Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/cLV16e4v7vV_S6eQOLOte7hxj18.roa
File: cLV16e4v7vV_S6eQOLOte7hxj18.roa (raw, json)
Hash identifier: +SlaR3Q3bjh0sZBb6PtJ7UqrBqBFULhBuOS6bf52Z+0=
Subject key identifier: 70:B5:75:E9:EE:2F:EE:F5:7F:4B:A7:90:38:B3:AD:7B:B8:71:8F:5F
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 01A0B21A5BF77290AC08BF1FFB45EF1D7C05
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/cLV16e4v7vV_S6eQOLOte7hxj18.roa
Signing time: Fri 18 Sep 2026 01:21:07 +0000
ROA not before: Fri 18 Sep 2026 01:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 134.168.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b2:1a:5b:f7:72:90:ac:08:bf:1f:fb:45:ef:1d:7c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Sep 18 01:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70b575e9ee2feef57f4ba79038b3ad7bb8718f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:b8:08:e4:f2:48:ab:13:ef:53:74:3d:dd:
5b:1a:92:64:6f:ed:94:aa:ea:b5:24:d1:65:b2:f1:
0e:4c:e3:37:00:77:e1:40:9c:08:f1:31:3b:77:69:
6d:0e:d2:cc:63:01:67:f1:14:ee:70:69:84:72:ce:
70:f9:d4:88:6a:8a:a3:c6:b0:79:4a:3b:77:98:9a:
da:a5:77:a7:f9:b9:bb:12:b1:b9:ac:bd:41:3f:9e:
d4:52:52:36:27:a3:a8:00:96:bd:36:13:b9:66:7b:
79:83:db:73:a3:71:cc:e0:b4:f7:91:7b:92:8c:97:
dd:0c:28:ca:8a:28:48:9c:02:3b:15:ee:18:f4:e8:
ab:a6:c9:79:a8:51:b4:84:34:a5:29:0e:8e:af:e7:
0d:9c:fd:f8:2d:c1:35:f5:9a:d5:d0:0a:8e:f7:2a:
d9:84:eb:1e:63:5c:c9:22:66:c3:ea:4c:da:c0:aa:
57:e4:63:60:f7:90:79:a4:21:0a:a4:fd:e4:ac:36:
17:eb:26:80:20:ab:11:b6:2d:91:25:cf:29:51:c8:
28:b8:8f:8a:49:24:27:46:59:16:20:74:e4:80:bf:
6b:f8:39:b2:3e:08:cf:74:bd:45:0d:a9:63:cf:4d:
c0:6d:a7:5b:62:a9:7b:88:8f:11:83:dc:f7:dc:ae:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:75:E9:EE:2F:EE:F5:7F:4B:A7:90:38:B3:AD:7B:B8:71:8F:5F
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/cLV16e4v7vV_S6eQOLOte7hxj18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.168.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:37:f1:aa:07:86:50:ba:a9:24:f1:d2:f2:15:2b:a5:42:ed:
f1:48:1e:1a:f3:77:d2:70:dc:e5:9c:54:ad:e0:7b:40:7d:c5:
74:a4:6e:28:a6:a3:6c:6f:6f:55:c6:ab:28:f5:c2:fc:3c:fb:
84:e8:c5:71:b8:9f:85:37:69:7d:2b:4f:46:42:6b:2c:c3:7c:
ba:1e:5c:5e:3d:b0:d6:93:93:3f:3c:7c:06:2e:e7:24:ce:6f:
b5:cc:15:63:ce:b9:78:83:f6:8a:68:4b:91:95:a0:ef:02:9e:
14:6a:3d:89:59:30:5a:ce:90:93:eb:1f:1b:4a:c6:27:7f:25:
b6:ca:a8:b3:0a:9c:de:d1:d1:64:97:18:24:fe:5e:ee:6e:31:
05:e6:c2:f5:a3:cf:4d:19:b3:90:07:3b:18:b3:64:34:50:94:
68:d2:00:44:8c:57:cc:bf:b2:b4:e1:b0:e0:0e:b7:85:9e:a2:
4e:f4:99:97:5f:a7:b0:f2:a3:34:93:cf:b1:74:3c:7e:87:6b:
f0:76:31:c7:29:04:27:cd:11:0a:b1:03:42:34:ae:2f:15:9c:
10:13:ff:0a:b4:16:7a:fb:37:40:d2:24:1d:2e:89:13:14:84:
22:d3:a3:6f:f5:8d:63:4e:d7:2f:47:3e:32:70:1c:27:92:32:
07:8f:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:37:30 2026 by rpki-client