Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/28aT58oFdkjczFkgKCDoVsP2Nb4.roa
File: 28aT58oFdkjczFkgKCDoVsP2Nb4.roa (raw, json)
Hash identifier: dPn9ngDHJRCQk3wsFg++yUre7s8TU7alToioZ+YBdxM=
Subject key identifier: DB:C6:93:E7:CA:05:76:48:DC:CC:59:20:28:20:E8:56:C3:F6:35:BE
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1A73DF79C5D883DC0C1AE175B2E02D9EB
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/28aT58oFdkjczFkgKCDoVsP2Nb4.roa
Signing time: Wed 04 Nov 2026 15:46:58 +0000
ROA not before: Wed 04 Nov 2026 15:46:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402671
IP address blocks: 168.199.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:3d:f7:9c:5d:88:3d:c0:c1:ae:17:5b:2e:02:d9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Nov 4 15:46:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbc693e7ca057648dccc59202820e856c3f635be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:2a:57:cd:6f:5a:e8:73:6e:39:8a:cf:92:
aa:53:d8:e3:5f:62:7c:0d:0d:b0:e7:27:82:dc:6f:
91:d1:b4:e6:79:67:c5:70:d7:0a:95:a5:bd:a0:9e:
ad:9a:11:da:97:03:94:1c:a4:25:9f:45:5c:3a:57:
0e:ca:bf:fa:b9:da:90:30:07:72:b7:96:5b:12:eb:
10:42:c2:91:e5:d2:3e:a5:8d:32:8f:f5:4c:0d:ec:
18:cb:60:3d:b0:9f:6c:db:7a:44:2a:01:7a:b1:15:
a7:db:1f:a1:56:58:3d:10:f2:1b:88:3f:6a:0e:8a:
6b:86:a4:6f:07:fd:9f:4d:8a:2a:ec:65:1d:c6:f9:
30:be:86:8c:1d:66:97:d8:b7:75:16:8d:4d:6f:b4:
12:6f:d2:40:84:d5:2f:71:21:c6:e2:68:9b:ba:bf:
79:58:ce:89:7d:8f:7a:29:66:4f:56:84:91:ab:41:
a8:25:09:df:12:90:85:f1:14:53:39:0c:cc:3e:82:
d9:45:a8:5d:fe:56:7d:59:f0:36:fb:b9:aa:aa:95:
55:1f:8f:98:25:c1:c0:7b:42:54:62:35:6a:41:fb:
ba:16:a8:2b:af:af:46:5e:a4:e3:59:f1:a3:fd:e5:
58:e6:b9:78:94:8e:88:9e:7b:a5:55:82:12:df:a1:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C6:93:E7:CA:05:76:48:DC:CC:59:20:28:20:E8:56:C3:F6:35:BE
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/28aT58oFdkjczFkgKCDoVsP2Nb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5b:79:b5:3f:82:93:76:bb:e1:df:7b:a2:8c:2e:c2:94:10:
7c:43:c9:c5:bd:f4:8f:50:29:3b:d8:3f:b1:67:ff:8a:4e:69:
f4:92:c3:f5:03:70:69:9a:62:17:cc:32:f9:46:6e:d9:81:c9:
cd:6b:bf:59:d6:d4:fe:35:b0:08:69:12:5c:04:05:5d:17:7f:
0b:7f:62:df:ab:47:31:0a:3a:28:ca:b1:c0:91:a2:6a:99:f9:
cd:c3:8d:9f:48:3e:32:19:33:a9:bc:7f:f9:3d:5f:2d:94:c1:
d1:02:ce:b2:c0:e9:2d:47:e1:5c:3c:2e:6f:f5:69:50:39:71:
1e:bc:c7:38:78:48:dd:bc:76:3f:4d:89:91:19:c7:bf:8b:9f:
b5:1d:c0:36:61:71:a5:90:9b:79:70:64:c8:ea:2b:76:bf:c2:
5f:63:12:ac:5c:49:06:30:7e:4d:a6:db:bf:5b:37:0d:2c:a1:
00:92:77:58:16:b5:f3:7b:50:a6:dd:b5:7a:18:fb:32:b2:6d:
34:c3:aa:55:ba:59:03:f9:f7:e6:f2:da:b8:4d:5d:b7:e2:86:
e7:53:b2:cd:6e:17:5b:8d:74:60:3f:80:dd:23:85:58:e4:19:
d0:47:21:d7:7d:ad:06:c3:c0:7c:30:c1:8a:9d:64:b4:fc:8d:
4e:d3:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:09:04 2026 by rpki-client