Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FsSQxuerjJkVh3spcW4NsA6Hkxo.roa
File: FsSQxuerjJkVh3spcW4NsA6Hkxo.roa (raw, json)
Hash identifier: WFvw6SEMsTRi1BrkNu49FMhZHtY9VTTWIa0ydesmwcc=
Subject key identifier: 16:C4:90:C6:E7:AB:8C:99:15:87:7B:29:71:6E:0D:B0:0E:87:93:1A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FA79B3A9F1FBDD2BDC7DC677295E2BD86
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FsSQxuerjJkVh3spcW4NsA6Hkxo.roa
Signing time: Tue 28 Jul 2026 07:23:15 +0000
ROA not before: Tue 28 Jul 2026 07:23:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393886
IP address blocks: 2a09:43c0::/29 maxlen: 29
2a11:2ec0::/29 maxlen: 29
2a11:49c0::/29 maxlen: 29
2a11:6cc0::/29 maxlen: 29
2a11:9a40::/29 maxlen: 29
2a11:b840::/29 maxlen: 29
2a12:5e80::/29 maxlen: 29
2a12:6000::/29 maxlen: 29
2a12:7600::/29 maxlen: 29
2a12:ad00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:9b:3a:9f:1f:bd:d2:bd:c7:dc:67:72:95:e2:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 28 07:23:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16c490c6e7ab8c9915877b29716e0db00e87931a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:80:37:8e:40:74:9b:4f:9b:2b:69:2f:78:
8b:d9:2f:c6:e9:47:af:44:3e:9f:8e:7e:82:6c:10:
fc:36:ef:41:b5:06:0f:89:bf:c0:8b:57:2e:f2:d4:
75:e6:9c:d4:f2:1f:30:fd:f2:33:dc:1b:df:06:93:
2a:f4:fa:0b:39:74:6e:a4:a3:fa:cb:35:a4:69:60:
3d:c3:9c:11:53:ee:1f:30:08:11:d1:b6:92:1d:14:
49:02:44:5f:21:db:42:e3:75:84:0b:a6:de:e2:71:
c0:54:e4:ab:cd:0b:aa:db:dd:c8:5b:9b:89:93:66:
d9:4f:86:1c:cc:f8:1f:95:e9:cd:fc:13:96:34:7b:
53:fb:ab:3a:76:69:4c:64:b0:b7:5f:6c:4a:4e:0f:
d4:bb:1f:ea:2c:5c:7a:8a:a9:d9:a0:72:a3:f1:b9:
1e:72:5b:05:c7:8b:0f:bd:d5:d7:13:e6:3a:23:88:
d9:58:46:b4:c9:a4:26:12:6b:46:7b:b7:36:86:19:
a5:cc:ec:af:fb:1c:ec:43:7c:0f:30:dd:4a:b7:1e:
ac:1f:f5:7f:34:13:bf:91:0c:93:0b:30:d8:1a:90:
f0:14:aa:0f:27:38:22:de:d8:c9:2e:91:86:c0:53:
13:d6:b7:66:69:71:d9:b3:0d:bc:71:b6:bb:de:4c:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:90:C6:E7:AB:8C:99:15:87:7B:29:71:6E:0D:B0:0E:87:93:1A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FsSQxuerjJkVh3spcW4NsA6Hkxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:43c0::/29
2a11:2ec0::/29
2a11:49c0::/29
2a11:6cc0::/29
2a11:9a40::/29
2a11:b840::/29
2a12:5e80::/29
2a12:6000::/29
2a12:7600::/29
2a12:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
3a:78:0e:c9:66:f3:c1:2e:4e:ac:7c:2c:6b:2d:bb:b9:47:fb:
62:26:4c:44:80:77:c6:c0:9a:33:dc:08:8b:36:bf:11:c7:67:
d3:89:af:de:79:19:7d:9d:30:e9:36:7a:00:18:7b:a4:a4:b1:
89:96:4b:dd:47:51:3c:fe:2a:59:6e:7d:f4:5a:62:e5:2f:a5:
04:e2:7b:8a:30:74:22:a5:7e:da:8c:a1:91:e7:a3:cb:5e:91:
1c:9c:b7:50:d0:ef:44:9d:d9:49:2a:41:fe:85:5d:b4:67:02:
b4:a5:12:e1:43:60:28:dc:84:65:85:dc:22:22:e9:86:96:48:
9a:2e:67:6a:c7:a4:53:e7:7e:d0:84:9f:41:05:42:13:8e:09:
a0:86:3e:73:e0:ba:78:81:9c:03:ad:b1:c3:d4:af:60:71:17:
5e:ba:d0:53:6c:ad:85:91:55:89:9e:9d:c9:11:bd:dc:9b:65:
56:c8:dd:0c:3c:4a:0a:0e:b9:b1:bc:7d:60:02:69:e0:06:57:
14:81:a5:93:62:09:2a:f9:c3:f8:58:f2:90:ea:73:2c:c1:4b:
47:ac:9e:6c:ea:7b:0c:69:66:f0:38:fb:64:af:8d:62:46:21:
4c:9f:0b:4c:54:04:1b:a6:bb:25:aa:53:4a:18:18:0b:65:81:
ae:b0:ad:4e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZ+nmzqfH73SvcfcZ3KV4r2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYwNzI4MDcyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmM0OTBjNmU3YWI4Yzk5MTU4NzdiMjk3MTZlMGRiMDBlODc5MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ciAN45AdJtPmytpL3iL2S/G6Uev
RD6fjn6CbBD8Nu9BtQYPib/Ai1cu8tR15pzU8h8w/fIz3BvfBpMq9PoLOXRupKP6
yzWkaWA9w5wRU+4fMAgR0baSHRRJAkRfIdtC43WEC6be4nHAVOSrzQuq293IW5uJ
k2bZT4YczPgflenN/BOWNHtT+6s6dmlMZLC3X2xKTg/Uux/qLFx6iqnZoHKj8bke
clsFx4sPvdXXE+Y6I4jZWEa0yaQmEmtGe7c2hhmlzOyv+xzsQ3wPMN1Ktx6sH/V/
NBO/kQyTCzDYGpDwFKoPJzgi3tjJLpGGwFMT1rdmaXHZsw28cba73kxvKQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFBbEkMbnq4yZFYd7KXFuDbAOh5MaMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvRnNTUXh1ZXJqSmtWaDNzcGNXNE5zQTZIa3hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDKglDwAMF
AyoRLsADBQMqEUnAAwUDKhFswAMFAyoRmkADBQMqEbhAAwUDKhJegAMFAyoSYAAD
BQMqEnYAAwUDKhKtADANBgkqhkiG9w0BAQsFAAOCAQEAOngOyWbzwS5OrHwsay27
uUf7YiZMRIB3xsCaM9wIiza/Ecdn04mv3nkZfZ0w6TZ6ABh7pKSxiZZL3UdRPP4q
WW599Fpi5S+lBOJ7ijB0IqV+2oyhkeejy16RHJy3UNDvRJ3ZSSpB/oVdtGcCtKUS
4UNgKNyEZYXcIiLphpZImi5nasekU+d+0ISfQQVCE44JoIY+c+C6eIGcA62xw9Sv
YHEXXrrQU2ythZFViZ6dyRG93JtlVsjdDDxKCg65sbx9YAJp4AZXFIGlk2IJKvnD
+FjykOpzLMFLR6yebOp7DGlm8Dj7ZK+NYkYhTJ8LTFQEG6a7JapTShgYC2WBrrCt
Tg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:34 2026 by rpki-client