Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/01znGUdjsJRSMnY67Cxk30RHPcI.roa
File: 01znGUdjsJRSMnY67Cxk30RHPcI.roa (raw, json)
Hash identifier: fF9tO21qmpiDUkWqDbMYYR4gImf0Po9T4zVE/GtNPwY=
Subject key identifier: D3:5C:E7:19:47:63:B0:94:52:32:76:3A:EC:2C:64:DF:44:47:3D:C2
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A1CA548A8DAD82CDE7B0974386D39240EF
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/01znGUdjsJRSMnY67Cxk30RHPcI.roa
Signing time: Wed 11 Nov 2026 11:18:20 +0000
ROA not before: Wed 11 Nov 2026 11:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 179.66.181.0/24 maxlen: 24
187.13.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:54:8a:8d:ad:82:cd:e7:b0:97:43:86:d3:92:40:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Nov 11 11:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d35ce7194763b0945232763aec2c64df44473dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:81:a2:20:51:c4:28:da:c8:c3:90:f8:c5:
b6:0e:6f:a0:e3:e1:0b:25:1c:61:4a:be:12:89:12:
cf:7f:d0:36:2e:c9:8a:14:73:94:9a:c7:ff:1f:47:
43:db:eb:53:af:4d:e9:3f:69:6b:11:40:5d:ab:ff:
0e:c2:28:e8:93:4c:32:b1:d4:90:52:28:75:ee:62:
ec:0a:e0:da:f3:06:3e:7f:71:0b:ce:f5:ee:10:52:
bd:54:cc:fe:b9:48:3f:9a:08:4b:fa:0e:b8:0f:a9:
18:cf:49:7c:53:73:18:2e:2c:64:34:2e:67:0d:a1:
e4:0c:50:4b:04:e0:81:22:14:b0:5c:9d:39:2b:19:
3b:5c:cc:47:72:7a:22:c8:9c:19:87:de:73:89:49:
f0:2f:fa:03:e4:f1:d0:35:3e:2e:6d:45:89:a0:1d:
a1:dd:f4:37:fc:6b:c9:a2:66:17:32:8a:e6:36:af:
02:26:5e:e9:44:57:54:e9:1b:da:1f:cf:51:7f:52:
98:6b:ed:8d:df:ef:08:dc:34:f0:81:d7:bc:0c:56:
79:4b:a5:46:64:7b:b9:7d:44:c6:0e:11:53:71:d6:
dd:a4:5c:19:7a:55:58:c4:13:b3:9b:e6:3d:75:12:
d5:0b:17:65:a1:cf:70:47:7c:d1:02:0a:a1:d7:d6:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5C:E7:19:47:63:B0:94:52:32:76:3A:EC:2C:64:DF:44:47:3D:C2
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/01znGUdjsJRSMnY67Cxk30RHPcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.66.181.0/24
187.13.74.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6b:50:f0:f2:60:40:a2:c8:aa:96:3e:0c:5a:35:4e:4e:56:
5a:c3:2c:35:de:31:48:e4:a6:44:f2:9d:b1:e1:97:25:ae:b3:
ba:32:b9:9b:6e:15:0f:a1:cb:c7:1b:dc:64:c5:f2:1c:73:1d:
a4:91:9d:c4:78:f9:d3:31:6a:69:b8:80:9e:29:e1:3a:bd:ea:
ca:6f:d0:41:d6:66:1d:fc:13:37:ba:94:da:26:43:a4:30:08:
86:ea:d6:02:a3:4d:08:bb:93:36:04:06:58:45:92:2f:50:b9:
c1:cf:7e:c2:89:fc:2f:55:31:86:66:5c:72:b4:e5:a8:e1:b0:
08:e3:3e:cb:47:da:49:e6:ca:9b:3a:39:76:53:54:7b:4f:f5:
8a:47:47:ff:c8:6b:c1:ec:63:c4:b2:ad:2a:40:59:43:90:1e:
c8:55:af:4f:24:bd:78:a0:15:ad:1a:51:73:c7:d3:55:0b:d6:
c6:bb:b0:69:98:43:f9:ab:29:08:a0:41:d8:6b:25:95:a5:a4:
c2:b1:b8:e6:8d:77:1a:5e:87:8b:3f:5e:55:f2:b6:c8:22:7d:
b9:80:b3:d3:0d:8a:a7:a3:43:23:d3:f8:e3:6f:50:85:f6:15:
d7:93:ca:03:4a:5f:62:93:9e:68:d1:cf:c2:7a:ab:5e:c2:1c:
a0:7c:a4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:33:50 2026 by rpki-client