Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/jOBP3zLW8YgmANuEMRwkaWve-dI.roa
File: jOBP3zLW8YgmANuEMRwkaWve-dI.roa (raw, json)
Hash identifier: 8Bp67AKqv3PpkKc293GUR9A2V/TrsmosrfXd6/pGpK0=
Subject key identifier: 8C:E0:4F:DF:32:D6:F1:88:26:00:DB:84:31:1C:24:69:6B:DE:F9:D2
Certificate issuer: /CN=786cb846a73959b38f514376feeec11c4bb31ad0
Certificate serial: 019FA9DEBB6652F44385FBC4425684E450F8
Authority key identifier: 78:6C:B8:46:A7:39:59:B3:8F:51:43:76:FE:EE:C1:1C:4B:B3:1A:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/jOBP3zLW8YgmANuEMRwkaWve-dI.roa
Signing time: Tue 28 Jul 2026 17:56:14 +0000
ROA not before: Tue 28 Jul 2026 17:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219444
IP address blocks: 2001:678:12a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:de:bb:66:52:f4:43:85:fb:c4:42:56:84:e4:50:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786cb846a73959b38f514376feeec11c4bb31ad0
Validity
Not Before: Jul 28 17:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ce04fdf32d6f1882600db84311c24696bdef9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:2d:62:4b:3a:59:ac:8d:46:d0:0b:9a:63:
86:c3:e3:f4:a4:99:a2:bf:f9:28:d1:64:34:70:6c:
18:6d:fa:eb:25:80:22:b3:02:5d:e8:74:14:d7:a7:
1d:ec:9b:e4:8f:d7:ca:76:42:38:81:06:71:d5:d8:
6f:99:b0:82:eb:50:76:a9:5d:af:7f:53:7b:76:a7:
50:9c:97:43:dc:a0:9d:cf:9e:7f:68:e6:16:0a:21:
61:d3:38:d7:aa:91:08:d9:0f:5e:99:04:9c:d3:c6:
72:6c:a2:3d:1a:85:81:da:e8:e5:bc:fc:94:9a:e8:
12:41:ec:fb:18:55:a9:84:c3:f9:f6:8e:7e:ac:8b:
33:56:b5:f4:51:2e:70:db:8a:20:58:5c:9e:97:eb:
14:8b:bd:f0:0a:f6:7f:09:f5:dc:92:30:d2:49:86:
a2:ae:9f:89:d2:02:85:87:80:cd:14:f8:ad:99:7a:
0a:2b:b8:27:b9:e8:f9:cd:ef:21:06:1b:32:5d:44:
26:a9:9d:da:ba:45:e3:d6:bd:3b:4f:cd:ea:72:a6:
6b:ee:74:9d:8c:14:1f:03:61:c3:cb:b8:0e:8f:52:
ef:91:91:50:1c:b9:d5:81:7c:79:bc:c0:b7:1a:f3:
a4:31:54:5d:db:5e:b1:f6:4d:47:c2:b2:66:26:ac:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:4F:DF:32:D6:F1:88:26:00:DB:84:31:1C:24:69:6B:DE:F9:D2
X509v3 Authority Key Identifier:
keyid:78:6C:B8:46:A7:39:59:B3:8F:51:43:76:FE:EE:C1:1C:4B:B3:1A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/jOBP3zLW8YgmANuEMRwkaWve-dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12a8::/48
Signature Algorithm: sha256WithRSAEncryption
47:c4:97:4e:1b:35:67:03:c1:b3:b0:9c:fc:5e:0b:92:54:cf:
5b:72:ce:e8:b7:5e:8b:d1:f4:fa:9e:42:59:82:6e:b6:73:38:
62:82:8c:52:3b:8e:6f:ca:d4:07:24:31:51:42:e5:03:7a:1c:
db:9d:60:47:26:db:77:7f:8f:e3:27:8c:ca:4e:f1:be:86:03:
57:c9:f9:40:9b:5a:29:1c:c8:0d:e0:e5:69:32:72:c2:66:2f:
ba:86:d1:0d:0f:c2:b3:5c:84:ef:18:b7:72:ef:96:1d:1b:ea:
e9:e3:25:cd:6f:d6:ec:40:60:13:66:43:4b:30:64:79:f3:e2:
36:df:d9:4d:09:97:d1:d9:9c:be:b6:04:a1:be:8d:44:e1:be:
fa:ce:e9:5c:4c:54:b9:8c:82:11:38:8e:b1:6f:dc:c1:ef:93:
52:64:9f:cb:79:d7:a9:27:85:a2:3e:63:ed:7f:9d:4b:f8:11:
62:fa:88:57:fa:be:1c:03:8b:2f:58:94:84:30:2f:1a:3c:5e:
0d:30:7d:e0:45:e0:9d:b0:cc:c3:05:e5:1c:db:e4:66:24:65:
9a:d7:50:de:30:00:24:d4:f6:7e:15:c4:33:bc:be:a3:aa:2e:
8c:94:04:2a:20:7b:3a:e9:b1:62:62:d6:e8:74:fb:60:ab:07:
d2:dc:c0:ec
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ+p3rtmUvRDhfvEQlaE5FD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NmNiODQ2YTczOTU5YjM4ZjUxNDM3NmZlZWVjMTFjNGJi
MzFhZDAwHhcNMjYwNzI4MTc1NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2UwNGZkZjMyZDZmMTg4MjYwMGRiODQzMTFjMjQ2OTZiZGVmOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS8tYks6WayNRtALmmOGw+P0pJmi
v/ko0WQ0cGwYbfrrJYAiswJd6HQU16cd7Jvkj9fKdkI4gQZx1dhvmbCC61B2qV2v
f1N7dqdQnJdD3KCdz55/aOYWCiFh0zjXqpEI2Q9emQSc08ZybKI9GoWB2ujlvPyU
mugSQez7GFWphMP59o5+rIszVrX0US5w24ogWFyel+sUi73wCvZ/CfXckjDSSYai
rp+J0gKFh4DNFPitmXoKK7gnuej5ze8hBhsyXUQmqZ3aukXj1r07T83qcqZr7nSd
jBQfA2HDy7gOj1LvkZFQHLnVgXx5vMC3GvOkMVRd216x9k1HwrJmJqydeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIzgT98y1vGIJgDbhDEcJGlr3vnSMB8GA1UdIwQY
MBaAFHhsuEanOVmzj1FDdv7uwRxLsxrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUd5NFJxYzVXYk9QVVVOMl91N0JIRXV6R3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNDBjNDgtOWU5NS00OGE2LThlMDgt
N2YwZTc0YjFkNTM5LzEvak9CUDN6TFc4WWdtQU51RU1Sd2thV3ZlLWRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNDBjNDgtOWU5NS00OGE2LThlMDgtN2YwZTc0YjFkNTM5
LzEvZUd5NFJxYzVXYk9QVVVOMl91N0JIRXV6R3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBKo
MA0GCSqGSIb3DQEBCwUAA4IBAQBHxJdOGzVnA8GzsJz8XguSVM9bcs7ot16L0fT6
nkJZgm62czhigoxSO45vytQHJDFRQuUDehzbnWBHJtt3f4/jJ4zKTvG+hgNXyflA
m1opHMgN4OVpMnLCZi+6htEND8KzXITvGLdy75YdG+rp4yXNb9bsQGATZkNLMGR5
8+I239lNCZfR2Zy+tgShvo1E4b76zulcTFS5jIIROI6xb9zB75NSZJ/LedepJ4Wi
PmPtf51L+BFi+ohX+r4cA4svWJSEMC8aPF4NMH3gReCdsMzDBeUc2+RmJGWa11De
MAAk1PZ+FcQzvL6jqi6MlAQqIHs66bFiYtbodPtgqwfS3MDs
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:05 2026 by rpki-client