Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/auXxSkXbPLVr2qSGlp2m2RZI7ow.roa
File: auXxSkXbPLVr2qSGlp2m2RZI7ow.roa (raw, json)
Hash identifier: PtjbpIz9UroKWiq2Wn+CkY0YcxqAxqQ7Vku1bByME5U=
Subject key identifier: 6A:E5:F1:4A:45:DB:3C:B5:6B:DA:A4:86:96:9D:A6:D9:16:48:EE:8C
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A07AAFDABD8027042FF28CB13242F0B151
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/auXxSkXbPLVr2qSGlp2m2RZI7ow.roa
Signing time: Mon 07 Sep 2026 07:05:40 +0000
ROA not before: Mon 07 Sep 2026 07:05:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206987
IP address blocks: 2a0c:6d87:f3e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:af:da:bd:80:27:04:2f:f2:8c:b1:32:42:f0:b1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Sep 7 07:05:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ae5f14a45db3cb56bdaa486969da6d91648ee8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:48:0b:3a:fa:3e:d7:e3:87:bc:b2:2e:9d:
93:86:ea:54:2a:71:e8:60:72:34:1e:77:a5:f2:21:
63:6b:ee:6f:28:d7:97:1a:30:7a:3f:44:4a:43:84:
e3:91:2f:15:cb:c9:be:e4:a6:50:0a:5d:c0:67:35:
70:dd:19:88:c6:aa:e1:9e:59:42:46:79:21:79:5b:
61:73:e7:47:6c:c2:9d:8b:a5:c3:83:e4:da:31:0b:
62:81:10:ed:e9:90:ab:fc:84:47:ba:3d:cb:dd:67:
a9:4e:c5:73:29:a3:ea:d5:ad:81:17:a5:cf:5f:45:
73:52:e1:c6:c7:d4:9f:e4:41:0d:3c:f1:7d:a0:4d:
02:b4:bf:5e:cd:4d:61:f0:ef:9e:93:cd:ca:c3:6c:
ce:85:94:5c:78:2d:41:4e:2e:90:d5:60:42:c6:a9:
2f:bb:a9:d4:a0:5e:7d:7a:c8:fd:12:88:58:8d:20:
e0:c6:4e:0f:14:81:d7:b4:4b:8b:43:93:70:6b:71:
d1:da:3b:3f:97:d3:c8:ea:61:8f:64:bb:7a:e4:5a:
d7:7b:d1:60:c0:f0:1e:11:f2:75:ed:fd:13:e9:88:
03:97:62:f0:85:20:1b:1b:f0:00:fa:47:c8:8a:d8:
c9:47:14:a8:14:09:38:a1:17:20:38:87:81:29:43:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E5:F1:4A:45:DB:3C:B5:6B:DA:A4:86:96:9D:A6:D9:16:48:EE:8C
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/auXxSkXbPLVr2qSGlp2m2RZI7ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6d87:f3e0::/48
Signature Algorithm: sha256WithRSAEncryption
03:61:39:d9:21:f5:85:d7:4a:d8:73:ab:5e:ba:02:70:71:8d:
23:3d:63:f6:90:69:d4:bb:b3:7f:41:27:1e:2c:af:c6:dd:81:
7f:1e:89:49:36:c4:5e:42:b6:69:df:a5:1c:7e:ea:a6:91:96:
37:74:d7:94:a0:b3:da:45:1e:2f:63:54:2b:1e:b9:ed:4c:e5:
be:f1:96:8d:2e:c5:4f:d1:9c:77:08:3e:71:5d:01:5b:fe:47:
de:39:09:bd:30:54:8b:a2:22:9d:4d:64:dc:37:92:9f:66:7a:
87:2e:cd:d5:7c:22:6c:07:96:64:85:87:12:78:87:89:c2:dd:
65:2a:8a:b9:22:90:e7:ca:ff:48:80:13:cf:8a:64:d2:d1:e7:
71:b3:8e:8f:bc:37:32:d8:43:bb:96:8d:1f:b4:01:bf:47:30:
f2:35:54:a4:cd:dc:4c:6b:06:bd:d8:a5:6e:e1:00:b3:d6:f9:
00:ca:19:55:ed:9e:b5:4c:46:36:5f:5b:6f:12:16:47:6f:c0:
f4:79:48:69:d3:d7:08:1e:34:30:87:87:c5:20:c5:d6:9c:95:
c6:c0:f1:ff:ab:d9:ab:b0:3c:f2:52:74:00:07:55:ba:cc:51:
cc:5f:86:7f:ee:97:57:ae:c5:55:bc:06:94:3d:f8:e7:ca:2d:
85:2f:e1:1d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaB6r9q9gCcEL/KMsTJC8LFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzY3Njc3YTMzZDNhNzk5ZjM2NDM4NDI5NmRmNDZhOTFk
MzkyN2YwHhcNMjYwOTA3MDcwNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWU1ZjE0YTQ1ZGIzY2I1NmJkYWE0ODY5NjlkYTZkOTE2NDhlZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCFICzr6Ptfjh7yyLp2ThupUKnHo
YHI0Hnel8iFja+5vKNeXGjB6P0RKQ4TjkS8Vy8m+5KZQCl3AZzVw3RmIxqrhnllC
RnkheVthc+dHbMKdi6XDg+TaMQtigRDt6ZCr/IRHuj3L3WepTsVzKaPq1a2BF6XP
X0VzUuHGx9Sf5EENPPF9oE0CtL9ezU1h8O+ek83Kw2zOhZRceC1BTi6Q1WBCxqkv
u6nUoF59esj9EohYjSDgxk4PFIHXtEuLQ5Nwa3HR2js/l9PI6mGPZLt65FrXe9Fg
wPAeEfJ17f0T6YgDl2LwhSAbG/AA+kfIitjJRxSoFAk4oRcgOIeBKUM7MQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGrl8UpF2zy1a9qkhpadptkWSO6MMB8GA1UdIwQY
MBaAFBp2dnejPTp5nzZDhClt9GqR05J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25aMmQ2TTlPbm1mTmtPRUtXMzBhcEhUa244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYzY2OTYtOGI4Ny00N2U2LWEyOGMt
MDYyNDI5MzYwNzVlLzEvYXVYeFNrWGJQTFZyMnFTR2xwMm0yUlpJN293LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lYzY2OTYtOGI4Ny00N2U2LWEyOGMtMDYyNDI5MzYwNzVl
LzEvR25aMmQ2TTlPbm1mTmtPRUtXMzBhcEhUa244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxth/Pg
MA0GCSqGSIb3DQEBCwUAA4IBAQADYTnZIfWF10rYc6teugJwcY0jPWP2kGnUu7N/
QSceLK/G3YF/HolJNsReQrZp36UcfuqmkZY3dNeUoLPaRR4vY1QrHrntTOW+8ZaN
LsVP0Zx3CD5xXQFb/kfeOQm9MFSLoiKdTWTcN5KfZnqHLs3VfCJsB5ZkhYcSeIeJ
wt1lKoq5IpDnyv9IgBPPimTS0edxs46PvDcy2EO7lo0ftAG/RzDyNVSkzdxMawa9
2KVu4QCz1vkAyhlV7Z61TEY2X1tvEhZHb8D0eUhp09cIHjQwh4fFIMXWnJXGwPH/
q9mrsDzyUnQAB1W6zFHMX4Z/7pdXrsVVvAaUPfjnyi2FL+Ed
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:10:44 2026 by rpki-client