Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/alPF32vcZlTUO2FjOCdnGpcccJI.roa
File: alPF32vcZlTUO2FjOCdnGpcccJI.roa (raw, json)
Hash identifier: qcVlGmcJPOUYfeL5XleLKcxk84wFFFeO1Uoc+U/JJPs=
Subject key identifier: 6A:53:C5:DF:6B:DC:66:54:D4:3B:61:63:38:27:67:1A:97:1C:70:92
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 019C7A54F1F1949E719267381B90D095684F
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/alPF32vcZlTUO2FjOCdnGpcccJI.roa
Signing time: Fri 20 Feb 2026 09:15:13 +0000
ROA not before: Fri 20 Feb 2026 09:15:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213579
IP address blocks: 185.140.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:54:f1:f1:94:9e:71:92:67:38:1b:90:d0:95:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Feb 20 09:15:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a53c5df6bdc6654d43b61633827671a971c7092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:6d:7b:b6:28:ae:86:61:19:79:b8:e2:9b:
19:73:25:47:c4:e6:80:c3:65:69:1f:5a:96:62:da:
ee:6e:e0:e2:48:1e:b3:b8:fc:d2:ca:6e:da:54:86:
05:cf:29:97:55:7b:ec:f4:4a:b3:6c:22:9c:0e:d2:
8d:49:6a:06:66:c7:ec:35:c9:b5:45:b7:56:24:17:
e9:21:ba:cc:45:3e:de:2e:a9:99:48:38:e7:ca:35:
54:46:aa:17:b1:b4:79:77:0c:50:82:98:d2:94:58:
1a:fd:43:e3:dc:ca:be:f1:1a:3b:7e:29:cb:0f:3f:
e0:bd:1e:6e:66:f0:5f:98:d7:a9:3b:7e:37:f1:b6:
3d:f2:45:16:46:35:0f:e8:5c:4d:aa:3d:c7:4d:4b:
5b:45:05:74:d9:1f:d8:8e:ae:a1:cb:ee:3e:e6:47:
b2:ae:a8:7c:58:ef:56:f2:a2:18:c7:06:77:b1:26:
39:89:85:44:54:e8:38:d2:f0:8c:28:38:5f:64:7f:
42:b2:81:70:34:40:88:f1:4a:c2:56:cc:b5:97:f9:
40:1c:59:05:f9:2b:ae:79:9f:c4:bc:8d:0b:9d:2f:
00:25:c5:40:f4:f8:1c:1d:3c:3d:23:10:bd:62:3f:
52:fa:31:f0:d8:d3:a8:42:d9:65:88:62:e7:3e:c3:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:C5:DF:6B:DC:66:54:D4:3B:61:63:38:27:67:1A:97:1C:70:92
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/alPF32vcZlTUO2FjOCdnGpcccJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:aa:d2:72:fb:f7:19:f7:a7:ed:6d:d7:08:67:5d:88:0e:82:
1c:0a:09:89:ad:e6:0b:50:fe:c6:31:c7:ee:08:18:57:83:da:
75:24:a7:c2:36:ef:e8:e5:9a:91:e0:75:84:8a:1d:07:dc:4c:
6f:6c:30:3b:4a:ee:be:ce:bc:4d:cb:2d:37:64:46:0f:17:9a:
f4:f6:07:87:a0:cb:6f:1d:fb:d0:01:53:d0:f8:e2:4a:36:47:
5f:54:5c:2b:5c:46:0b:1b:6c:e0:a1:6a:4a:b1:1c:7b:6a:ab:
98:ce:39:13:ab:7d:8f:df:89:25:df:58:21:de:b1:d5:79:06:
e8:b3:fb:8a:32:49:09:a9:4e:45:be:a5:2a:6a:9e:3d:15:e7:
49:18:7e:20:37:40:34:fa:37:1f:36:c5:92:81:b3:24:dc:df:
79:a4:34:43:95:6b:0c:b8:c2:43:d5:da:22:be:c4:4d:83:e2:
1b:42:8b:80:be:cd:27:dc:26:c7:83:7c:2d:9d:d0:04:3f:59:
e4:f0:8b:d3:6a:95:c8:69:99:07:89:6e:84:f0:fd:de:ed:e1:
29:90:a0:b6:c0:d6:13:c5:a2:b8:53:68:9d:af:59:c3:05:55:
1f:59:6e:2a:43:54:80:ac:02:e1:97:1a:73:60:0e:66:22:6e:
78:b0:fd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:56 2026 by rpki-client