Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/d11TAPJddnRFzKh5DrU-CDeoaBo.roa
File: d11TAPJddnRFzKh5DrU-CDeoaBo.roa (raw, json)
Hash identifier: DUdu/s/abzi6mMOht0VN7vPBi45apIKhtZR6ZwXuEqc=
Subject key identifier: 77:5D:53:00:F2:5D:76:74:45:CC:A8:79:0E:B5:3E:08:37:A8:68:1A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A06B31CC74B687E947480CA660879793A9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/d11TAPJddnRFzKh5DrU-CDeoaBo.roa
Signing time: Fri 04 Sep 2026 06:53:40 +0000
ROA not before: Fri 04 Sep 2026 06:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215081
IP address blocks: 178.173.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:31:cc:74:b6:87:e9:47:48:0c:a6:60:87:97:93:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 4 06:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=775d5300f25d767445cca8790eb53e0837a8681a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:db:fe:2e:ef:6b:8b:e5:71:5b:87:8a:3c:
ca:22:ea:81:3a:63:a4:de:d6:7a:cd:08:7d:bc:58:
55:f8:f7:2a:b5:9f:6d:40:39:19:74:b7:d1:6b:8e:
61:92:87:29:18:c4:6d:23:fa:95:2f:51:cc:b1:1f:
b3:82:9f:bd:bd:87:58:04:68:d6:61:1e:ef:9c:f6:
93:c5:d8:a4:23:4c:ea:10:ad:60:a7:23:eb:a3:b7:
3b:6e:39:5b:7d:ab:83:4d:cb:91:8d:57:e7:3d:1c:
1e:05:a8:be:26:26:60:0a:74:f4:b1:c1:26:2e:c6:
ec:03:1c:f2:0d:21:21:a9:b3:aa:00:76:e9:1d:90:
e1:fe:4a:20:fd:b4:e6:76:2a:7e:7a:96:7c:33:34:
ef:76:a2:72:20:37:07:f1:35:d5:7e:56:cc:f6:51:
c4:fe:72:0c:ee:be:12:34:3a:d4:c7:9c:ce:ae:da:
1f:21:a5:82:1c:01:d6:86:65:1f:27:6f:e3:09:2b:
80:40:c2:c4:aa:22:b9:96:c1:bb:d8:a4:eb:45:9d:
08:8f:71:0d:12:59:e8:76:42:e3:1a:19:11:ce:2c:
80:0f:3a:ac:2c:b5:7f:a4:0b:dc:55:a5:5a:6b:2e:
7e:4f:7d:3c:74:98:74:45:4f:35:7a:c7:51:19:6b:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:53:00:F2:5D:76:74:45:CC:A8:79:0E:B5:3E:08:37:A8:68:1A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/d11TAPJddnRFzKh5DrU-CDeoaBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.240.0/24
Signature Algorithm: sha256WithRSAEncryption
84:10:dc:50:33:b5:9f:b8:d6:a5:c3:3a:97:e9:7f:cc:0a:45:
fd:24:6d:90:c5:55:19:ec:9f:53:75:95:5a:59:1a:ba:5b:69:
3d:31:fa:ef:b9:50:55:8a:d4:c3:de:55:bb:87:f4:40:0e:54:
3a:2d:72:da:99:66:bc:ca:b2:1e:37:ae:67:ec:4e:c3:0b:a7:
db:eb:42:ad:5e:7a:ea:56:27:2b:f3:12:df:dc:c2:4e:f7:6f:
77:e3:35:2c:95:0e:73:85:f2:58:72:6b:dd:f1:fb:2d:8f:a2:
f3:d1:10:92:d0:5b:a5:e0:5b:11:64:9d:78:b9:0f:3d:a9:b6:
cb:01:f7:f9:83:2d:13:71:69:61:ba:94:31:0e:1f:d5:6e:cd:
86:db:16:98:e0:51:f8:93:06:2c:fd:b1:30:c3:d7:26:44:64:
de:6c:e1:a2:3a:61:fe:cc:59:29:d4:49:73:d7:bf:4e:61:47:
1b:83:6c:70:d3:da:49:32:e2:0b:4a:39:a6:b5:1c:79:56:e1:
4d:c0:53:7b:89:3a:1e:be:13:34:14:06:f9:e0:1a:3c:02:7b:
e3:53:74:78:fb:c4:60:bc:3a:03:28:5a:ed:06:17:90:37:10:
f4:9a:44:13:ad:1c:cc:45:65:ab:84:05:34:98:50:0f:c8:36:
ef:64:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:25:54 2026 by rpki-client