Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mK-5wcGwPNZZ7dh-RjXfGE6h0Qw.roa
File: mK-5wcGwPNZZ7dh-RjXfGE6h0Qw.roa (raw, json)
Hash identifier: BLbXRw0zkpBQQ9TIqOz6CDcaByLpT8JtT2fyEM3x96Q=
Subject key identifier: 98:AF:B9:C1:C1:B0:3C:D6:59:ED:D8:7E:46:35:DF:18:4E:A1:D1:0C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A19B8BAAD4A517CC9B512BA5BCB2C46A40
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mK-5wcGwPNZZ7dh-RjXfGE6h0Qw.roa
Signing time: Mon 02 Nov 2026 09:16:24 +0000
ROA not before: Mon 02 Nov 2026 09:16:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 159.148.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:8b:aa:d4:a5:17:cc:9b:51:2b:a5:bc:b2:c4:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Nov 2 09:16:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98afb9c1c1b03cd659edd87e4635df184ea1d10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:a3:ab:26:5a:6d:9d:c1:1a:c1:d8:4d:55:
fd:2c:cb:91:3b:ee:cd:39:a3:6d:d3:96:78:2a:4f:
c5:93:74:57:f2:01:3f:fd:9f:94:c0:01:43:de:3d:
89:24:38:7d:71:06:d9:e2:4b:b8:42:df:69:3a:57:
e6:c5:26:4a:eb:8f:2d:59:9c:4b:53:cd:5b:a2:a1:
a9:4d:e1:8d:d5:ac:93:00:0d:64:52:fc:7c:1c:06:
21:ca:b9:7a:c3:ca:38:a2:d9:4e:bf:84:6e:00:bf:
05:7d:45:52:6a:71:99:48:be:68:26:33:d3:76:f6:
ab:2e:c7:3f:cf:99:95:0d:96:4e:2b:91:96:55:d4:
5e:e9:49:b3:0e:8e:05:92:e3:7f:ac:d8:3e:22:d8:
67:e3:8f:71:5b:59:8a:21:f4:0c:30:7b:f1:65:a1:
d4:ab:75:8e:6d:28:1b:2e:94:0a:75:02:1d:43:bd:
49:50:56:2d:6d:6f:58:ca:fe:d0:d3:ba:64:83:0b:
f3:f7:63:ea:16:41:52:3d:1d:1f:9d:2c:9d:d5:e4:
cd:df:a8:f8:6e:8b:02:6b:62:a4:09:d1:84:d0:6f:
8e:ef:cc:a4:15:01:2e:b0:f3:83:15:f5:c6:b0:91:
d0:e4:27:10:a2:9a:3a:bc:0b:57:ce:3d:45:ea:6c:
76:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:B9:C1:C1:B0:3C:D6:59:ED:D8:7E:46:35:DF:18:4E:A1:D1:0C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mK-5wcGwPNZZ7dh-RjXfGE6h0Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.131.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f4:f5:27:03:3a:7e:0e:fc:0d:58:0f:60:9c:21:85:1e:5a:
41:3f:58:bd:3c:cc:05:06:27:21:f8:5c:99:92:89:c1:44:26:
3d:3d:bc:cc:7e:41:5f:ac:8b:8e:7f:5a:7b:11:6a:2e:48:75:
af:0c:7d:04:1d:e7:1a:79:56:2f:98:d5:13:30:82:21:1d:24:
a0:3f:3a:84:ce:d8:06:80:d0:5e:6a:5f:38:d6:b6:26:f6:1c:
c0:1b:8e:f1:52:e0:41:c0:be:e5:33:e0:7b:17:98:06:ab:83:
87:d4:c2:46:bb:c4:e0:85:11:0e:80:16:cd:10:d7:ce:0c:d1:
13:aa:20:a3:58:66:81:2a:34:b5:24:17:23:f7:50:7c:e8:d1:
c0:9a:95:c7:32:21:0d:f6:4f:8b:7e:09:04:ba:0f:e7:d4:c0:
c3:a8:c0:ae:27:2b:e4:7c:0f:6e:36:d7:98:b7:2b:92:93:fc:
37:d3:bd:53:56:ea:f5:33:ec:e5:8c:ad:56:81:92:03:0d:77:
f0:6f:d9:07:f5:f9:de:19:9e:e3:dc:cc:1d:03:62:71:02:1d:
df:b2:b1:ae:37:71:52:22:b8:5f:74:59:ba:16:02:78:03:68:
b4:6d:f5:80:0f:40:ef:c0:34:4c:3d:7c:a0:1b:4b:e2:50:03:
02:50:30:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:36:27 2026 by rpki-client