Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/u7wFVO7nxymihLp225w2K5t9iXQ.roa
File: u7wFVO7nxymihLp225w2K5t9iXQ.roa (raw, json)
Hash identifier: cLsJ9qx1KNyQsRqmjj062bjF2+zXRoM5yUYiUP8VehM=
Subject key identifier: BB:BC:05:54:EE:E7:C7:29:A2:84:BA:76:DB:9C:36:2B:9B:7D:89:74
Certificate issuer: /CN=323b4edeb6d65434aac1ead18e080dbeab63d6b4
Certificate serial: 01A10C16158FC437130AD32DA2233CA1EA3E
Authority key identifier: 32:3B:4E:DE:B6:D6:54:34:AA:C1:EA:D1:8E:08:0D:BE:AB:63:D6:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjtO3rbWVDSqwerRjggNvqtj1rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/u7wFVO7nxymihLp225w2K5t9iXQ.roa
Signing time: Mon 05 Oct 2026 12:42:16 +0000
ROA not before: Mon 05 Oct 2026 12:42:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218539
IP address blocks: 2a0f:b280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/MjtO3rbWVDSqwerRjggNvqtj1rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/MjtO3rbWVDSqwerRjggNvqtj1rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjtO3rbWVDSqwerRjggNvqtj1rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:16:15:8f:c4:37:13:0a:d3:2d:a2:23:3c:a1:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323b4edeb6d65434aac1ead18e080dbeab63d6b4
Validity
Not Before: Oct 5 12:42:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbbc0554eee7c729a284ba76db9c362b9b7d8974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:e8:96:be:45:b9:59:81:4c:8d:f2:36:fc:
6d:ae:62:e2:65:65:2d:25:b5:41:e0:bb:b1:5f:82:
cb:8a:2d:5e:28:ac:92:65:17:9b:90:41:cd:a4:d5:
44:35:b5:8a:dc:8d:2c:21:9d:0d:80:5c:45:db:f3:
48:68:2e:84:6e:94:ab:5a:33:3b:f1:6d:0e:42:0a:
ee:c0:3c:28:56:97:56:31:0f:28:92:78:29:e0:bd:
16:89:2a:5d:d3:6f:90:dd:41:af:ec:90:dd:fb:63:
2d:11:25:5a:10:63:41:26:8b:9b:3e:ef:f4:db:95:
bb:07:5a:28:01:d6:56:db:b5:0b:38:fd:44:6c:b8:
65:e4:6e:c4:d8:d9:b1:2c:15:85:5a:0c:57:9d:87:
65:77:04:90:a3:e5:d6:08:5f:1e:f3:e2:b3:c3:32:
7a:0b:73:d3:ba:d5:94:83:e2:21:1f:db:08:07:e8:
ec:5a:3b:64:0d:9e:2e:5b:35:08:66:12:46:30:fe:
ad:71:04:e8:2d:7e:7c:52:ac:92:03:cc:10:19:1a:
4b:bf:b0:bc:9e:52:f0:65:58:bc:bd:72:a2:0a:e2:
fa:5d:65:aa:5b:d3:d2:45:78:48:ec:9a:9a:46:21:
33:df:ba:98:8c:21:f6:d6:0d:8c:c1:3b:42:74:50:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:05:54:EE:E7:C7:29:A2:84:BA:76:DB:9C:36:2B:9B:7D:89:74
X509v3 Authority Key Identifier:
keyid:32:3B:4E:DE:B6:D6:54:34:AA:C1:EA:D1:8E:08:0D:BE:AB:63:D6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjtO3rbWVDSqwerRjggNvqtj1rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/u7wFVO7nxymihLp225w2K5t9iXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/MjtO3rbWVDSqwerRjggNvqtj1rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b280::/29
Signature Algorithm: sha256WithRSAEncryption
5d:7a:bd:aa:cf:95:24:e9:c6:09:7b:bc:81:ad:48:82:2a:6b:
ab:df:7a:aa:83:ec:d3:33:83:20:4b:17:6a:ae:0a:b6:61:2c:
40:81:db:a0:4a:f8:a5:c3:eb:05:21:11:44:83:fe:ac:e2:44:
7c:41:76:cf:d5:36:8e:3e:c3:87:c8:f3:d3:f9:b6:0b:21:2b:
3e:84:2e:3c:79:f9:92:3f:55:7f:9d:d0:da:ad:a6:55:80:56:
18:48:a4:2d:76:f9:7d:62:f4:14:96:14:99:eb:37:08:5f:a8:
72:8e:7f:d8:5f:f3:d1:f1:18:fd:ac:f1:7f:4c:7f:bd:71:d9:
26:da:2b:d2:6f:26:91:ae:8f:b9:23:62:39:e8:a0:89:4a:1c:
b7:f6:f1:31:98:b4:ab:8c:8f:4c:47:5a:47:86:36:65:68:0c:
7a:42:2f:d9:6f:65:32:60:cc:17:95:73:7e:39:f2:59:dd:56:
5b:fd:73:df:cd:83:39:c9:2e:22:52:ac:6b:35:7b:2b:d7:6d:
47:f8:13:37:a7:3f:3c:cd:96:44:9d:75:47:cb:25:13:69:5a:
e2:69:34:46:7e:02:86:fe:a6:2d:13:4b:b0:99:6d:c1:35:48:
4e:3a:b4:47:84:e5:02:46:0f:02:f9:a4:b2:c2:2f:f7:f6:78:
c8:b9:1f:f3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaEMFhWPxDcTCtMtoiM8oeo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyM2I0ZWRlYjZkNjU0MzRhYWMxZWFkMThlMDgwZGJlYWI2
M2Q2YjQwHhcNMjYxMDA1MTI0MjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmJjMDU1NGVlZTdjNzI5YTI4NGJhNzZkYjljMzYyYjliN2Q4OTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhHolr5FuVmBTI3yNvxtrmLiZWUt
JbVB4LuxX4LLii1eKKySZRebkEHNpNVENbWK3I0sIZ0NgFxF2/NIaC6EbpSrWjM7
8W0OQgruwDwoVpdWMQ8okngp4L0WiSpd02+Q3UGv7JDd+2MtESVaEGNBJoubPu/0
25W7B1ooAdZW27ULOP1EbLhl5G7E2NmxLBWFWgxXnYdldwSQo+XWCF8e8+KzwzJ6
C3PTutWUg+IhH9sIB+jsWjtkDZ4uWzUIZhJGMP6tcQToLX58UqySA8wQGRpLv7C8
nlLwZVi8vXKiCuL6XWWqW9PSRXhI7JqaRiEz37qYjCH21g2MwTtCdFCFVQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLu8BVTu58cpooS6dtucNiubfYl0MB8GA1UdIwQY
MBaAFDI7Tt621lQ0qsHq0Y4IDb6rY9a0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWp0TzNyYldWRFNxd2VyUmpnZ052cXRqMXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82Zjk4MzUtMmQ4MC00MGRlLTk2ZjMt
ZTBjNzJkMTE2YjIzLzEvdTd3RlZPN254eW1paExwMjI1dzJLNXQ5aVhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82Zjk4MzUtMmQ4MC00MGRlLTk2ZjMtZTBjNzJkMTE2YjIz
LzEvTWp0TzNyYldWRFNxd2VyUmpnZ052cXRqMXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg+ygDAN
BgkqhkiG9w0BAQsFAAOCAQEAXXq9qs+VJOnGCXu8ga1Igiprq996qoPs0zODIEsX
aq4KtmEsQIHboEr4pcPrBSERRIP+rOJEfEF2z9U2jj7Dh8jz0/m2CyErPoQuPHn5
kj9Vf53Q2q2mVYBWGEikLXb5fWL0FJYUmes3CF+oco5/2F/z0fEY/azxf0x/vXHZ
Jtor0m8mka6PuSNiOeigiUoct/bxMZi0q4yPTEdaR4Y2ZWgMekIv2W9lMmDMF5Vz
fjnyWd1WW/1z382DOckuIlKsazV7K9dtR/gTN6c/PM2WRJ11R8slE2la4mk0Rn4C
hv6mLRNLsJltwTVITjq0R4TlAkYPAvmkssIv9/Z4yLkf8w==
-----END CERTIFICATE-----
Generated at Sat Oct 10 21:26:15 2026 by rpki-client