Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/66spJgWO4r5iJulLefAkdYTwISc.roa
File: 66spJgWO4r5iJulLefAkdYTwISc.roa (raw, json)
Hash identifier: AyjLjLUdwhw2VQoEzrUJ+rotnQiPNzqjvEUgW3yJgvQ=
Subject key identifier: EB:AB:29:26:05:8E:E2:BE:62:26:E9:4B:79:F0:24:75:84:F0:21:27
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A07169E544D293B5575533EF3E507905D5
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/66spJgWO4r5iJulLefAkdYTwISc.roa
Signing time: Sat 05 Sep 2026 11:52:40 +0000
ROA not before: Sat 05 Sep 2026 11:52:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 153.56.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:69:e5:44:d2:93:b5:57:55:33:ef:3e:50:79:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Sep 5 11:52:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebab2926058ee2be6226e94b79f0247584f02127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:82:55:46:94:1e:3f:0c:57:12:e9:91:d6:07:
1a:e5:b1:9e:95:a0:f4:22:36:2a:90:f8:30:43:99:
5d:e7:94:23:b0:c3:20:5e:09:27:2d:55:03:50:4d:
ef:06:4e:df:06:16:97:d3:98:c1:8c:f7:8b:60:25:
53:9a:b3:94:c4:bd:dc:4c:a9:a2:11:11:fa:40:58:
bb:b7:31:88:70:9c:7a:19:61:7e:92:c1:b5:7e:97:
fa:92:51:8c:b0:47:3d:81:9d:29:b0:8c:be:92:4c:
87:88:14:ad:af:6b:4b:69:69:18:90:41:ba:15:83:
cd:27:fb:cd:5b:ab:a8:07:8d:76:28:79:0f:32:b4:
7e:4f:fb:7a:43:62:ef:3b:41:aa:20:d7:1e:82:81:
ea:56:8f:06:2e:5d:d5:08:74:3b:d0:ae:cc:89:ac:
17:bb:f7:f6:ae:21:54:38:b4:28:3b:5d:0a:75:ec:
78:cc:60:28:c1:d0:2e:93:00:85:de:9b:9a:c3:83:
2a:5c:ff:d6:38:50:a7:5e:cc:cb:b7:a8:67:93:3f:
ff:0d:b9:1e:ad:4c:4a:14:28:2b:01:fa:22:4c:78:
0d:36:e0:4c:36:a8:b8:2f:9c:3e:15:af:2c:da:47:
55:82:e9:7c:1a:f4:d7:11:9f:45:6c:96:1d:18:4c:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AB:29:26:05:8E:E2:BE:62:26:E9:4B:79:F0:24:75:84:F0:21:27
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/66spJgWO4r5iJulLefAkdYTwISc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.222.0/24
Signature Algorithm: sha256WithRSAEncryption
41:25:79:14:81:5f:c4:3b:08:aa:38:49:f2:16:e8:03:2f:96:
4c:89:fb:54:37:31:d8:09:65:0e:98:a0:f4:40:4e:6f:cf:76:
7d:e0:0b:a7:77:a0:2d:4f:be:46:af:03:bb:7b:7c:6e:17:c9:
f5:27:eb:a1:92:f2:f0:0c:f8:aa:96:6a:0d:ac:bf:aa:9f:84:
6a:07:69:a4:97:fd:26:c1:c6:3b:84:10:b7:6e:e0:8b:4b:98:
9c:65:3f:5b:f6:25:c7:b7:95:fe:1b:f2:46:30:e4:23:46:22:
d3:cb:c3:89:a4:9a:07:f4:69:21:4b:58:12:59:df:01:aa:46:
be:f2:27:1c:6c:37:56:36:ed:7e:28:dc:f9:66:0e:bb:18:85:
9e:60:1d:92:b4:f1:a9:ef:bc:0a:98:6a:08:74:52:e1:13:7d:
70:25:3e:52:68:28:1a:72:51:30:0c:d4:a9:58:4c:73:f8:a1:
8b:9c:28:e5:64:64:62:0a:85:2f:05:b8:76:1f:0a:da:65:3f:
1e:62:4b:48:e6:be:9f:fe:33:8b:d0:01:52:b9:39:2a:e1:35:
b3:e5:05:6f:b7:92:3e:54:ac:6d:c2:b0:79:0c:8c:82:5d:c0:
d4:ec:4d:8c:9b:bb:10:c7:ab:41:a6:cc:af:af:f6:02:95:1a:
a7:04:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:06 2026 by rpki-client