Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RuQAhDmELxkKACke2IllcZY3w98.roa
File: RuQAhDmELxkKACke2IllcZY3w98.roa (raw, json)
Hash identifier: RPHRZbHXPNBB9Vcd5iLjZJKAw88pq7WqFb3MW0zDFGo=
Subject key identifier: 46:E4:00:84:39:84:2F:19:0A:00:29:1E:D8:89:65:71:96:37:C3:DF
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01A0A69A55EB6C3BDAEB6788EBD10ED76E59
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RuQAhDmELxkKACke2IllcZY3w98.roa
Signing time: Tue 15 Sep 2026 19:45:27 +0000
ROA not before: Tue 15 Sep 2026 19:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214976
IP address blocks: 2a0a:79c7:fe00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:9a:55:eb:6c:3b:da:eb:67:88:eb:d1:0e:d7:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Sep 15 19:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e4008439842f190a00291ed88965719637c3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1a:cf:20:89:a1:a3:68:af:01:b6:92:1e:a0:
d4:25:21:47:dd:b2:08:d2:1a:8c:0b:e4:9e:e5:d2:
76:b3:48:af:64:d8:71:3d:55:3d:b7:c0:66:bb:4f:
11:47:63:40:0b:a3:4a:52:2a:d4:85:56:3b:69:db:
06:e6:7d:4a:02:c1:67:3b:e1:63:c4:a1:d5:13:f6:
67:9d:f0:39:48:b3:a8:b0:94:80:0c:62:03:db:f4:
d6:34:77:4b:97:88:f8:d4:e2:bb:55:79:c1:33:f8:
2f:d7:4a:be:51:50:21:66:14:2f:31:64:35:48:1d:
9c:f2:45:19:86:c4:8e:7b:0d:28:4b:e7:0a:da:0b:
a4:80:10:46:15:95:19:df:cb:d8:27:b0:23:56:7f:
28:6d:d8:8c:78:90:7b:63:e3:f1:9c:44:dd:a4:0f:
52:1c:48:80:3d:d1:10:60:2f:58:a4:9d:d1:4c:49:
0c:5a:64:6b:c0:af:f7:d3:cb:dd:5e:8e:65:0b:6e:
48:5a:5f:ab:dc:1d:b8:72:62:8c:1a:cc:6e:9d:bf:
c3:0b:ad:ec:bb:57:3d:b7:46:32:ce:35:80:17:80:
20:94:96:c9:25:ae:2f:29:83:3f:1d:44:79:d9:72:
4f:86:5e:8d:35:9f:9b:0d:96:05:43:69:97:00:91:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E4:00:84:39:84:2F:19:0A:00:29:1E:D8:89:65:71:96:37:C3:DF
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RuQAhDmELxkKACke2IllcZY3w98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
41:56:de:f8:d9:3c:04:4c:4f:20:37:62:4f:c1:98:a6:90:c4:
bd:d4:2a:57:a2:61:e9:78:80:43:a1:a6:3a:7e:b6:79:13:72:
24:de:97:81:fe:3a:55:48:2e:a1:4a:73:5d:93:0c:fd:10:84:
89:2f:e2:20:fc:92:62:35:50:35:56:64:5f:0e:ac:b8:81:74:
58:01:fb:74:00:63:2f:b5:c0:56:30:4e:bc:61:53:61:e5:1d:
f7:02:3e:96:0d:3c:52:9f:c6:a5:a7:40:e5:36:08:04:c8:34:
e6:62:d7:c5:55:4a:78:fd:4d:5b:68:82:0b:e9:33:24:e4:7b:
6a:db:12:33:0b:e4:c9:d1:94:0a:a8:c1:01:6b:9c:3b:74:c1:
90:1b:1b:59:4d:ea:f3:6a:de:64:7f:49:bc:e5:de:a0:ff:2d:
9b:d3:a8:1c:18:2b:cf:4f:c9:c7:a8:7a:13:7b:57:9b:09:94:
ca:22:58:86:5d:ad:c6:b3:da:ca:8c:f8:fd:81:25:b3:b3:cb:
21:53:71:fe:f9:25:0a:64:48:ab:10:d6:ef:f5:51:86:2c:1b:
83:13:e1:28:70:23:69:77:d1:01:b9:25:41:18:82:49:9c:47:
d0:22:25:1f:69:74:ad:70:ba:fc:69:89:32:be:40:0c:6d:ec:
cb:05:23:38
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaCmmlXrbDva62eI69EO125ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjYwOTE1MTk0NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmU0MDA4NDM5ODQyZjE5MGEwMDI5MWVkODg5NjU3MTk2MzdjM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BrPIImho2ivAbaSHqDUJSFH3bII
0hqMC+Se5dJ2s0ivZNhxPVU9t8Bmu08RR2NAC6NKUirUhVY7adsG5n1KAsFnO+Fj
xKHVE/ZnnfA5SLOosJSADGID2/TWNHdLl4j41OK7VXnBM/gv10q+UVAhZhQvMWQ1
SB2c8kUZhsSOew0oS+cK2gukgBBGFZUZ38vYJ7AjVn8obdiMeJB7Y+PxnETdpA9S
HEiAPdEQYC9YpJ3RTEkMWmRrwK/308vdXo5lC25IWl+r3B24cmKMGsxunb/DC63s
u1c9t0YyzjWAF4AglJbJJa4vKYM/HUR52XJPhl6NNZ+bDZYFQ2mXAJHHKwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEbkAIQ5hC8ZCgApHtiJZXGWN8PfMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvUnVRQWhEbUVMeGtLQUNrZTJJbGxjWlkzdzk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgp5x/4w
DQYJKoZIhvcNAQELBQADggEBAEFW3vjZPARMTyA3Yk/BmKaQxL3UKleiYel4gEOh
pjp+tnkTciTel4H+OlVILqFKc12TDP0QhIkv4iD8kmI1UDVWZF8OrLiBdFgB+3QA
Yy+1wFYwTrxhU2HlHfcCPpYNPFKfxqWnQOU2CATINOZi18VVSnj9TVtoggvpMyTk
e2rbEjML5MnRlAqowQFrnDt0wZAbG1lN6vNq3mR/Sbzl3qD/LZvTqBwYK89Pyceo
ehN7V5sJlMoiWIZdrcaz2sqM+P2BJbOzyyFTcf75JQpkSKsQ1u/1UYYsG4MT4Shw
I2l30QG5JUEYgkmcR9AiJR9pdK1wuvxpiTK+QAxt7MsFIzg=
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:32 2026 by rpki-client