Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/AnVQ5rvJ8Nv9B31xSEE5izjZF_k.roa
File: AnVQ5rvJ8Nv9B31xSEE5izjZF_k.roa (raw, json)
Hash identifier: K+8ZqReJUOtpCYUcc9njjUqF92rWYJDNcRpRRYLUMTQ=
Subject key identifier: 02:75:50:E6:BB:C9:F0:DB:FD:07:7D:71:48:41:39:8B:38:D9:17:F9
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A1C48B1F4EBD30D3855DED062D8B8C283E
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/AnVQ5rvJ8Nv9B31xSEE5izjZF_k.roa
Signing time: Tue 10 Nov 2026 08:20:14 +0000
ROA not before: Tue 10 Nov 2026 08:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 146.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:8b:1f:4e:bd:30:d3:85:5d:ed:06:2d:8b:8c:28:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Nov 10 08:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=027550e6bbc9f0dbfd077d714841398b38d917f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:9a:7a:ae:68:28:b2:3d:94:82:01:d7:52:
4e:65:32:49:29:8d:d7:da:69:b5:7d:68:e5:07:f8:
1b:87:13:3b:6d:0c:75:d5:e4:6a:e6:a3:e5:c5:f5:
e4:4f:71:ce:5e:ea:c8:bc:66:c1:5d:51:46:9b:8e:
c5:78:4c:c3:47:57:82:ce:4d:08:7d:40:55:5b:cc:
96:73:15:a3:77:9d:07:c8:29:fb:1e:eb:2f:db:ec:
63:4b:69:4c:23:22:63:46:01:27:2d:83:b0:21:97:
79:2e:d1:de:3c:fb:67:ac:49:88:1a:28:10:8e:59:
a2:59:b1:9e:f2:4e:a3:ea:13:37:13:31:34:9e:d5:
45:10:31:ff:3c:dd:65:bc:4c:71:ab:4b:68:d2:8f:
7f:07:4c:b4:78:6c:1e:34:c3:f7:9a:d4:30:56:92:
8f:d8:83:c8:f3:ae:01:52:9f:06:fb:25:b7:92:83:
ff:3c:8e:05:a7:cd:1a:a3:b0:8f:ce:d0:27:4c:59:
94:a7:d6:f5:af:04:50:8c:a3:25:ef:2f:85:0e:ea:
30:f7:40:81:f2:15:7c:c5:a5:b6:51:ef:04:4a:4b:
f4:f9:4a:92:98:42:dd:1c:70:8f:3f:85:82:6a:4c:
fe:a0:bf:e9:c8:b3:96:d7:33:6a:8c:6f:2f:96:5f:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:75:50:E6:BB:C9:F0:DB:FD:07:7D:71:48:41:39:8B:38:D9:17:F9
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/AnVQ5rvJ8Nv9B31xSEE5izjZF_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
80:14:fa:b5:bf:f1:a8:37:51:8b:97:03:00:e2:7a:0f:55:22:
32:56:84:7a:ed:bc:2d:9b:40:42:a7:36:8d:34:ee:c9:54:84:
51:86:fe:51:29:49:0e:39:ac:7f:55:93:d8:d8:8a:bb:49:88:
c0:fe:67:d8:42:2a:c1:49:1d:53:5b:89:f4:a7:eb:c1:b3:46:
75:59:c1:1f:b2:63:e2:2a:cd:21:61:b9:78:da:45:43:24:f0:
03:d9:b2:28:d9:d4:a0:01:7d:0f:44:28:2f:11:3c:4a:21:94:
22:e9:ca:c2:1d:ee:47:7d:27:c1:77:b1:a8:4e:d3:26:1d:35:
80:5c:de:d7:22:c6:c1:dd:81:25:4f:b4:e6:62:66:83:17:f8:
60:cc:8a:3a:85:2d:1b:8f:bf:3a:70:02:ed:8d:fb:dc:0c:1b:
0f:d3:96:20:4e:ed:de:90:bb:02:2f:e5:fd:23:f2:ce:92:b0:
4c:f7:6d:43:e6:96:40:52:f1:1b:e3:82:b0:e2:79:13:bc:db:
fa:32:41:5a:96:62:45:02:01:de:37:3b:f2:f6:e8:79:97:75:
70:e8:27:02:70:9d:69:b2:1d:ae:0d:8e:45:79:1f:08:09:05:
e0:81:d2:e1:05:09:e0:5b:3b:1b:28:f6:ec:08:cb:c1:2e:b3:
5f:92:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:11:20 2026 by rpki-client