Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/CZCfDf4bmG0Ej3_Tue7v78oSA48.roa
File: CZCfDf4bmG0Ej3_Tue7v78oSA48.roa (raw, json)
Hash identifier: j9rHrfOJqRmXHz7XOfkVBUekTvY1/35O1T/0KYhFHDg=
Subject key identifier: 09:90:9F:0D:FE:1B:98:6D:04:8F:7F:D3:B9:EE:EF:EF:CA:12:03:8F
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019EB837986B7B25DA61936B3FD499B3C1C9
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/CZCfDf4bmG0Ej3_Tue7v78oSA48.roa
Signing time: Thu 11 Jun 2026 19:45:11 +0000
ROA not before: Thu 11 Jun 2026 19:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a10:fa81:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:37:98:6b:7b:25:da:61:93:6b:3f:d4:99:b3:c1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jun 11 19:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09909f0dfe1b986d048f7fd3b9eeefefca12038f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:f8:ef:89:64:06:db:3a:09:83:89:76:f3:
99:39:3b:61:27:59:30:e7:ea:af:0a:11:95:45:6d:
18:37:0a:8b:72:5f:d5:5d:b2:18:8f:fc:2f:b4:77:
85:02:43:ca:c1:75:34:0b:5e:86:0c:83:f8:a5:a1:
7e:ba:40:fd:b6:9c:ad:04:f2:06:10:c0:0c:29:56:
23:b5:9e:fc:08:48:69:bb:bf:60:5b:87:48:e9:7a:
25:15:85:d1:2a:29:ae:93:8d:49:57:f0:a1:1c:c8:
8d:1c:9c:b5:b6:cd:47:3a:47:89:5f:f7:0a:ae:08:
c5:dd:c4:fe:d6:2a:2d:93:3e:13:aa:fd:e6:16:59:
97:6e:71:c7:4d:5f:5e:c7:11:ea:c5:53:a4:29:20:
e7:3d:bb:1a:ee:2d:b2:5e:5b:f4:a6:2b:23:37:7b:
3a:55:3d:af:a6:5c:46:45:3f:1b:42:50:a7:16:68:
f6:e4:c2:c8:a9:9b:1f:1f:e9:7e:e3:af:4b:2a:b5:
d7:c6:54:0c:dc:b0:cb:ee:73:67:93:01:24:ab:06:
48:d5:9d:89:4b:4b:87:a2:b1:b3:23:88:ec:1c:1c:
ce:12:42:7b:d3:71:f3:41:3b:fa:ab:b4:71:b9:fd:
27:db:da:84:84:da:10:31:29:b8:d7:cd:80:43:dd:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:9F:0D:FE:1B:98:6D:04:8F:7F:D3:B9:EE:EF:EF:CA:12:03:8F
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/CZCfDf4bmG0Ej3_Tue7v78oSA48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:500::/40
Signature Algorithm: sha256WithRSAEncryption
09:69:52:dd:96:8e:ee:8d:31:1c:6d:f2:d0:b9:3f:c6:62:b2:
88:23:50:35:d0:cd:19:05:7b:31:f9:85:87:5f:3b:32:43:0a:
f1:3d:e7:5e:c8:d2:bf:68:b9:3d:55:23:0a:0f:e1:11:10:31:
e7:1c:de:a7:54:e4:6d:47:3f:e9:e4:06:19:84:dd:60:f1:85:
67:01:e5:0a:b8:bf:25:63:fb:87:eb:14:3b:6e:25:00:bd:9a:
5c:65:85:f0:62:11:9c:15:bd:83:ee:f1:79:73:bd:a0:51:ba:
8d:44:83:62:92:c6:aa:db:3f:eb:fc:49:c4:e9:e8:71:5d:a1:
01:34:e1:39:f3:bf:08:b8:58:d2:8b:01:63:46:93:4a:c9:fb:
06:62:c1:b3:2e:01:43:a2:46:cd:4c:30:59:e3:f4:66:7a:68:
b4:53:be:93:ed:d6:91:a1:8d:b0:9f:9a:2b:d0:16:a5:8f:ce:
f4:a6:7b:49:e5:f2:73:be:77:ae:b1:47:66:58:54:df:8d:7d:
80:02:d0:15:55:86:ab:07:53:69:56:96:dd:cb:b4:a8:90:f3:
51:c8:1a:a0:fe:57:e2:bc:7b:20:9b:cf:14:c6:e9:01:04:e3:
8a:78:f7:3e:6a:06:4f:8b:bf:51:eb:12:c1:5b:3c:83:9e:cf:
11:bc:19:e0
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ64N5hreyXaYZNrP9SZs8HJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYwNjExMTk0NTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTkwOWYwZGZlMWI5ODZkMDQ4ZjdmZDNiOWVlZWZlZmNhMTIwMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2/474lkBts6CYOJdvOZOTthJ1kw
5+qvChGVRW0YNwqLcl/VXbIYj/wvtHeFAkPKwXU0C16GDIP4paF+ukD9tpytBPIG
EMAMKVYjtZ78CEhpu79gW4dI6XolFYXRKimuk41JV/ChHMiNHJy1ts1HOkeJX/cK
rgjF3cT+1iotkz4Tqv3mFlmXbnHHTV9exxHqxVOkKSDnPbsa7i2yXlv0pisjN3s6
VT2vplxGRT8bQlCnFmj25MLIqZsfH+l+469LKrXXxlQM3LDL7nNnkwEkqwZI1Z2J
S0uHorGzI4jsHBzOEkJ703HzQTv6q7Rxuf0n29qEhNoQMSm4182AQ91S/wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFAmQnw3+G5htBI9/07nu7+/KEgOPMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvQ1pDZkRmNGJtRzBFajNfVHVlN3Y3OG9TQTQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhD6gQUw
DQYJKoZIhvcNAQELBQADggEBAAlpUt2Wju6NMRxt8tC5P8ZisogjUDXQzRkFezH5
hYdfOzJDCvE9517I0r9ouT1VIwoP4REQMecc3qdU5G1HP+nkBhmE3WDxhWcB5Qq4
vyVj+4frFDtuJQC9mlxlhfBiEZwVvYPu8XlzvaBRuo1Eg2KSxqrbP+v8ScTp6HFd
oQE04Tnzvwi4WNKLAWNGk0rJ+wZiwbMuAUOiRs1MMFnj9GZ6aLRTvpPt1pGhjbCf
mivQFqWPzvSme0nl8nO+d66xR2ZYVN+NfYAC0BVVhqsHU2lWlt3LtKiQ81HIGqD+
V+K8eyCbzxTG6QEE44p49z5qBk+Lv1HrEsFbPIOezxG8GeA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:10 2026 by rpki-client