Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/t0VGqbuUzEfEnavGf-mc2fzYBho.roa
File: t0VGqbuUzEfEnavGf-mc2fzYBho.roa (raw, json)
Hash identifier: 2bqluJNp+v34RuJzWMwdsBeRxAQwd+14+Zipz5uV+Kk=
Subject key identifier: B7:45:46:A9:BB:94:CC:47:C4:9D:AB:C6:7F:E9:9C:D9:FC:D8:06:1A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FA79B37AA6E4D2404E4C6C139AE4EDA0E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/t0VGqbuUzEfEnavGf-mc2fzYBho.roa
Signing time: Tue 28 Jul 2026 07:23:15 +0000
ROA not before: Tue 28 Jul 2026 07:23:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19148
IP address blocks: 2a11:2340::/29 maxlen: 29
2a11:3940::/29 maxlen: 29
2a11:50c0::/29 maxlen: 29
2a11:7540::/29 maxlen: 29
2a11:9440::/29 maxlen: 29
2a11:a440::/29 maxlen: 29
2a11:c140::/29 maxlen: 29
2a11:dc40::/29 maxlen: 29
2a12:6400::/29 maxlen: 29
2a12:b600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:9b:37:aa:6e:4d:24:04:e4:c6:c1:39:ae:4e:da:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 28 07:23:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b74546a9bb94cc47c49dabc67fe99cd9fcd8061a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:5c:9e:06:57:2d:b8:d8:4b:d9:15:5a:51:
09:b0:4c:91:4b:b3:81:4f:63:80:d0:d3:b8:12:f9:
cb:de:db:ea:eb:cf:85:fb:48:0a:48:ae:42:b5:43:
f3:10:16:5c:99:0a:6d:1d:d6:12:61:32:fb:15:2d:
fb:5c:ca:73:63:7c:4f:7b:a7:9f:ec:55:6f:c3:dd:
6c:b5:6c:c7:ae:8e:6b:84:81:87:00:5e:00:46:fa:
e0:a6:c2:38:5b:dc:3b:51:87:50:81:cb:7d:ef:24:
c5:bf:3a:bd:7d:0b:7c:df:d4:d7:d3:58:a1:91:3a:
76:cd:82:15:8f:bc:86:e1:d2:7a:69:91:f7:da:69:
c7:6b:69:07:f6:9f:8f:ed:62:82:5e:00:b6:e0:02:
e7:79:9c:5b:d9:e6:3f:2b:a9:81:7b:bf:bc:ec:88:
19:4b:02:20:6e:4b:8e:c8:68:b1:fb:c4:bf:03:44:
fe:0f:78:e3:f4:a5:ff:8b:1c:1d:fc:0f:18:c7:92:
ba:4f:c2:fe:af:82:d7:0e:bf:27:69:e5:23:c6:b3:
47:cb:ac:c6:9f:93:41:9a:e3:e3:cb:c6:58:f8:ed:
6e:a4:94:65:a9:9e:96:e9:c3:3c:4d:88:fd:c8:7e:
35:b4:7f:63:3e:ec:76:cb:da:6a:45:5d:6f:b3:18:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:45:46:A9:BB:94:CC:47:C4:9D:AB:C6:7F:E9:9C:D9:FC:D8:06:1A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/t0VGqbuUzEfEnavGf-mc2fzYBho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2340::/29
2a11:3940::/29
2a11:50c0::/29
2a11:7540::/29
2a11:9440::/29
2a11:a440::/29
2a11:c140::/29
2a11:dc40::/29
2a12:6400::/29
2a12:b600::/29
Signature Algorithm: sha256WithRSAEncryption
4b:e5:6e:e7:c1:84:59:50:63:71:eb:3c:ab:8b:92:5e:36:03:
3f:c0:7f:33:a4:fb:93:8c:6c:37:da:2e:9c:b5:c1:48:c0:70:
0c:ab:43:e4:5c:3b:d4:17:2f:6e:36:c0:16:87:c4:4c:77:23:
17:a7:fe:be:b5:b8:b6:c7:95:02:21:02:89:a6:9c:10:97:35:
33:55:21:29:46:97:c5:14:6e:99:47:df:5c:fc:1f:dd:1d:b3:
fd:29:fb:52:37:4f:59:0f:44:3d:c8:5b:b4:20:53:8a:c0:7b:
d8:d7:39:50:a7:09:0b:10:0b:8d:49:31:f1:98:ab:22:8b:38:
bd:b8:34:11:af:48:17:c0:4d:9e:f0:27:d4:b1:a5:8c:eb:80:
e6:30:3a:9e:f1:d0:7a:5b:90:61:8b:1f:96:01:a0:09:0f:f2:
ab:60:26:7b:14:b4:fa:35:8b:0b:2f:4d:dd:5e:96:a8:76:d4:
75:68:cb:3a:53:11:c1:49:78:2f:b3:e8:3d:26:89:a5:69:9e:
c5:54:15:c8:f9:12:9e:49:c2:df:36:0b:33:1e:a3:de:ad:5e:
1f:19:15:aa:54:4f:48:4b:e4:b3:6a:f7:85:35:69:2c:fb:e7:
35:4f:f3:53:1e:67:3b:02:b8:87:be:95:63:af:cf:7a:01:b7:
99:9f:bb:b1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZ+nmzeqbk0kBOTGwTmuTtoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYwNzI4MDcyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzQ1NDZhOWJiOTRjYzQ3YzQ5ZGFiYzY3ZmU5OWNkOWZjZDgwNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/FcngZXLbjYS9kVWlEJsEyRS7OB
T2OA0NO4EvnL3tvq68+F+0gKSK5CtUPzEBZcmQptHdYSYTL7FS37XMpzY3xPe6ef
7FVvw91stWzHro5rhIGHAF4ARvrgpsI4W9w7UYdQgct97yTFvzq9fQt839TX01ih
kTp2zYIVj7yG4dJ6aZH32mnHa2kH9p+P7WKCXgC24ALneZxb2eY/K6mBe7+87IgZ
SwIgbkuOyGix+8S/A0T+D3jj9KX/ixwd/A8Yx5K6T8L+r4LXDr8naeUjxrNHy6zG
n5NBmuPjy8ZY+O1upJRlqZ6W6cM8TYj9yH41tH9jPux2y9pqRV1vsxgL8wIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFLdFRqm7lMxHxJ2rxn/pnNn82AYaMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvdDBWR3FidVV6RWZFbmF2R2YtbWMyZnpZQmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDKhEjQAMF
AyoROUADBQMqEVDAAwUDKhF1QAMFAyoRlEADBQMqEaRAAwUDKhHBQAMFAyoR3EAD
BQMqEmQAAwUDKhK2ADANBgkqhkiG9w0BAQsFAAOCAQEAS+Vu58GEWVBjces8q4uS
XjYDP8B/M6T7k4xsN9ounLXBSMBwDKtD5Fw71BcvbjbAFofETHcjF6f+vrW4tseV
AiECiaacEJc1M1UhKUaXxRRumUffXPwf3R2z/Sn7UjdPWQ9EPchbtCBTisB72Nc5
UKcJCxALjUkx8ZirIos4vbg0Ea9IF8BNnvAn1LGljOuA5jA6nvHQeluQYYsflgGg
CQ/yq2AmexS0+jWLCy9N3V6WqHbUdWjLOlMRwUl4L7PoPSaJpWmexVQVyPkSnknC
3zYLMx6j3q1eHxkVqlRPSEvks2r3hTVpLPvnNU/zUx5nOwK4h76VY6/PegG3mZ+7
sQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:17 2026 by rpki-client