Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/qF2ZodUY37J4i-OZIa3cfOgc5Rc.roa
File: qF2ZodUY37J4i-OZIa3cfOgc5Rc.roa (raw, json)
Hash identifier: wDYZQhbUNMQIgvk6fTW/5tpDGzxiDdiDkVT4f+UU/qM=
Subject key identifier: A8:5D:99:A1:D5:18:DF:B2:78:8B:E3:99:21:AD:DC:7C:E8:1C:E5:17
Certificate issuer: /CN=20c6611fc85462f0bccac72f3df4c5351be510de
Certificate serial: 019B797DE626868D960A5C89199061D9DD46
Authority key identifier: 20:C6:61:1F:C8:54:62:F0:BC:CA:C7:2F:3D:F4:C5:35:1B:E5:10:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMZhH8hUYvC8yscvPfTFNRvlEN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/qF2ZodUY37J4i-OZIa3cfOgc5Rc.roa
Signing time: Thu 01 Jan 2026 12:17:32 +0000
ROA not before: Thu 01 Jan 2026 12:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47239
IP address blocks: 2a07:1bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/IMZhH8hUYvC8yscvPfTFNRvlEN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/IMZhH8hUYvC8yscvPfTFNRvlEN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMZhH8hUYvC8yscvPfTFNRvlEN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:e6:26:86:8d:96:0a:5c:89:19:90:61:d9:dd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c6611fc85462f0bccac72f3df4c5351be510de
Validity
Not Before: Jan 1 12:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a85d99a1d518dfb2788be39921addc7ce81ce517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:22:0c:76:09:82:a0:4c:88:4f:d2:e8:f1:
22:a8:cb:c7:44:56:77:e2:a1:d6:b9:fd:90:72:9f:
6d:91:af:ac:c0:a7:3c:3c:60:36:92:b0:e3:b5:83:
6a:bb:d2:d8:7c:2b:00:54:73:74:65:a0:41:63:a1:
d6:e8:ce:2c:74:35:e2:e5:d2:92:e8:d8:0a:75:b3:
10:9f:bf:f4:03:f7:76:aa:76:d6:00:f6:85:88:37:
c7:fa:f4:ed:9b:d4:04:e5:ac:8b:91:8b:e6:b6:d6:
7a:45:27:c0:f7:3f:59:0a:7f:ea:10:69:a7:06:ac:
c4:8e:3d:07:ad:9e:f1:0a:6d:6f:d0:f4:bf:d2:8e:
d3:ea:ab:df:bc:82:73:e7:69:22:61:bb:71:01:e7:
e0:87:e7:fa:c2:a5:ad:a3:b6:58:7c:8e:cf:91:85:
8b:4f:af:37:b6:05:91:b2:10:a9:d5:b4:d8:60:e4:
22:34:88:3b:75:e3:33:25:59:57:70:9d:c3:d8:39:
60:2d:d0:a6:dd:9d:65:2d:34:44:8b:8f:e3:d2:9a:
81:59:e8:94:fa:de:57:51:84:44:e5:eb:6a:a4:15:
e2:71:2a:2d:59:dd:ee:be:ff:22:0e:c6:20:9c:35:
31:f1:e3:4f:12:9b:a0:75:9d:9c:b5:20:d0:12:b0:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:99:A1:D5:18:DF:B2:78:8B:E3:99:21:AD:DC:7C:E8:1C:E5:17
X509v3 Authority Key Identifier:
keyid:20:C6:61:1F:C8:54:62:F0:BC:CA:C7:2F:3D:F4:C5:35:1B:E5:10:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMZhH8hUYvC8yscvPfTFNRvlEN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/qF2ZodUY37J4i-OZIa3cfOgc5Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3841fe-dc49-4b9c-af9d-daa23ffb4cbf/1/IMZhH8hUYvC8yscvPfTFNRvlEN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:d1:bf:7c:17:c3:df:a1:03:2d:05:9d:00:8c:86:bf:c3:c1:
06:6f:8a:19:44:92:eb:e2:fb:ff:cc:f0:f5:35:dd:df:d9:76:
67:e0:11:33:12:9a:9e:74:27:c8:cc:25:9a:61:29:d5:a2:e6:
c7:a1:15:26:d8:06:ba:06:65:ae:3a:d9:d1:05:97:2e:fa:d7:
83:5d:a1:5d:a0:12:80:aa:5d:4c:64:66:b9:6b:3e:78:ed:d9:
af:03:71:76:94:3b:28:3a:89:19:c0:b1:a7:ce:d2:31:56:ef:
70:6d:bf:f3:f3:ee:86:37:9a:41:d6:2e:9b:52:cd:a6:3e:03:
7a:02:0c:cc:91:75:c3:76:d5:e8:8a:04:2f:d4:9c:2f:b9:4d:
9f:f8:5f:23:9b:61:57:9e:fe:6c:8a:b4:26:2a:c7:c1:e4:52:
7e:24:5b:d1:c4:23:16:65:1d:2e:dc:c7:57:33:60:0e:f5:72:
09:ed:cb:11:5a:1a:92:59:4f:9c:9a:fa:bd:6b:18:da:2e:3b:
fc:67:0e:44:1c:63:fa:81:5c:ae:db:68:6c:9a:27:02:74:8d:
04:16:c4:28:3a:51:b3:17:b1:e8:12:70:f4:f2:cb:87:8f:6d:
51:9f:a3:85:82:02:4f:1e:79:f1:af:fe:de:a5:78:96:31:b2:
16:6c:a1:f4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt5feYmho2WClyJGZBh2d1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzY2MTFmYzg1NDYyZjBiY2NhYzcyZjNkZjRjNTM1MWJl
NTEwZGUwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODVkOTlhMWQ1MThkZmIyNzg4YmUzOTkyMWFkZGM3Y2U4MWNlNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBAiDHYJgqBMiE/S6PEiqMvHRFZ3
4qHWuf2Qcp9tka+swKc8PGA2krDjtYNqu9LYfCsAVHN0ZaBBY6HW6M4sdDXi5dKS
6NgKdbMQn7/0A/d2qnbWAPaFiDfH+vTtm9QE5ayLkYvmttZ6RSfA9z9ZCn/qEGmn
BqzEjj0HrZ7xCm1v0PS/0o7T6qvfvIJz52kiYbtxAefgh+f6wqWto7ZYfI7PkYWL
T683tgWRshCp1bTYYOQiNIg7deMzJVlXcJ3D2DlgLdCm3Z1lLTREi4/j0pqBWeiU
+t5XUYRE5etqpBXicSotWd3uvv8iDsYgnDUx8eNPEpugdZ2ctSDQErAVtwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKhdmaHVGN+yeIvjmSGt3HzoHOUXMB8GA1UdIwQY
MBaAFCDGYR/IVGLwvMrHLz30xTUb5RDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1aaEg4aFVZdkM4eXNjdlBmVEZOUnZsRU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zODQxZmUtZGM0OS00YjljLWFmOWQt
ZGFhMjNmZmI0Y2JmLzEvcUYyWm9kVVkzN0o0aS1PWklhM2NmT2djNVJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zODQxZmUtZGM0OS00YjljLWFmOWQtZGFhMjNmZmI0Y2Jm
LzEvSU1aaEg4aFVZdkM4eXNjdlBmVEZOUnZsRU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgcbwDAN
BgkqhkiG9w0BAQsFAAOCAQEAK9G/fBfD36EDLQWdAIyGv8PBBm+KGUSS6+L7/8zw
9TXd39l2Z+ARMxKannQnyMwlmmEp1aLmx6EVJtgGugZlrjrZ0QWXLvrXg12hXaAS
gKpdTGRmuWs+eO3ZrwNxdpQ7KDqJGcCxp87SMVbvcG2/8/PuhjeaQdYum1LNpj4D
egIMzJF1w3bV6IoEL9ScL7lNn/hfI5thV57+bIq0JirHweRSfiRb0cQjFmUdLtzH
VzNgDvVyCe3LEVoakllPnJr6vWsY2i47/GcORBxj+oFcrttobJonAnSNBBbEKDpR
sxex6BJw9PLLh49tUZ+jhYICTx558a/+3qV4ljGyFmyh9A==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:07:34 2026 by rpki-client