Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/iBXAJacWskCfTvYwVIbL7c7kj4g.roa
File: iBXAJacWskCfTvYwVIbL7c7kj4g.roa (raw, json)
Hash identifier: dZCIjiqJArGvQpHbj2ePkk+WvCROq12O/OP8sI/4pLc=
Subject key identifier: 88:15:C0:25:A7:16:B2:40:9F:4E:F6:30:54:86:CB:ED:CE:E4:8F:88
Certificate issuer: /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial: 01A15E9CE7399E2C5E1CB4807A0CF541F58E
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/iBXAJacWskCfTvYwVIbL7c7kj4g.roa
Signing time: Wed 21 Oct 2026 13:18:23 +0000
ROA not before: Wed 21 Oct 2026 13:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218465
IP address blocks: 2a0e:e001:20::/44 maxlen: 48
2a0e:e001:20::/48 maxlen: 48
2a0e:e001:21::/48 maxlen: 48
2a0e:e001:22::/48 maxlen: 48
2a0e:e001:23::/48 maxlen: 48
2a0e:e001:24::/48 maxlen: 48
2a0e:e001:25::/48 maxlen: 48
2a0e:e001:26::/48 maxlen: 48
2a0e:e001:27::/48 maxlen: 48
2a0e:e001:28::/48 maxlen: 48
2a0e:e001:29::/48 maxlen: 48
2a0e:e001:2a::/48 maxlen: 48
2a0e:e001:2b::/48 maxlen: 48
2a0e:e001:2c::/48 maxlen: 48
2a0e:e001:2d::/48 maxlen: 48
2a0e:e001:2e::/48 maxlen: 48
2a0e:e001:2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:9c:e7:39:9e:2c:5e:1c:b4:80:7a:0c:f5:41:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Validity
Not Before: Oct 21 13:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8815c025a716b2409f4ef6305486cbedcee48f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:9d:91:fd:d3:b0:8d:4a:d2:8c:41:72:d8:
7d:9f:09:f7:b9:da:48:c8:78:84:ea:25:c9:4b:7c:
fe:cf:d0:a5:e9:4c:25:fd:e3:c4:56:ba:39:a6:ed:
b6:6f:33:be:db:38:75:05:8e:2b:8a:34:aa:89:2a:
a1:eb:0d:9f:fa:fb:8f:be:eb:1d:8b:80:b7:f5:00:
7e:34:9f:71:04:03:3a:d7:4e:e6:6b:b8:fa:da:a8:
d6:49:62:c1:20:39:4f:60:46:ca:63:a1:32:a9:46:
0f:6c:0f:94:c5:44:f0:c2:3d:39:69:47:99:74:a8:
a7:ae:2b:92:7e:93:aa:80:dc:c8:bd:96:86:cc:3c:
bc:3d:35:92:8f:36:7d:dc:84:24:e5:5f:2d:f8:1c:
e1:b7:27:94:e1:ef:3a:cc:60:81:de:d0:ef:ad:ce:
3a:5c:dd:9d:f6:cb:32:29:af:1e:80:19:75:fb:d7:
98:96:7b:ff:a2:80:73:b7:e4:96:95:31:5c:4f:a7:
d1:2a:e5:54:38:0c:5b:b5:2f:6c:38:26:aa:03:1c:
3e:46:af:16:d5:fe:26:ea:7e:57:cb:d3:57:af:8b:
85:4e:44:37:02:2a:f2:2a:33:8b:bd:24:3e:16:bd:
de:0e:95:99:df:0e:fd:2c:8a:40:28:f2:e3:c2:a7:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:C0:25:A7:16:B2:40:9F:4E:F6:30:54:86:CB:ED:CE:E4:8F:88
X509v3 Authority Key Identifier:
keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/iBXAJacWskCfTvYwVIbL7c7kj4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e001:20::/44
Signature Algorithm: sha256WithRSAEncryption
9f:48:a0:cc:75:04:23:55:fe:93:4b:31:45:7a:07:3e:9c:05:
65:db:8d:94:34:42:98:0f:8e:e1:85:9d:32:07:18:3c:1b:c8:
f5:bc:a3:0e:28:cd:8b:a5:1f:87:ab:83:87:b6:2e:34:dc:13:
c9:9c:96:01:78:8f:f7:2b:2d:de:2d:a5:7f:da:5b:cb:c4:8b:
73:27:64:56:67:84:97:ad:99:3f:cc:21:58:6b:a5:a9:8f:89:
12:3e:a4:98:8a:4f:93:a5:47:8d:4e:95:19:59:82:d0:c9:03:
65:e8:d8:2e:d2:ad:17:95:b2:da:b2:fc:46:d2:57:7d:21:46:
3e:34:a1:3b:f3:da:4a:61:76:57:9b:8c:ed:e4:a0:92:1d:89:
7d:26:4d:32:1a:49:67:44:5f:8a:bc:90:6f:76:e1:78:6b:a5:
f6:fc:e1:77:c5:fd:fb:c2:2a:04:3f:d2:8b:d0:e6:23:fd:63:
8a:66:f8:1b:50:21:81:54:b0:e1:d1:e1:f8:3e:36:40:95:be:
78:11:03:d3:9c:cb:2e:ed:ea:43:ab:3a:8e:b0:21:0f:c1:b6:
76:46:ce:df:e3:59:7d:c6:9a:e9:e5:ce:ef:3f:2a:1e:48:07:
9e:90:f5:5f:ea:7e:52:11:52:12:7d:9b:07:32:0c:d0:ef:60:
04:86:d6:45
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaFenOc5nixeHLSAegz1QfWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjEwMmU4MDczNWZlYzg5MjFlOWY1MDlmYzUzYjEwZTJi
ZTk1MDUwHhcNMjYxMDIxMTMxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODE1YzAyNWE3MTZiMjQwOWY0ZWY2MzA1NDg2Y2JlZGNlZTQ4Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aidkf3TsI1K0oxBcth9nwn3udpI
yHiE6iXJS3z+z9Cl6Uwl/ePEVro5pu22bzO+2zh1BY4rijSqiSqh6w2f+vuPvusd
i4C39QB+NJ9xBAM6107ma7j62qjWSWLBIDlPYEbKY6EyqUYPbA+UxUTwwj05aUeZ
dKinriuSfpOqgNzIvZaGzDy8PTWSjzZ93IQk5V8t+BzhtyeU4e86zGCB3tDvrc46
XN2d9ssyKa8egBl1+9eYlnv/ooBzt+SWlTFcT6fRKuVUOAxbtS9sOCaqAxw+Rq8W
1f4m6n5Xy9NXr4uFTkQ3AiryKjOLvSQ+Fr3eDpWZ3w79LIpAKPLjwqcZSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIgVwCWnFrJAn072MFSGy+3O5I+IMB8GA1UdIwQY
MBaAFKFhAugHNf7Ikh6fUJ/FOxDivpUFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dFQzZBYzFfc2lTSHA5UW44VTdFT0stbFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZWJlOGItZWFlNC00YTQwLThhN2Ut
MDFhMmIxNTkyZDY4LzEvaUJYQUphY1dza0NmVHZZd1ZJYkw3YzdrajRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZWJlOGItZWFlNC00YTQwLThhN2UtMDFhMmIxNTkyZDY4
LzEvb1dFQzZBYzFfc2lTSHA5UW44VTdFT0stbFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg7gAQAg
MA0GCSqGSIb3DQEBCwUAA4IBAQCfSKDMdQQjVf6TSzFFegc+nAVl242UNEKYD47h
hZ0yBxg8G8j1vKMOKM2LpR+Hq4OHti403BPJnJYBeI/3Ky3eLaV/2lvLxItzJ2RW
Z4SXrZk/zCFYa6Wpj4kSPqSYik+TpUeNTpUZWYLQyQNl6Ngu0q0XlbLasvxG0ld9
IUY+NKE789pKYXZXm4zt5KCSHYl9Jk0yGklnRF+KvJBvduF4a6X2/OF3xf37wioE
P9KL0OYj/WOKZvgbUCGBVLDh0eH4PjZAlb54EQPTnMsu7epDqzqOsCEPwbZ2Rs7f
41l9xprp5c7vPyoeSAeekPVf6n5SEVISfZsHMgzQ72AEhtZF
-----END CERTIFICATE-----
Generated at Tue Nov 10 02:36:27 2026 by rpki-client