Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/0ecvWTrLL0Pddp71Vvy7lLkXT_A.roa
File: 0ecvWTrLL0Pddp71Vvy7lLkXT_A.roa (raw, json)
Hash identifier: DZOa9ZDn/FKrkuCgU7pBzq4pMoiw59/I1Ej+MzOAN9s=
Subject key identifier: D1:E7:2F:59:3A:CB:2F:43:DD:76:9E:F5:56:FC:BB:94:B9:17:4F:F0
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 01A0A0774B0621C9B5611871E4E42ABAD2D5
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/0ecvWTrLL0Pddp71Vvy7lLkXT_A.roa
Signing time: Mon 14 Sep 2026 15:09:27 +0000
ROA not before: Mon 14 Sep 2026 15:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2263
IP address blocks: 192.33.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:77:4b:06:21:c9:b5:61:18:71:e4:e4:2a:ba:d2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Sep 14 15:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1e72f593acb2f43dd769ef556fcbb94b9174ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0a:cf:16:5a:62:9b:c2:d9:a9:56:99:56:e5:
71:bf:b2:36:86:27:75:df:d9:14:1f:da:89:77:55:
19:3f:5b:cc:fd:b2:a7:52:7d:da:96:25:77:f1:ab:
7f:c8:f4:6a:1e:2d:52:15:9a:e2:7a:d0:62:b0:fa:
69:a9:b1:87:71:a0:98:e9:d9:74:aa:03:25:1f:a4:
02:cf:f8:4a:77:a6:e6:e0:06:36:92:46:c5:c1:3c:
4e:30:48:88:c5:d7:09:66:07:89:cc:8b:5f:16:96:
5b:95:a6:76:71:c9:c9:e3:4c:d5:67:c9:01:93:ea:
4d:31:e4:c3:de:5a:cb:e3:8d:6c:b3:78:6e:c7:c0:
f4:71:ab:47:14:ff:f2:96:00:38:ba:5c:25:b1:66:
e8:d8:4e:2c:47:a5:0a:21:eb:bd:64:59:84:69:7d:
a6:0a:18:22:71:82:30:87:4e:69:38:55:3e:92:07:
12:1a:6c:4b:68:a2:be:80:2e:6f:a1:74:58:71:53:
15:6c:f6:fd:44:0a:5b:c6:b8:f4:81:6a:1d:f3:ac:
dc:c8:68:96:8b:d7:ce:28:41:c4:ac:8e:9e:14:10:
be:27:bc:a9:b1:96:0a:a6:3e:68:ee:8d:3f:ec:c4:
70:19:50:ad:c4:c2:83:61:62:b5:9b:85:a6:eb:23:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:2F:59:3A:CB:2F:43:DD:76:9E:F5:56:FC:BB:94:B9:17:4F:F0
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/0ecvWTrLL0Pddp71Vvy7lLkXT_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.155.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ad:78:7c:e8:1a:18:1f:9a:2b:d9:62:da:e4:fb:b6:78:8e:
20:7c:34:73:65:b8:2b:2a:76:93:84:14:87:54:5b:b8:93:16:
db:a1:e0:eb:39:2b:b3:23:3e:74:55:85:35:96:04:f4:1e:83:
92:0c:9a:7d:91:06:38:fe:94:19:9d:df:59:a4:ea:1a:42:5c:
88:db:0c:93:70:2a:e8:7f:9f:60:5c:c5:3c:8c:50:02:56:8b:
fc:0d:51:0f:a2:41:8d:f6:79:fb:b3:32:59:8e:23:93:3b:27:
fc:cf:3a:fd:bd:d4:9b:3b:89:fb:0a:7d:b7:c4:02:1e:f5:37:
8f:03:c7:da:54:f9:c4:4f:24:72:a4:13:4b:21:32:2f:62:a0:
9f:02:ba:e8:9c:37:ad:d0:a8:b4:72:6b:12:5e:7a:6b:a7:20:
4c:f4:b0:fc:74:80:26:27:af:8e:0c:a0:e6:b9:9a:f0:e5:04:
ce:3f:70:9a:98:80:a5:c3:19:bf:55:c4:34:3b:e7:9e:99:e2:
05:3b:81:87:4d:1d:2c:ee:3e:a3:48:1c:01:17:9b:9c:4a:c2:
c3:aa:50:c2:0e:e0:5f:d1:bf:87:f9:29:2b:76:34:c8:75:18:
dd:9a:72:bb:2d:5d:6c:6c:51:85:1c:63:e5:86:d4:e7:12:07:
37:48:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:08 2026 by rpki-client