Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/l2qbWr8szwhVQErHvG2xUJuCoTU.roa
File: l2qbWr8szwhVQErHvG2xUJuCoTU.roa (raw, json)
Hash identifier: qL4VVtUTfCz7xaoto5m+PyInvmU6afGLX5c86QcyCrk=
Subject key identifier: 97:6A:9B:5A:BF:2C:CF:08:55:40:4A:C7:BC:6D:B1:50:9B:82:A1:35
Certificate issuer: /CN=9871ac7f0233a10d2ca7aa19bac4b4976df3d6b0
Certificate serial: 01A0A93DFDA1E8EB5F373DBB7F686F2128ED
Authority key identifier: 98:71:AC:7F:02:33:A1:0D:2C:A7:AA:19:BA:C4:B4:97:6D:F3:D6:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/l2qbWr8szwhVQErHvG2xUJuCoTU.roa
Signing time: Wed 16 Sep 2026 08:03:27 +0000
ROA not before: Wed 16 Sep 2026 08:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49121
IP address blocks: 37.77.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:3d:fd:a1:e8:eb:5f:37:3d:bb:7f:68:6f:21:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9871ac7f0233a10d2ca7aa19bac4b4976df3d6b0
Validity
Not Before: Sep 16 08:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=976a9b5abf2ccf0855404ac7bc6db1509b82a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9c:f6:e8:f9:06:8a:52:ba:76:68:60:0a:4d:
28:74:0c:40:78:5e:06:bd:8b:f5:c4:00:0b:fc:d5:
b3:7e:3d:c0:12:e5:ad:00:96:27:2c:f4:a6:56:89:
4f:48:50:9e:cc:18:dd:f8:53:35:29:2f:a7:7e:3e:
7c:4b:5f:75:01:01:39:9b:69:eb:ff:b8:13:68:fc:
72:45:2c:d7:20:f8:8a:61:7c:8d:a5:76:f6:f8:bc:
a0:be:2e:19:ed:bd:db:05:af:de:d0:49:a9:c5:b5:
66:59:1c:b3:7d:75:e3:c0:e4:b1:38:32:cd:6d:b6:
2c:5a:8f:1f:b6:29:0d:20:3f:1f:e2:90:9d:3e:68:
69:15:eb:b6:14:39:c9:d9:3d:50:eb:27:7c:47:28:
16:94:b4:a4:77:f2:ab:e6:42:0d:26:ec:b0:9c:80:
84:69:6d:da:83:7a:dd:d7:51:ae:b2:e8:50:e3:37:
c7:05:51:24:fa:37:0b:1f:51:69:87:d6:ab:bd:ea:
39:28:90:e0:af:7e:35:3c:98:37:3a:3a:ca:4b:69:
73:f6:ac:b8:3c:ce:10:be:7d:04:67:e7:11:3a:0a:
86:39:6a:ba:1b:53:48:99:34:7e:41:73:bc:14:88:
80:49:63:44:b8:57:0b:da:3f:e3:31:e4:51:b0:8f:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6A:9B:5A:BF:2C:CF:08:55:40:4A:C7:BC:6D:B1:50:9B:82:A1:35
X509v3 Authority Key Identifier:
keyid:98:71:AC:7F:02:33:A1:0D:2C:A7:AA:19:BA:C4:B4:97:6D:F3:D6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHGsfwIzoQ0sp6oZusS0l23z1rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/l2qbWr8szwhVQErHvG2xUJuCoTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/795ae0-2684-4327-b8ef-8b891eb11e10/1/mHGsfwIzoQ0sp6oZusS0l23z1rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.145.0/24
Signature Algorithm: sha256WithRSAEncryption
88:91:fb:e6:3e:df:96:9e:f7:06:31:32:0a:aa:9a:47:dc:bb:
bb:6c:75:14:4e:8b:4d:de:bf:66:09:de:23:0b:f0:97:f9:97:
f9:c4:e1:30:96:21:95:4e:f0:db:f0:d2:d5:7c:e9:13:cd:69:
1c:64:3e:12:13:ce:21:4d:3b:78:10:76:4c:eb:21:6c:cd:5c:
93:c3:42:e1:91:05:74:88:5e:02:35:b5:53:a3:c7:06:50:76:
13:25:45:1d:af:24:72:cb:5c:30:01:0a:f9:71:52:35:bd:4c:
98:e2:f8:3c:a3:51:c9:85:82:a7:a8:96:01:92:b2:a7:c5:a3:
57:ba:54:77:4e:23:85:d7:d3:db:a0:d5:13:3f:7b:bc:4d:b1:
55:3e:66:c2:bf:c4:5a:dc:6b:2d:48:44:d9:b5:7c:63:32:e2:
5c:32:cd:39:f4:8d:00:d6:bd:a2:b4:5d:e2:d2:c6:c3:f7:bc:
d4:31:f1:16:6b:a6:34:12:bc:89:a1:6d:34:5d:ec:3b:6f:79:
a2:cf:71:58:d1:11:6f:dc:50:cf:4d:e5:99:7d:5f:1d:ff:eb:
49:7f:5a:e7:cc:bc:34:dc:65:a2:37:35:d2:9b:3e:1b:2a:be:
da:8a:f3:38:f7:8c:11:92:af:8b:f3:4a:5a:fc:9f:71:a8:ba:
52:b5:13:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:15:14 2026 by rpki-client