Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/ClYH5zdUq2avTHJ8ifv2RHlVvmQ.roa
File: ClYH5zdUq2avTHJ8ifv2RHlVvmQ.roa (raw, json)
Hash identifier: LMju03bIoiZeMfDoSkXpr6oRp36HwgwDO6weFxJjdDQ=
Subject key identifier: 0A:56:07:E7:37:54:AB:66:AF:4C:72:7C:89:FB:F6:44:79:55:BE:64
Certificate issuer: /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial: 019B7A59AD12F782FF59D4C9C25F2B191FF5
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/ClYH5zdUq2avTHJ8ifv2RHlVvmQ.roa
Signing time: Thu 01 Jan 2026 16:17:35 +0000
ROA not before: Thu 01 Jan 2026 16:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47575
IP address blocks: 109.205.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:59:ad:12:f7:82:ff:59:d4:c9:c2:5f:2b:19:1f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Validity
Not Before: Jan 1 16:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a5607e73754ab66af4c727c89fbf6447955be64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:e8:1a:e2:b3:2b:e8:da:41:14:e5:8a:aa:
09:32:7e:c4:e1:00:3e:12:ba:44:29:cb:4c:6c:9e:
21:e9:67:36:6a:78:13:3d:c3:1f:a3:54:80:ca:b5:
ce:79:08:de:e3:18:b6:ce:97:d5:24:a5:3e:57:2b:
7f:a2:01:1b:aa:b7:52:8d:28:7d:b3:69:fa:6b:d5:
1b:5b:57:22:97:35:f4:aa:1b:79:07:d6:1c:51:52:
9a:29:0e:b6:97:38:8e:47:cb:57:3c:37:20:ad:a7:
ea:68:d5:82:ca:e8:f5:a3:9f:77:45:a6:76:63:b3:
83:f2:9c:b3:c4:6a:e6:2b:70:1e:fc:65:6c:fe:a1:
14:7e:e2:4f:0d:f0:9e:b8:f0:98:ef:d8:31:bf:56:
79:5c:5b:58:2d:a0:6d:fd:ac:f4:1f:00:ce:d8:de:
93:59:24:83:d1:9a:27:95:37:3e:f5:8e:e4:b2:99:
eb:6e:c6:2b:af:56:e4:08:49:82:16:26:ab:62:d8:
bd:1f:34:6c:69:44:e7:86:58:d3:96:02:78:70:8c:
bf:9b:2b:bc:5b:4d:64:bf:8b:e8:97:3d:05:08:52:
39:6e:6c:bc:dc:61:2e:76:41:89:b2:b1:b8:3d:3f:
17:92:e6:eb:05:9d:3c:23:6f:b0:21:34:56:a3:91:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:07:E7:37:54:AB:66:AF:4C:72:7C:89:FB:F6:44:79:55:BE:64
X509v3 Authority Key Identifier:
keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/ClYH5zdUq2avTHJ8ifv2RHlVvmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.44.0/23
Signature Algorithm: sha256WithRSAEncryption
57:b0:c7:58:08:6f:e6:7f:30:49:6b:2c:e5:31:51:4b:b3:53:
e9:22:b7:e6:1a:ca:51:91:86:5e:61:b3:74:c4:50:0c:86:c7:
b7:f2:58:65:ef:e5:a1:8f:4b:80:60:1e:8f:1f:e9:6e:dd:5c:
75:ff:57:cc:f8:3a:21:e7:98:f5:03:60:b5:52:d6:2a:96:8d:
9f:30:43:ba:5f:70:fb:a8:01:63:54:dd:ac:e4:22:c1:d6:37:
0f:1c:bc:db:58:b7:14:6a:fb:38:30:5e:df:62:ae:56:92:1e:
c4:e7:e1:ee:12:35:de:2b:8e:53:0a:61:e7:f7:34:5d:dc:a6:
12:82:e5:56:f7:8a:49:17:99:ea:8b:cc:cc:59:bd:b9:c2:75:
8d:09:e6:d1:4c:ce:e6:4a:50:18:18:ab:5b:41:59:5c:f7:67:
4b:c3:8e:ad:c8:ae:f3:99:e0:de:42:33:5d:4c:77:b0:16:33:
f5:92:1e:ab:9e:fe:3d:6b:ba:4d:f0:10:23:70:f0:da:1b:c0:
c2:50:61:98:97:c0:2b:d8:2c:5f:35:50:1e:b5:c3:23:b5:43:
8b:a6:7f:86:bd:ee:1b:75:17:fc:77:4c:5b:2e:f2:7d:77:ac:
35:9a:b6:fa:89:e1:df:7a:c6:0a:c0:d7:26:09:70:c0:bc:40:
2d:5d:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:36:59 2026 by rpki-client