Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/2ghXLje3CtOKAOfAW4RGcxd3Bss.roa
File: 2ghXLje3CtOKAOfAW4RGcxd3Bss.roa (raw, json)
Hash identifier: brtYr05LpHw9sEYY9LPmPBUHRzz9zhnl8JecPqI/oMY=
Subject key identifier: DA:08:57:2E:37:B7:0A:D3:8A:00:E7:C0:5B:84:46:73:17:77:06:CB
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A042AD620EADE6965BD81E0B1F36B71942
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/2ghXLje3CtOKAOfAW4RGcxd3Bss.roa
Signing time: Thu 27 Aug 2026 10:04:14 +0000
ROA not before: Thu 27 Aug 2026 10:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218865
IP address blocks: 2a10:fa80:8000::/36 maxlen: 36
2a10:fa81:1900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:ad:62:0e:ad:e6:96:5b:d8:1e:0b:1f:36:b7:19:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 27 10:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da08572e37b70ad38a00e7c05b844673177706cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:d1:83:93:79:07:fa:f5:48:6c:cc:3f:05:
90:4b:21:a7:4a:b5:6d:db:13:f4:17:12:4a:23:26:
d7:cf:22:bf:d5:36:10:61:72:4c:ac:e2:41:39:de:
b9:86:77:8e:25:4c:5a:45:4e:d6:a1:e0:74:a6:a1:
7d:37:18:e7:6e:30:f9:4c:83:aa:ac:b6:16:ca:b6:
7f:83:7c:53:cd:41:f9:e8:74:fd:d1:c3:05:b4:0b:
6c:5e:57:45:19:27:f2:25:b2:45:78:46:0b:bc:2f:
02:4e:e2:03:42:d8:3c:14:28:c0:d4:25:15:6e:2d:
1d:97:53:bf:ee:3c:fb:10:f8:8c:24:b3:a6:60:29:
9f:d1:aa:01:12:f0:e2:f9:1b:ba:2d:6a:43:00:ea:
eb:e3:9a:d0:ef:e4:08:06:7f:2e:8f:99:a9:3e:29:
36:06:2a:41:c2:90:76:5e:02:c0:f3:02:40:89:a4:
5a:ac:a6:cf:7c:4e:7c:64:4a:93:45:df:91:24:77:
dc:3c:cb:8a:3c:b0:ab:64:7c:ce:f5:52:c2:80:2e:
48:94:07:d3:b7:e4:83:33:3c:b4:31:28:5e:49:1e:
31:00:56:1b:3d:fc:d0:c6:54:e3:a1:93:4b:dc:ec:
83:8d:67:d0:15:d8:8f:bd:a0:25:8a:fc:b1:db:4d:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:08:57:2E:37:B7:0A:D3:8A:00:E7:C0:5B:84:46:73:17:77:06:CB
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/2ghXLje3CtOKAOfAW4RGcxd3Bss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:8000::/36
2a10:fa81:1900::/40
Signature Algorithm: sha256WithRSAEncryption
49:48:20:ac:e7:3c:62:88:97:83:2e:37:43:85:63:2f:17:60:
93:b6:c7:a9:65:09:fc:39:78:70:2e:08:99:a8:04:bd:46:14:
97:38:d8:ab:7f:80:c4:bc:3e:67:61:aa:24:72:38:0f:c4:c0:
79:9b:85:22:56:c0:06:ef:56:f6:06:52:6d:57:5a:5d:48:b2:
53:a2:3e:a0:e0:03:c0:a6:88:9f:1c:d7:12:36:02:39:44:a5:
80:d7:82:8e:1c:dd:6f:b0:7d:68:9a:d0:11:55:ae:72:90:ba:
c7:44:60:b8:e4:56:80:cf:45:2d:dd:6e:c2:d5:a3:0f:6a:8b:
d3:74:8b:61:db:e1:c6:c6:bf:86:d5:a1:07:1a:ed:a8:58:e1:
ce:22:0b:e7:e8:ee:69:31:7f:62:bc:e9:53:8f:be:ca:0d:48:
b0:38:2f:91:a2:01:bb:4e:89:a7:36:57:2d:68:6c:40:b3:9e:
d9:5c:71:0c:7e:a6:a4:ce:e0:3a:33:ea:24:4c:0e:60:fd:fa:
ca:c3:52:bc:0e:3e:9c:99:15:1e:2f:94:0c:bd:1e:34:7c:04:
63:78:e7:7c:07:2d:59:b4:31:14:ea:bd:b2:a7:ec:5b:c5:41:
22:20:fe:90:d6:6d:3e:b8:73:e6:cc:ef:c8:16:56:f8:e1:90:
0a:91:df:82
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAaBCrWIOreaWW9geCx82txlCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYwODI3MTAwNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTA4NTcyZTM3YjcwYWQzOGEwMGU3YzA1Yjg0NDY3MzE3NzcwNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVTRg5N5B/r1SGzMPwWQSyGnSrVt
2xP0FxJKIybXzyK/1TYQYXJMrOJBOd65hneOJUxaRU7WoeB0pqF9NxjnbjD5TIOq
rLYWyrZ/g3xTzUH56HT90cMFtAtsXldFGSfyJbJFeEYLvC8CTuIDQtg8FCjA1CUV
bi0dl1O/7jz7EPiMJLOmYCmf0aoBEvDi+Ru6LWpDAOrr45rQ7+QIBn8uj5mpPik2
BipBwpB2XgLA8wJAiaRarKbPfE58ZEqTRd+RJHfcPMuKPLCrZHzO9VLCgC5IlAfT
t+SDMzy0MSheSR4xAFYbPfzQxlTjoZNL3OyDjWfQFdiPvaAlivyx2007WQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFNoIVy43twrTigDnwFuERnMXdwbLMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvMmdoWExqZTNDdE9LQU9mQVc0UkdjeGQzQnNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKhD6gIAD
BgAqEPqBGTANBgkqhkiG9w0BAQsFAAOCAQEASUggrOc8YoiXgy43Q4VjLxdgk7bH
qWUJ/Dl4cC4ImagEvUYUlzjYq3+AxLw+Z2GqJHI4D8TAeZuFIlbABu9W9gZSbVda
XUiyU6I+oOADwKaInxzXEjYCOUSlgNeCjhzdb7B9aJrQEVWucpC6x0RguORWgM9F
Ld1uwtWjD2qL03SLYdvhxsa/htWhBxrtqFjhziIL5+juaTF/YrzpU4++yg1IsDgv
kaIBu06JpzZXLWhsQLOe2VxxDH6mpM7gOjPqJEwOYP36ysNSvA4+nJkVHi+UDL0e
NHwEY3jnfActWbQxFOq9sqfsW8VBIiD+kNZtPrhz5szvyBZW+OGQCpHfgg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:57 2026 by rpki-client