Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/IXENGoGhQOldCVOnX3dlDikgur8.roa
File: IXENGoGhQOldCVOnX3dlDikgur8.roa (raw, json)
Hash identifier: 59UAbs9flBeo7Pk6USdK5b/AP/C1xI7BIRRXYcjgzb0=
Subject key identifier: 21:71:0D:1A:81:A1:40:E9:5D:09:53:A7:5F:77:65:0E:29:20:BA:BF
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A0345BD1AEDC9E0995F074DC1061F3342E
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/IXENGoGhQOldCVOnX3dlDikgur8.roa
Signing time: Mon 24 Aug 2026 15:20:27 +0000
ROA not before: Mon 24 Aug 2026 15:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47272
IP address blocks: 2a07:e000:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:5b:d1:ae:dc:9e:09:95:f0:74:dc:10:61:f3:34:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Aug 24 15:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21710d1a81a140e95d0953a75f77650e2920babf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:b2:73:b3:81:00:cf:5e:88:0f:d6:b4:d9:
da:e8:3f:2f:ab:31:d2:e0:08:5a:e9:9f:5d:16:79:
7b:f1:79:45:ce:d5:bc:22:0a:28:ae:ea:3d:17:ef:
43:de:64:f2:d3:2b:32:64:53:dc:fd:43:bd:57:2d:
b6:d0:c0:b3:58:90:a9:bd:f2:42:7a:19:81:48:51:
ff:9d:2c:c8:2c:72:99:53:57:55:48:71:e9:14:c3:
19:b9:44:52:83:87:9a:35:9c:9c:37:14:24:18:82:
08:09:bc:a7:f6:2a:0b:12:a0:0f:1e:db:21:d8:69:
7f:6d:b1:72:ef:47:c6:ec:18:54:a6:34:5b:e5:2b:
c9:68:a4:d2:29:17:34:97:df:c7:32:3f:48:c7:37:
22:ec:34:00:d2:68:09:a3:1f:b2:bb:58:5b:0f:5a:
49:30:a9:f4:10:01:43:70:3c:b1:a1:69:43:e1:3e:
bd:6c:d6:52:37:d3:23:fe:f3:29:91:f8:fc:05:62:
18:f1:7a:a9:57:dd:89:80:0b:d4:3f:80:25:9f:8e:
28:fd:ec:07:bf:35:1c:40:8f:fa:f3:96:96:df:0c:
77:f2:2c:7f:eb:54:af:44:ba:48:46:13:33:df:97:
1f:d0:d7:3b:fb:1d:eb:08:72:45:b4:77:9b:7a:b0:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:0D:1A:81:A1:40:E9:5D:09:53:A7:5F:77:65:0E:29:20:BA:BF
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/IXENGoGhQOldCVOnX3dlDikgur8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e000:10::/44
Signature Algorithm: sha256WithRSAEncryption
0a:b5:d3:d8:7b:0d:60:55:3a:fc:00:c7:a2:6f:42:10:17:2e:
ec:16:1f:59:05:3f:74:fe:0a:16:cf:52:7b:21:f7:98:c5:a9:
bc:a6:1b:66:8b:b9:31:02:0b:14:98:63:2a:79:eb:37:94:9c:
8b:89:da:2a:f9:58:d2:68:a3:c4:48:68:f8:cd:da:17:c8:a4:
be:4b:c5:00:89:e6:78:14:9a:c7:44:02:b7:22:6f:d4:9d:5b:
94:19:ea:25:ea:71:5e:4a:3a:72:7a:12:73:af:42:dd:50:e0:
94:19:b6:6b:ba:fd:a6:c7:11:a8:d8:26:b1:aa:10:e8:04:79:
55:28:03:b2:8e:b2:65:c6:50:55:1a:66:3e:43:ee:1c:13:9f:
86:7f:55:c0:b0:f1:a9:87:41:ac:16:fa:30:b0:4b:35:1d:de:
fc:cb:b4:f8:d3:1b:5c:ec:3f:0d:04:5a:20:9e:80:67:33:41:
09:98:bb:bd:b2:5a:80:bc:ff:93:8c:f0:cc:15:55:4c:0d:67:
51:c3:9b:5b:30:52:05:52:b4:3f:31:b5:04:17:fa:3b:2f:b5:
3b:fc:99:a5:99:17:50:a8:2c:61:2e:d9:bb:79:c1:fd:78:c6:
61:75:f2:68:7a:46:d1:ba:d1:ed:83:4f:6f:eb:73:56:9f:c9:
4d:19:92:50
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaA0W9Gu3J4JlfB03BBh8zQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0
Y2FmZWIwHhcNMjYwODI0MTUyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTcxMGQxYTgxYTE0MGU5NWQwOTUzYTc1Zjc3NjUwZTI5MjBiYWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kCyc7OBAM9eiA/WtNna6D8vqzHS
4Aha6Z9dFnl78XlFztW8Igooruo9F+9D3mTy0ysyZFPc/UO9Vy220MCzWJCpvfJC
ehmBSFH/nSzILHKZU1dVSHHpFMMZuURSg4eaNZycNxQkGIIICbyn9ioLEqAPHtsh
2Gl/bbFy70fG7BhUpjRb5SvJaKTSKRc0l9/HMj9Ixzci7DQA0mgJox+yu1hbD1pJ
MKn0EAFDcDyxoWlD4T69bNZSN9Mj/vMpkfj8BWIY8XqpV92JgAvUP4Aln44o/ewH
vzUcQI/685aW3wx38ix/61SvRLpIRhMz35cf0Nc7+x3rCHJFtHeberDcDQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCFxDRqBoUDpXQlTp193ZQ4pILq/MB8GA1UdIwQY
MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt
Zjk0MWNjMzlhNzFlLzEvSVhFTkdvR2hRT2xkQ1ZPblgzZGxEaWtndXI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl
LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgfgAAAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAKtdPYew1gVTr8AMeib0IQFy7sFh9ZBT90/goW
z1J7IfeYxam8phtmi7kxAgsUmGMqees3lJyLidoq+VjSaKPESGj4zdoXyKS+S8UA
ieZ4FJrHRAK3Im/UnVuUGeol6nFeSjpyehJzr0LdUOCUGbZruv2mxxGo2CaxqhDo
BHlVKAOyjrJlxlBVGmY+Q+4cE5+Gf1XAsPGph0GsFvowsEs1Hd78y7T40xtc7D8N
BFognoBnM0EJmLu9slqAvP+TjPDMFVVMDWdRw5tbMFIFUrQ/MbUEF/o7L7U7/Jml
mRdQqCxhLtm7ecH9eMZhdfJoekbRutHtg09v63NWn8lNGZJQ
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:21 2026 by rpki-client