Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/aBl3-0AcK6bmhuQTyZ-3MgOZD0c.roa
File: aBl3-0AcK6bmhuQTyZ-3MgOZD0c.roa (raw, json)
Hash identifier: nalwbz5d9t6qM/4VzXCmDeulbj2o3iXz5ssXZiGjYK0=
Subject key identifier: 68:19:77:FB:40:1C:2B:A6:E6:86:E4:13:C9:9F:B7:32:03:99:0F:47
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 01A0EDA04785C1F45C076E4E8ED14DD7C05E
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/aBl3-0AcK6bmhuQTyZ-3MgOZD0c.roa
Signing time: Tue 29 Sep 2026 14:44:59 +0000
ROA not before: Tue 29 Sep 2026 14:44:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29028
IP address blocks: 141.105.120.0/21 maxlen: 24
141.105.120.0/22 maxlen: 24
141.105.124.0/24 maxlen: 24
141.105.126.0/23 maxlen: 24
178.21.112.0/21 maxlen: 24
185.2.44.0/22 maxlen: 24
185.2.45.0/24 maxlen: 24
185.2.46.0/24 maxlen: 24
193.200.132.0/24 maxlen: 24
194.145.200.0/23 maxlen: 24
195.22.122.0/24 maxlen: 24
2a02:2308::/32 maxlen: 32
2a02:2308:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:a0:47:85:c1:f4:5c:07:6e:4e:8e:d1:4d:d7:c0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Sep 29 14:44:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=681977fb401c2ba6e686e413c99fb73203990f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:d5:ee:fc:a8:ed:8f:54:cd:c4:da:67:e0:
21:6c:d1:46:34:1b:17:6a:6c:12:cc:cb:e8:98:d8:
f1:4e:a8:69:e9:65:0b:61:60:e7:03:d2:44:e8:16:
9b:9b:49:cf:b2:cc:23:0c:5b:6f:d8:2f:e0:a2:19:
0f:80:fb:4a:d0:64:a6:46:6a:44:2e:86:53:9c:f7:
ab:f5:2f:80:a1:3f:2f:e2:10:ec:c1:1c:3d:11:c8:
e1:60:36:5c:8b:a0:18:65:6b:e8:6d:78:62:67:1c:
cd:cd:62:a0:26:07:8f:7d:5a:ac:c2:60:27:02:96:
59:96:04:eb:b4:ec:24:50:4a:70:d9:44:91:d3:0d:
49:ee:87:c0:08:5e:9f:51:0e:49:57:cc:6a:b4:35:
2f:23:53:ea:17:1e:0f:b2:70:f2:2f:98:79:2a:75:
63:ce:b7:93:5d:ab:63:05:0b:19:a4:89:ef:77:78:
57:ec:51:be:39:7a:8f:fb:e9:b6:25:1a:8e:99:11:
a7:d3:3c:eb:12:79:96:78:fb:6b:1c:d5:f6:cf:c8:
ca:18:3f:d8:ca:e8:3f:d8:51:d5:8e:4b:4f:64:b6:
8d:15:a8:2f:e0:4e:16:3a:ad:6b:97:63:90:1b:58:
3d:1e:d0:91:9c:bf:3a:7d:de:f8:c0:d4:e1:e0:26:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:77:FB:40:1C:2B:A6:E6:86:E4:13:C9:9F:B7:32:03:99:0F:47
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/aBl3-0AcK6bmhuQTyZ-3MgOZD0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.120.0/21
178.21.112.0/21
185.2.44.0/22
193.200.132.0/24
194.145.200.0/23
195.22.122.0/24
IPv6:
2a02:2308::/32
Signature Algorithm: sha256WithRSAEncryption
6b:a7:ab:59:c5:21:b5:ea:1c:c1:d9:5b:c1:83:5a:fb:f3:76:
4e:d2:b9:ea:0b:b9:9e:eb:de:b7:f1:d9:9a:df:9f:a7:d9:3b:
46:c8:42:f6:6d:bd:9d:39:fa:70:fb:3c:5a:60:6d:cb:96:cb:
20:e6:10:c7:10:0e:fd:bc:54:5f:d7:da:7e:5c:8b:a6:a4:79:
57:9c:77:6f:ff:25:a4:6c:7d:1a:ba:d4:05:c0:49:9a:91:c9:
bd:0f:4c:3a:e5:f8:6a:c2:b0:20:67:9e:82:c8:62:b9:10:b0:
0e:57:9d:4a:bb:7d:f6:36:d6:4a:9f:63:64:f8:2c:7d:72:d7:
9a:df:56:e2:9b:be:2c:4d:df:ba:b1:d0:8b:94:ce:d9:3e:f6:
29:6e:e0:fa:24:17:a7:92:ff:1d:11:42:8a:0a:e1:5e:40:7d:
89:c8:b8:4d:df:5b:78:34:da:1d:ef:3b:35:c6:33:99:d4:fb:
7f:56:19:a5:b0:0c:e7:b0:eb:0f:62:1a:65:72:b0:a3:d3:23:
ce:1e:11:8e:6d:4e:ab:94:8e:09:16:a3:02:cf:eb:78:66:41:
c5:7f:ba:4c:8f:fc:af:ad:09:e2:f0:f7:7e:b5:76:c6:00:43:
f3:99:a2:b4:a1:d6:bd:21:09:2d:f2:25:eb:95:ec:81:ca:41:
b6:9c:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:20:06 2026 by rpki-client