Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/RTOXX5ZwDhxuOuF0QnPVEy5mY-E.roa
File: RTOXX5ZwDhxuOuF0QnPVEy5mY-E.roa (raw, json)
Hash identifier: jrK0N7c1cbcDYn7LYluZvhpwTISFdtPphVGCy6lVvQQ=
Subject key identifier: 45:33:97:5F:96:70:0E:1C:6E:3A:E1:74:42:73:D5:13:2E:66:63:E1
Certificate issuer: /CN=091ff5ed83a983f88d59f0c3e648dae0bb52789c
Certificate serial: 019E97E8B192658A27F621334C0F836D9205
Authority key identifier: 09:1F:F5:ED:83:A9:83:F8:8D:59:F0:C3:E6:48:DA:E0:BB:52:78:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/RTOXX5ZwDhxuOuF0QnPVEy5mY-E.roa
Signing time: Fri 05 Jun 2026 13:11:09 +0000
ROA not before: Fri 05 Jun 2026 13:11:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a05:c680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:e8:b1:92:65:8a:27:f6:21:33:4c:0f:83:6d:92:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ff5ed83a983f88d59f0c3e648dae0bb52789c
Validity
Not Before: Jun 5 13:11:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4533975f96700e1c6e3ae1744273d5132e6663e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:6f:f3:0c:b7:f3:bc:16:bd:d4:dc:f1:22:
68:14:94:21:60:4c:4f:40:8b:94:61:0a:85:9b:bb:
43:e8:33:18:3c:37:f4:8f:8e:e8:fb:da:34:df:9d:
93:3c:70:e4:e5:af:ff:a0:ce:71:2d:c9:05:b5:f9:
28:d6:83:22:17:54:ad:f7:52:d7:b4:3b:6b:62:3b:
bf:93:8e:d4:f7:5a:4d:de:03:83:75:3c:39:16:50:
50:12:91:ec:70:f6:f4:89:a0:f2:03:95:78:01:d5:
9e:5b:b6:80:80:fb:c3:ea:3d:8f:14:76:aa:42:5c:
fb:9d:1b:05:b0:a3:6d:9b:47:33:c2:7f:c9:21:d7:
fb:d6:a0:03:44:ee:d1:cd:c3:d6:24:e9:82:50:34:
dc:5e:57:5e:e7:81:3a:b6:1b:eb:0d:af:d8:e5:0e:
e1:7c:23:62:59:1f:19:4d:3f:25:33:7c:d0:58:30:
5a:c7:fe:84:25:ee:c9:a2:2b:ec:7f:2c:0b:cb:57:
0b:d6:6e:97:8a:d3:d7:02:01:d0:5d:4c:d6:a3:90:
72:a6:8a:78:ef:19:48:cf:97:b0:af:eb:3a:87:67:
8a:0e:3e:e9:22:e8:b3:5f:a2:1d:2f:b7:4c:0a:7a:
34:8b:d3:5b:a4:d7:5d:47:18:44:81:02:d1:00:73:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:97:5F:96:70:0E:1C:6E:3A:E1:74:42:73:D5:13:2E:66:63:E1
X509v3 Authority Key Identifier:
keyid:09:1F:F5:ED:83:A9:83:F8:8D:59:F0:C3:E6:48:DA:E0:BB:52:78:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR_17YOpg_iNWfDD5kja4LtSeJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/RTOXX5ZwDhxuOuF0QnPVEy5mY-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c01148-0a92-468e-93f3-ada1b5db0df5/1/CR_17YOpg_iNWfDD5kja4LtSeJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:c680::/29
Signature Algorithm: sha256WithRSAEncryption
8d:96:1d:88:58:06:cc:20:ce:a9:2e:11:39:3c:2c:60:37:df:
a6:d6:80:23:f9:5d:1d:c7:8a:b5:45:4c:6f:27:ae:ae:55:5a:
0c:27:5d:24:25:f6:41:d5:cd:0b:d9:28:37:ab:a6:8f:b7:67:
05:6f:c5:29:a7:54:d5:59:77:1e:b6:a1:e8:1d:6d:80:45:d8:
b0:04:8f:5f:5f:54:0c:bb:62:59:c0:3f:99:65:04:b8:b9:00:
3a:85:69:d3:4b:3a:a4:1e:8b:c6:74:6f:00:47:74:09:53:dd:
91:70:22:c8:02:70:6d:ed:73:fa:b4:fb:86:a2:8d:9d:81:6b:
32:8d:38:69:ea:bf:dc:4d:ac:e6:dc:d9:4a:1f:0d:da:53:3c:
7e:69:2a:3a:37:1b:96:99:ec:50:34:9e:29:89:e2:b1:9a:40:
18:f5:0c:a9:5e:25:12:b8:69:48:9a:b8:e4:ea:f3:99:87:72:
2a:f3:5b:2c:3f:79:ea:64:88:70:43:00:d6:7f:1e:23:67:fd:
25:23:2a:4b:75:23:aa:86:23:ef:16:c9:2f:4b:5e:54:6b:fc:
34:bb:f8:fc:c1:01:7f:48:c0:af:89:bb:0b:27:da:af:bb:97:
74:e4:25:39:08:a4:52:a2:e5:9a:a0:89:d5:4a:59:9a:25:22:
e9:02:03:fe
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ6X6LGSZYon9iEzTA+DbZIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWZmNWVkODNhOTgzZjg4ZDU5ZjBjM2U2NDhkYWUwYmI1
Mjc4OWMwHhcNMjYwNjA1MTMxMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTMzOTc1Zjk2NzAwZTFjNmUzYWUxNzQ0MjczZDUxMzJlNjY2M2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtpv8wy387wWvdTc8SJoFJQhYExP
QIuUYQqFm7tD6DMYPDf0j47o+9o0352TPHDk5a//oM5xLckFtfko1oMiF1St91LX
tDtrYju/k47U91pN3gODdTw5FlBQEpHscPb0iaDyA5V4AdWeW7aAgPvD6j2PFHaq
Qlz7nRsFsKNtm0czwn/JIdf71qADRO7RzcPWJOmCUDTcXlde54E6thvrDa/Y5Q7h
fCNiWR8ZTT8lM3zQWDBax/6EJe7JoivsfywLy1cL1m6XitPXAgHQXUzWo5Bypop4
7xlIz5ewr+s6h2eKDj7pIuizX6IdL7dMCno0i9NbpNddRxhEgQLRAHNEZQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEUzl1+WcA4cbjrhdEJz1RMuZmPhMB8GA1UdIwQY
MBaAFAkf9e2DqYP4jVnww+ZI2uC7UnicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JfMTdZT3BnX2lOV2ZERDVramE0THRTZUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMDExNDgtMGE5Mi00NjhlLTkzZjMt
YWRhMWI1ZGIwZGY1LzEvUlRPWFg1WndEaHh1T3VGMFFuUFZFeTVtWS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jMDExNDgtMGE5Mi00NjhlLTkzZjMtYWRhMWI1ZGIwZGY1
LzEvQ1JfMTdZT3BnX2lOV2ZERDVramE0THRTZUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgXGgDAN
BgkqhkiG9w0BAQsFAAOCAQEAjZYdiFgGzCDOqS4ROTwsYDffptaAI/ldHceKtUVM
byeurlVaDCddJCX2QdXNC9koN6umj7dnBW/FKadU1Vl3Hrah6B1tgEXYsASPX19U
DLtiWcA/mWUEuLkAOoVp00s6pB6LxnRvAEd0CVPdkXAiyAJwbe1z+rT7hqKNnYFr
Mo04aeq/3E2s5tzZSh8N2lM8fmkqOjcblpnsUDSeKYnisZpAGPUMqV4lErhpSJq4
5OrzmYdyKvNbLD956mSIcEMA1n8eI2f9JSMqS3UjqoYj7xbJL0teVGv8NLv4/MEB
f0jAr4m7Cyfar7uXdOQlOQikUqLlmqCJ1UpZmiUi6QID/g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:45:24 2026 by rpki-client