK2Ngq
YB4i2KRUcluCV4xdlIHnhms5y76IizCMVJxDj1IVBWVqUy4BIGHdykXG3ipu9JaE
XRcBpquZsrAP7EV9sHUtRZA0CXVTbPulwt4NY+rx92gdzF2dUYhGIlx2nlkIB4mu
2fgJmfusMj7WdG8ic918a1jHc3FIYe8pe2AKcUiysV+qRF7LJ2oZATe2YmfiYwTP
ikOySzU1Q2Q+Rz4BMBB4II826Br7OE5wmoWCAO1N2WUTZT1aT5vv1Ky1CSJJRTQT
YgJGtFn7UiHzOsRYzYlfT7/an9kticG16xE2S4YfvlfSQInQ
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:06:08 2026 by rpki-client