Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/_CTtp7ZPH0kOXThVR7wQj4XW06A.roa
File: _CTtp7ZPH0kOXThVR7wQj4XW06A.roa (raw, json)
Hash identifier: 6qdFfEyB76OZ8FZHFVIZ5XewiprUqvvRVqyD2drMzds=
Subject key identifier: FC:24:ED:A7:B6:4F:1F:49:0E:5D:38:55:47:BC:10:8F:85:D6:D3:A0
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A08CE8B3270FEE7D39443547CFE1AEAB68
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/_CTtp7ZPH0kOXThVR7wQj4XW06A.roa
Signing time: Thu 10 Sep 2026 20:00:55 +0000
ROA not before: Thu 10 Sep 2026 20:00:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215749
IP address blocks: 153.56.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:b3:27:0f:ee:7d:39:44:35:47:cf:e1:ae:ab:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Sep 10 20:00:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc24eda7b64f1f490e5d385547bc108f85d6d3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:c4:47:3b:e4:15:e7:f2:f7:63:6f:a6:e7:
94:fd:b8:77:8d:6f:25:20:e6:3c:f1:bd:85:09:60:
db:be:a9:15:b1:f4:c9:a3:6d:20:af:4e:6e:38:9a:
ce:38:bd:02:20:2b:5d:3e:cb:ec:e3:02:23:4d:97:
30:89:71:35:5c:c9:36:ac:58:88:34:4f:03:ad:33:
4d:3a:79:b7:69:5e:fe:5d:b2:92:e3:21:12:71:26:
ed:82:51:8c:4c:75:92:0f:2a:ca:1f:b1:98:37:59:
80:cd:d1:10:fc:59:e5:ca:64:34:1e:3b:58:55:6d:
5f:bf:d0:f7:5a:3a:46:88:18:1b:3c:a6:8b:e1:ab:
10:03:17:e3:92:30:5f:aa:7b:30:f7:13:64:f4:0d:
5b:2f:5b:0f:80:cb:f2:d3:14:cc:49:ed:1f:5a:39:
e4:15:d9:dd:49:17:03:9e:2c:f3:db:8b:6f:40:f5:
0e:10:b5:b1:8c:2c:81:6e:b8:a7:49:a7:41:fd:4c:
eb:d3:fe:f9:8b:45:a3:49:ad:b9:06:54:88:a2:7d:
0d:ef:1b:6c:fc:33:d0:9a:0d:a5:07:dd:50:c8:f3:
27:a4:c2:1a:6c:16:2b:32:4c:f8:3d:c3:e5:36:e3:
f3:16:34:00:c1:c2:b5:7a:ac:5b:ce:46:61:2e:03:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:24:ED:A7:B6:4F:1F:49:0E:5D:38:55:47:BC:10:8F:85:D6:D3:A0
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/_CTtp7ZPH0kOXThVR7wQj4XW06A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.221.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bc:17:14:66:90:50:a1:c9:21:1d:da:7a:90:de:ad:1a:7e:
c3:28:90:41:8d:78:0d:b7:09:da:e1:92:b5:3d:59:0f:af:43:
b9:a8:67:e0:09:83:4d:16:fb:91:0e:2c:0f:ed:cf:ad:e3:86:
c5:d3:9a:87:ca:df:fd:6a:9c:03:10:c0:be:3d:27:7c:13:8d:
23:04:ac:16:2b:8e:16:7f:85:cd:4b:fb:7e:36:ac:9a:7d:52:
c4:c4:e9:f8:3e:39:68:b5:ff:74:22:92:48:d3:f4:2c:10:c8:
35:ec:9f:9a:cd:73:5c:3d:c6:90:8f:26:9a:1f:44:a8:1d:68:
fd:79:8c:7e:9a:48:f9:69:e4:34:8a:00:87:1a:52:be:55:5a:
8f:f7:41:16:c6:b4:f8:c7:82:fb:f3:62:13:4b:0a:12:40:51:
47:4f:9a:ab:f5:af:8f:c9:87:03:41:58:d2:42:10:91:8d:22:
ea:a6:fa:cc:8b:fe:85:37:41:97:2f:a1:33:c1:c7:ae:77:cf:
ff:84:cb:43:70:bc:af:94:2f:9b:74:c5:2d:57:a2:40:2d:a9:
79:a2:ee:b6:a3:ae:67:c0:8a:cc:37:18:eb:2d:ea:11:68:d2:
21:05:2f:bd:dc:06:94:f6:bc:85:de:30:c8:ff:be:45:ae:82:
b1:81:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:27:47 2026 by rpki-client