Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/o7A35DRc5O8_grTZ_vs6gA7PVnE.roa
File: o7A35DRc5O8_grTZ_vs6gA7PVnE.roa (raw, json)
Hash identifier: vB0Vd8OkWl9088HYmXVKZuTPSYtvTYKPx2z9Mb/rXGg=
Subject key identifier: A3:B0:37:E4:34:5C:E4:EF:3F:82:B4:D9:FE:FB:3A:80:0E:CF:56:71
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019F9337C97CCDF6DB2EE3056280572916B4
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/o7A35DRc5O8_grTZ_vs6gA7PVnE.roa
Signing time: Fri 24 Jul 2026 08:22:14 +0000
ROA not before: Fri 24 Jul 2026 08:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205634
IP address blocks: 2a0a:79c0:f00::/48 maxlen: 48
2a0a:79c0:f01::/48 maxlen: 48
2a0a:79c0:f02::/48 maxlen: 48
2a0a:79c0:f03::/48 maxlen: 48
2a0a:79c0:f04::/48 maxlen: 48
2a0a:79c0:f05::/48 maxlen: 48
2a0a:79c0:f06::/48 maxlen: 48
2a0a:79c0:f07::/48 maxlen: 48
2a0a:79c0:f08::/48 maxlen: 48
2a0a:79c0:f09::/48 maxlen: 48
2a0a:79c0:f0a::/48 maxlen: 48
2a0a:79c0:f0b::/48 maxlen: 48
2a0a:79c0:f0c::/48 maxlen: 48
2a0a:79c0:f0d::/48 maxlen: 48
2a0a:79c0:f0e::/48 maxlen: 48
2a0a:79c0:f0f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:37:c9:7c:cd:f6:db:2e:e3:05:62:80:57:29:16:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jul 24 08:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3b037e4345ce4ef3f82b4d9fefb3a800ecf5671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:f0:3a:78:54:d9:8c:a1:c0:60:a0:84:af:
a1:ec:36:74:26:9d:fa:00:86:11:21:bd:23:5d:5e:
8d:88:81:b5:14:48:a6:06:50:eb:e0:cd:31:89:f1:
ed:d4:c4:3f:c8:d9:72:72:fc:7a:e5:c9:dd:37:d9:
3a:dc:58:2d:7c:d0:39:5a:19:d3:08:79:52:d3:84:
8c:4d:f5:90:91:cd:20:2f:88:a9:11:88:6f:e8:f8:
af:bd:e7:80:a9:69:4f:9f:88:47:06:b9:dd:4b:7f:
17:b4:78:ab:d8:aa:14:e5:bb:55:bb:1f:7b:d6:77:
2f:43:19:4a:f3:dc:7f:7d:fb:e0:9e:5c:c3:1a:ae:
f4:95:ee:8e:24:96:15:de:25:2a:03:4f:bf:4a:df:
ad:a7:c3:e2:3e:5d:52:aa:a3:d0:38:95:2c:e6:3e:
41:cb:0c:1d:46:70:a3:f7:10:0a:63:95:a7:6f:f6:
18:77:7f:2e:f0:45:34:6d:22:80:28:19:9b:1c:7a:
a7:cb:33:92:45:07:c2:72:65:37:da:99:55:8a:80:
44:2e:e3:82:ff:31:46:47:a7:2d:8c:38:04:93:c9:
a1:bf:3b:59:03:eb:3d:ee:63:89:a3:ab:a8:69:3b:
50:0b:99:23:6d:5e:d9:03:73:5f:b4:f0:f5:88:7a:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B0:37:E4:34:5C:E4:EF:3F:82:B4:D9:FE:FB:3A:80:0E:CF:56:71
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/o7A35DRc5O8_grTZ_vs6gA7PVnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:f00::/44
Signature Algorithm: sha256WithRSAEncryption
44:4e:64:03:32:65:be:9b:c1:8d:e1:d6:48:6d:e3:56:40:2f:
67:1f:64:f3:2e:2a:9a:b2:56:5e:6e:a4:c9:9b:1d:1a:71:4b:
52:03:81:ac:f9:b2:53:1f:be:0c:99:64:3e:6f:ef:f8:e5:13:
ac:48:fd:18:2a:f5:eb:fb:dd:9a:08:ed:c7:e1:46:ff:94:35:
af:39:b9:c1:7f:05:60:53:8c:f6:e6:93:95:e4:44:54:6c:9c:
21:bd:4c:d6:4e:ce:03:be:53:61:de:42:cc:23:ae:d8:a1:41:
ec:26:ec:e1:88:16:37:93:90:be:68:cf:7d:61:5b:3c:f1:d6:
9f:3d:a6:6b:e3:69:f9:52:45:47:d8:f1:dd:6c:30:0f:bd:b7:
0f:26:31:44:e5:c1:3a:6b:d3:b6:b5:d5:c5:38:f3:dd:af:a5:
2a:9f:b7:3f:f0:42:8d:97:ab:0d:09:72:1b:59:eb:b4:0f:b2:
48:ff:3c:cc:ec:b0:7b:1c:84:ef:ec:f0:f5:da:d6:84:a3:c1:
fb:c3:a3:93:2c:74:8e:01:d7:32:13:60:bc:75:2e:14:6b:13:
df:e4:a7:8a:a4:13:7a:2c:46:87:40:4f:fd:39:d5:9a:21:0b:
06:38:89:7d:80:44:0e:b9:b9:0c:53:5c:0d:16:ac:0c:b3:f6:
18:67:c4:b5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ+TN8l8zfbbLuMFYoBXKRa0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjYwNzI0MDgyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2IwMzdlNDM0NWNlNGVmM2Y4MmI0ZDlmZWZiM2E4MDBlY2Y1NjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye7wOnhU2YyhwGCghK+h7DZ0Jp36
AIYRIb0jXV6NiIG1FEimBlDr4M0xifHt1MQ/yNlycvx65cndN9k63FgtfNA5WhnT
CHlS04SMTfWQkc0gL4ipEYhv6PivveeAqWlPn4hHBrndS38XtHir2KoU5btVux97
1ncvQxlK89x/ffvgnlzDGq70le6OJJYV3iUqA0+/St+tp8PiPl1SqqPQOJUs5j5B
ywwdRnCj9xAKY5Wnb/YYd38u8EU0bSKAKBmbHHqnyzOSRQfCcmU32plVioBELuOC
/zFGR6ctjDgEk8mhvztZA+s97mOJo6uoaTtQC5kjbV7ZA3NftPD1iHoyDwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKOwN+Q0XOTvP4K02f77OoAOz1ZxMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvbzdBMzVEUmM1TzhfZ3JUWl92czZnQTdQVm5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgp5wA8A
MA0GCSqGSIb3DQEBCwUAA4IBAQBETmQDMmW+m8GN4dZIbeNWQC9nH2TzLiqaslZe
bqTJmx0acUtSA4Gs+bJTH74MmWQ+b+/45ROsSP0YKvXr+92aCO3H4Ub/lDWvObnB
fwVgU4z25pOV5ERUbJwhvUzWTs4DvlNh3kLMI67YoUHsJuzhiBY3k5C+aM99YVs8
8dafPaZr42n5UkVH2PHdbDAPvbcPJjFE5cE6a9O2tdXFOPPdr6Uqn7c/8EKNl6sN
CXIbWeu0D7JI/zzM7LB7HITv7PD12taEo8H7w6OTLHSOAdcyE2C8dS4UaxPf5KeK
pBN6LEaHQE/9OdWaIQsGOIl9gEQOubkMU1wNFqwMs/YYZ8S1
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:34:52 2026 by rpki-client