Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/J30uXUMfh3XSWzuHtItjsBGYdX4.roa
File: J30uXUMfh3XSWzuHtItjsBGYdX4.roa (raw, json)
Hash identifier: aaHMMpoNlOvcxmyKWoi17KEu5KKWFZ9/oYArmo2lGEQ=
Subject key identifier: 27:7D:2E:5D:43:1F:87:75:D2:5B:3B:87:B4:8B:63:B0:11:98:75:7E
Certificate issuer: /CN=bd0413c6e4482527651431211138838e133854de
Certificate serial: 01A08D887D39875082DCB707906FFFB05397
Authority key identifier: BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/J30uXUMfh3XSWzuHtItjsBGYdX4.roa
Signing time: Thu 10 Sep 2026 22:55:27 +0000
ROA not before: Thu 10 Sep 2026 22:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200841
IP address blocks: 2a13:7cc0:aa0::/48 maxlen: 48
2a13:7cc0:1600::/40 maxlen: 40
2a13:7cc0:1aa1::/48 maxlen: 48
2a13:7cc0:1ab0::/48 maxlen: 48
2a13:7cc0:1bb0::/48 maxlen: 48
2a13:7cc0:1ca1::/48 maxlen: 48
2a13:7cc0:1ca2::/48 maxlen: 48
2a13:7cc0:1ca3::/48 maxlen: 48
2a13:7cc0:1ca4::/48 maxlen: 48
2a13:7cc0:1cb0::/48 maxlen: 48
2a13:7cc0:1da1::/48 maxlen: 48
2a13:7cc0:1da2::/48 maxlen: 48
2a13:7cc0:1db0::/48 maxlen: 48
2a13:7cc0:2aa1::/48 maxlen: 48
2a13:7cc0:2aa2::/48 maxlen: 48
2a13:7cc0:2aa3::/48 maxlen: 48
2a13:7cc0:2aa5::/48 maxlen: 48
2a13:7cc0:2ab0::/48 maxlen: 48
2a13:7cc0:2ba1::/48 maxlen: 48
2a13:7cc0:2ba2::/48 maxlen: 48
2a13:7cc0:2bb0::/48 maxlen: 48
2a13:7cc0:2ca1::/48 maxlen: 48
2a13:7cc0:2ca3::/48 maxlen: 48
2a13:7cc0:2cb0::/48 maxlen: 48
2a13:7cc0:2da1::/48 maxlen: 48
2a13:7cc0:2da2::/48 maxlen: 48
2a13:7cc0:2db0::/48 maxlen: 48
2a13:7cc0:2ea1::/48 maxlen: 48
2a13:7cc0:2eb0::/48 maxlen: 48
2a13:7cc0:2fa1::/48 maxlen: 48
2a13:7cc0:2fb0::/48 maxlen: 48
2a13:7cc0:3aa1::/48 maxlen: 48
2a13:7cc0:3ab0::/48 maxlen: 48
2a13:7cc0:3ba1::/48 maxlen: 48
2a13:7cc0:3bb0::/48 maxlen: 48
2a13:7cc0:4aa1::/48 maxlen: 48
2a13:7cc0:4ab0::/48 maxlen: 48
2a13:7cc2:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:88:7d:39:87:50:82:dc:b7:07:90:6f:ff:b0:53:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd0413c6e4482527651431211138838e133854de
Validity
Not Before: Sep 10 22:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=277d2e5d431f8775d25b3b87b48b63b01198757e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:6c:64:04:c0:ef:8a:9b:79:40:95:58:4c:
f9:38:c9:cd:09:d6:03:c3:cd:09:bb:73:50:60:4b:
2a:20:55:bd:94:fa:fc:17:da:3e:01:12:44:a5:aa:
a5:0b:a4:e8:dd:1e:25:fd:6e:a1:ff:32:30:1f:17:
8a:f3:58:f2:d4:2f:c5:fa:70:5d:a0:68:b7:7b:df:
6d:9d:c7:a0:a0:92:b7:9b:c5:0a:76:a9:5a:4f:ab:
cf:f4:a3:5a:20:bc:7e:e1:6a:43:53:f7:54:3e:e4:
fa:d8:de:b3:05:4c:14:f3:16:10:8a:15:4b:8c:9a:
b5:57:1b:73:75:e8:d7:19:ed:bf:5a:48:45:fc:75:
8c:1d:2b:cc:fb:3a:0b:d4:a1:a6:9b:69:fc:51:20:
53:44:eb:af:03:d6:5c:15:03:05:04:dc:7b:b4:cc:
0b:33:6e:c5:a1:bf:c4:06:40:36:89:f9:4b:0b:bf:
7d:9e:76:2f:fe:eb:86:89:0b:70:bc:68:ff:94:63:
6f:09:82:3e:ed:19:86:55:9c:07:07:e7:93:6f:69:
50:be:fc:50:4c:4c:43:f8:a7:f3:ff:81:05:1a:b5:
2a:1b:41:4c:0a:4f:9c:19:84:8f:0e:de:e0:9d:c4:
c7:98:32:c6:7d:fd:0a:8e:62:2d:63:95:31:f7:fb:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7D:2E:5D:43:1F:87:75:D2:5B:3B:87:B4:8B:63:B0:11:98:75:7E
X509v3 Authority Key Identifier:
keyid:BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/J30uXUMfh3XSWzuHtItjsBGYdX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7cc0:aa0::/48
2a13:7cc0:1600::/40
2a13:7cc0:1aa1::/48
2a13:7cc0:1ab0::/48
2a13:7cc0:1bb0::/48
2a13:7cc0:1ca1::-2a13:7cc0:1ca4:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:1cb0::/48
2a13:7cc0:1da1::-2a13:7cc0:1da2:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:1db0::/48
2a13:7cc0:2aa1::-2a13:7cc0:2aa3:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:2aa5::/48
2a13:7cc0:2ab0::/48
2a13:7cc0:2ba1::-2a13:7cc0:2ba2:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:2bb0::/48
2a13:7cc0:2ca1::/48
2a13:7cc0:2ca3::/48
2a13:7cc0:2cb0::/48
2a13:7cc0:2da1::-2a13:7cc0:2da2:ffff:ffff:ffff:ffff:ffff
2a13:7cc0:2db0::/48
2a13:7cc0:2ea1::/48
2a13:7cc0:2eb0::/48
2a13:7cc0:2fa1::/48
2a13:7cc0:2fb0::/48
2a13:7cc0:3aa1::/48
2a13:7cc0:3ab0::/48
2a13:7cc0:3ba1::/48
2a13:7cc0:3bb0::/48
2a13:7cc0:4aa1::/48
2a13:7cc0:4ab0::/48
2a13:7cc2:1::/48
Signature Algorithm: sha256WithRSAEncryption
3b:00:bb:ae:71:f2:83:81:49:fe:af:79:69:8a:61:ca:d9:47:
7e:ac:3b:0c:dc:fa:26:4c:56:f7:1b:b0:65:b3:a1:eb:d0:b1:
c7:76:15:d4:37:01:13:1e:f6:d4:39:2e:e5:6d:1c:98:c9:ca:
04:b9:76:4e:51:de:ee:9d:a7:7b:4c:ce:94:a0:8f:08:9f:8e:
fd:08:8e:81:b7:f1:21:9e:b3:21:05:76:99:ec:58:64:4a:f2:
35:b1:82:3e:f6:5e:6d:dd:4b:4d:bf:af:01:f8:c8:ad:d6:4c:
e6:2e:a6:9f:0c:03:2a:00:d0:5d:70:3a:e8:fe:70:f5:65:a6:
cf:09:93:34:7e:5b:8f:81:8d:9a:d3:96:e4:4f:f8:ba:f4:9b:
f4:bb:1f:a3:97:4d:4f:52:13:68:0e:68:a8:e7:e9:97:f2:9c:
bf:f4:8f:2e:ea:43:14:89:75:d7:0e:e0:19:f1:30:56:81:1b:
8e:c6:30:64:31:09:ee:d5:48:34:30:65:83:2c:fc:14:ce:b0:
a1:07:e0:71:b2:ad:5d:d8:0b:00:90:f9:e1:25:c8:a4:6a:a4:
93:5d:0d:77:97:e1:7a:e7:33:b4:37:cd:bd:08:c2:c2:a5:aa:
3a:e8:69:ba:90:24:74:5d:bb:5c:a7:f9:6c:01:8e:ba:fd:63:
b2:d3:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:06 2026 by rpki-client