Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/HiS0kZkH7nLEUXjDWu9S5wYFAWo.roa
File: HiS0kZkH7nLEUXjDWu9S5wYFAWo.roa (raw, json)
Hash identifier: dQ7ZhvwA3P8FoUNbgD8WD+l4uyObPXiywcp7g1zCAOA=
Subject key identifier: 1E:24:B4:91:99:07:EE:72:C4:51:78:C3:5A:EF:52:E7:06:05:01:6A
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A08134DD8A29E23FE7225962FEB496445C
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/HiS0kZkH7nLEUXjDWu9S5wYFAWo.roa
Signing time: Tue 08 Sep 2026 13:28:40 +0000
ROA not before: Tue 08 Sep 2026 13:28:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30893
IP address blocks: 150.40.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:34:dd:8a:29:e2:3f:e7:22:59:62:fe:b4:96:44:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Sep 8 13:28:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e24b4919907ee72c45178c35aef52e70605016a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:e7:4e:b6:2c:b8:85:8d:ab:a0:d3:12:b6:
82:97:c0:b6:e4:ba:68:08:73:fa:86:15:ce:88:f0:
6c:45:69:11:78:5f:c3:d5:23:75:8c:86:8c:23:88:
ff:10:ec:b6:41:89:62:af:5c:8f:8d:fd:c6:26:7f:
df:8c:81:fb:7a:1f:d9:80:32:a6:82:2c:80:31:07:
8f:aa:9f:3f:72:77:ff:81:a4:ca:b1:12:7d:f8:16:
3c:8e:58:5e:27:3f:ef:cf:5f:34:4e:89:b4:d0:9a:
46:b9:f9:c1:b4:1a:ac:82:60:d2:3d:f2:e5:d4:e5:
1a:35:e4:48:8f:c7:49:96:01:cf:65:73:be:6e:dc:
bb:fa:1d:6b:3c:01:16:2d:1d:3e:77:fd:6a:0e:0e:
ea:65:18:d8:75:2e:6c:31:17:92:70:5b:02:a7:bd:
f0:c2:a1:d6:7b:a8:25:89:06:95:30:d0:dc:1b:28:
11:8b:2b:3b:16:36:4c:03:00:1b:c1:22:08:70:f3:
eb:aa:ac:b2:9b:08:7f:88:a8:b7:a0:dc:77:de:30:
49:c1:b4:69:e0:a4:72:9c:82:ce:81:f8:26:68:36:
eb:74:bb:de:fa:d2:09:b5:53:9f:d8:73:d4:2a:05:
24:42:45:7a:13:7b:45:4b:69:4a:e5:0b:9d:b7:21:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:24:B4:91:99:07:EE:72:C4:51:78:C3:5A:EF:52:E7:06:05:01:6A
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/HiS0kZkH7nLEUXjDWu9S5wYFAWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.98.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9d:a1:6c:99:30:c3:7c:50:f7:5a:e2:0b:94:61:0c:42:a8:
6d:25:35:0f:13:6f:8f:45:f3:71:ee:58:65:8a:1a:ad:bd:19:
ca:a1:e7:55:42:a0:94:ca:33:a3:77:e8:fe:82:a1:8a:e0:2a:
16:8c:0a:d7:a2:66:d5:89:88:4b:50:57:2d:ae:f3:21:fd:68:
30:5a:d5:4d:46:20:05:ee:1d:e5:c3:d2:73:cc:ab:dd:d5:7d:
a6:65:87:a6:b2:39:fe:93:88:71:6e:03:32:69:8f:73:64:4a:
ad:8e:c4:6a:ce:a9:4f:95:24:10:1d:3b:02:1e:ec:a5:11:b5:
8b:36:a6:73:a4:f3:63:5e:52:45:b7:bd:09:ec:61:2e:ed:4f:
e2:fa:19:60:c7:a6:11:68:15:f2:52:d7:ed:cb:30:0d:fb:60:
7b:79:15:ae:47:83:1c:27:7d:19:49:1a:fa:df:4a:e5:e2:c0:
7f:83:51:cd:ad:8e:39:ca:e3:22:ea:c8:e5:4c:2a:79:58:0e:
d0:f1:9d:ef:95:f3:55:d1:e4:dd:55:52:30:03:07:02:8b:b1:
e1:8e:1f:97:a4:99:d0:59:c8:90:2b:1c:9e:8b:b7:aa:65:94:
f9:33:a6:18:f5:0c:c1:d1:cb:ad:d6:f1:75:e3:7a:37:5f:de:
80:4a:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:05:52 2026 by rpki-client