Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/o2BdFbj6868BJWrCPnS7a5WQGSw.roa
File: o2BdFbj6868BJWrCPnS7a5WQGSw.roa (raw, json)
Hash identifier: f/G27CA8CMzWaQzln1UocivvvnBui/QqaH9b2/oNj1M=
Subject key identifier: A3:60:5D:15:B8:FA:F3:AF:01:25:6A:C2:3E:74:BB:6B:95:90:19:2C
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019FAD063BBD1B3074C1FB78EC2C2393A44D
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/o2BdFbj6868BJWrCPnS7a5WQGSw.roa
Signing time: Wed 29 Jul 2026 08:38:14 +0000
ROA not before: Wed 29 Jul 2026 08:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219105
IP address blocks: 2a03:5840:15a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:06:3b:bd:1b:30:74:c1:fb:78:ec:2c:23:93:a4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 29 08:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3605d15b8faf3af01256ac23e74bb6b9590192c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:91:9d:4c:da:44:72:d2:fc:ef:cf:e1:72:
9c:85:29:55:05:6f:99:3f:13:73:fe:d1:a7:44:dc:
08:b9:cf:80:68:3c:fe:bc:48:db:38:4a:7e:64:81:
ee:33:d9:c7:5d:9f:f7:c6:67:a7:1f:a6:d7:5e:f0:
17:ff:bd:e6:92:ab:22:09:12:f7:74:0a:bb:c7:54:
7d:03:1f:e7:63:48:bb:66:3e:37:b3:d5:7b:58:9e:
d4:a4:ff:71:c7:c8:1d:48:9f:2e:a7:f4:98:50:fa:
fe:66:41:24:3c:1d:30:2d:e4:b4:f3:f9:60:0b:66:
3d:f5:17:5a:e8:ea:79:ed:02:1c:a8:76:4c:65:db:
dd:9a:1f:de:86:df:38:71:9e:3f:b6:49:88:59:24:
8f:c3:d0:e5:8b:17:de:45:7c:38:4d:52:4b:eb:ed:
53:dc:6e:59:cd:8c:ad:0b:5d:f1:ed:bd:ec:1c:bb:
22:4a:e8:d1:11:97:69:29:f6:b4:cf:31:65:d8:31:
8b:77:35:77:1f:62:0d:f8:e2:cd:a4:24:ed:81:17:
b2:e8:91:24:ac:b5:fb:4d:6e:a3:d1:ee:dc:f9:b2:
c2:cc:c4:6b:cd:54:f1:c0:ad:f2:93:d4:c7:15:a1:
23:2f:6d:a4:d5:b3:1b:75:e2:7c:87:a2:ef:93:c2:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:60:5D:15:B8:FA:F3:AF:01:25:6A:C2:3E:74:BB:6B:95:90:19:2C
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/o2BdFbj6868BJWrCPnS7a5WQGSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:15a::/48
Signature Algorithm: sha256WithRSAEncryption
9b:57:85:dd:51:10:7a:b7:74:51:92:85:0f:22:05:cb:c9:7b:
52:6f:03:9b:03:96:a0:70:6d:95:b7:86:fa:82:7b:00:8b:4b:
ab:98:0e:20:1e:66:38:82:28:cc:ac:48:1f:c6:8c:d0:6d:9e:
15:20:d3:2a:8e:44:ff:04:27:62:58:0f:4e:82:2b:64:8f:1b:
b5:2e:ed:2d:8f:50:fa:e0:af:e6:48:bb:b6:08:f3:30:72:1f:
ef:a3:0d:67:3e:e6:d8:04:6e:d1:fc:20:02:14:fc:79:b7:2f:
13:5c:d1:5a:dd:c2:8b:9c:23:70:49:a4:72:4d:45:80:e7:4a:
85:99:f5:49:9c:4a:0c:d7:bc:75:59:5e:3e:90:96:80:13:7e:
bf:ee:e9:03:77:35:1c:eb:bd:78:c0:b2:e3:33:a6:00:f8:16:
7f:26:aa:54:d7:f4:e6:2d:1d:53:59:a3:33:ce:b3:68:11:b9:
d1:60:fa:f6:cd:78:81:f8:af:75:dd:af:83:69:b7:36:82:0a:
17:79:dd:3c:d5:b9:75:d3:80:54:84:53:43:f5:83:2b:11:d4:
dc:6f:e2:56:70:5a:72:35:9a:c5:24:9b:18:78:4d:44:f6:ea:
21:71:4c:75:2b:76:26:bf:b3:17:2b:da:70:d6:4b:45:9a:2a:
56:c3:42:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ+tBju9GzB0wft47Cwjk6RNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjYwNzI5MDgzODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzYwNWQxNWI4ZmFmM2FmMDEyNTZhYzIzZTc0YmI2Yjk1OTAxOTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxiRnUzaRHLS/O/P4XKchSlVBW+Z
PxNz/tGnRNwIuc+AaDz+vEjbOEp+ZIHuM9nHXZ/3xmenH6bXXvAX/73mkqsiCRL3
dAq7x1R9Ax/nY0i7Zj43s9V7WJ7UpP9xx8gdSJ8up/SYUPr+ZkEkPB0wLeS08/lg
C2Y99Rda6Op57QIcqHZMZdvdmh/eht84cZ4/tkmIWSSPw9DlixfeRXw4TVJL6+1T
3G5ZzYytC13x7b3sHLsiSujREZdpKfa0zzFl2DGLdzV3H2IN+OLNpCTtgRey6JEk
rLX7TW6j0e7c+bLCzMRrzVTxwK3yk9THFaEjL22k1bMbdeJ8h6Lvk8KNXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKNgXRW4+vOvASVqwj50u2uVkBksMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvbzJCZEZiajY4NjhCSldyQ1BuUzdhNVdRR1N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAFa
MA0GCSqGSIb3DQEBCwUAA4IBAQCbV4XdURB6t3RRkoUPIgXLyXtSbwObA5agcG2V
t4b6gnsAi0urmA4gHmY4gijMrEgfxozQbZ4VINMqjkT/BCdiWA9Ogitkjxu1Lu0t
j1D64K/mSLu2CPMwch/vow1nPubYBG7R/CACFPx5ty8TXNFa3cKLnCNwSaRyTUWA
50qFmfVJnEoM17x1WV4+kJaAE36/7ukDdzUc6714wLLjM6YA+BZ/JqpU1/TmLR1T
WaMzzrNoEbnRYPr2zXiB+K913a+Dabc2ggoXed081bl104BUhFND9YMrEdTcb+JW
cFpyNZrFJJsYeE1E9uohcUx1K3Ymv7MXK9pw1ktFmipWw0Ld
-----END CERTIFICATE-----
Generated at Wed Jul 29 21:28:10 2026 by rpki-client