Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/1jL26ut9i72o2F_y1kqJYC-SeDw.roa
File: 1jL26ut9i72o2F_y1kqJYC-SeDw.roa (raw, json)
Hash identifier: wtiEByOmIaDIFzO/v4C1S8MN9NcEcNuf15+fPUnmuEA=
Subject key identifier: D6:32:F6:EA:EB:7D:8B:BD:A8:D8:5F:F2:D6:4A:89:60:2F:92:78:3C
Certificate issuer: /CN=c50aa05a5e859814b344005c303362888b8e60eb
Certificate serial: 01A06C57E6B9EED38831F1FF187D1373873C
Authority key identifier: C5:0A:A0:5A:5E:85:98:14:B3:44:00:5C:30:33:62:88:8B:8E:60:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/1jL26ut9i72o2F_y1kqJYC-SeDw.roa
Signing time: Fri 04 Sep 2026 12:14:54 +0000
ROA not before: Fri 04 Sep 2026 12:14:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15699
IP address blocks: 159.255.196.0/22 maxlen: 22
159.255.196.0/24 maxlen: 24
159.255.197.0/24 maxlen: 24
159.255.198.0/24 maxlen: 24
159.255.199.0/24 maxlen: 24
2a03:7480:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:57:e6:b9:ee:d3:88:31:f1:ff:18:7d:13:73:87:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50aa05a5e859814b344005c303362888b8e60eb
Validity
Not Before: Sep 4 12:14:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d632f6eaeb7d8bbda8d85ff2d64a89602f92783c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c8:22:c3:a0:81:a4:73:46:6b:06:c4:dd:01:
72:b5:81:87:4c:e9:e9:db:e2:90:ab:47:76:e5:a6:
d2:3c:60:4f:58:65:dd:c6:10:0d:48:d5:35:f0:6b:
4e:2e:40:55:b8:f9:a4:d7:24:88:46:3d:59:04:bf:
1c:45:b9:8f:a3:16:5f:5a:9d:00:15:cf:22:f3:3e:
7f:7c:c4:78:c4:72:15:11:e9:04:f9:75:12:01:5c:
0f:7b:29:4c:92:f5:f1:48:b6:51:e9:0f:93:01:07:
3d:19:9f:e1:4f:32:53:b8:8a:28:ac:94:c3:b8:ba:
97:83:df:cd:39:06:c8:e5:ce:c5:25:22:e0:bc:bc:
ba:df:45:8f:05:c5:7c:fa:81:fb:08:f5:2a:bc:8b:
04:6b:ec:70:17:b6:b5:f9:6c:73:8f:77:ff:09:55:
08:86:2c:46:9c:85:3a:ab:1f:95:e2:d1:d9:83:f3:
88:95:81:71:79:58:05:7c:49:27:cd:a1:f2:93:57:
fa:4e:c0:6f:9f:e0:d2:05:bd:2c:0f:85:6c:87:78:
1b:af:af:1b:86:c0:ae:45:e5:80:33:00:3d:b0:80:
5c:d5:99:04:53:84:52:5e:67:87:a2:25:36:5d:33:
13:8a:b2:a5:0f:08:de:b5:6d:e6:91:2b:29:c9:ef:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:32:F6:EA:EB:7D:8B:BD:A8:D8:5F:F2:D6:4A:89:60:2F:92:78:3C
X509v3 Authority Key Identifier:
keyid:C5:0A:A0:5A:5E:85:98:14:B3:44:00:5C:30:33:62:88:8B:8E:60:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/1jL26ut9i72o2F_y1kqJYC-SeDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.196.0/22
IPv6:
2a03:7480:10::/44
Signature Algorithm: sha256WithRSAEncryption
1e:1f:28:11:03:d8:91:96:c7:19:51:46:dd:4d:44:98:3f:7a:
4b:c7:03:49:23:11:63:42:da:5c:d6:d4:f8:c8:10:2d:f1:1b:
ec:eb:6c:4b:9a:79:6c:eb:dd:28:3d:e2:63:d8:49:9e:25:74:
45:51:a8:be:4b:2b:3e:dc:e7:e6:cd:8b:cb:85:63:5a:da:c8:
f2:34:b7:9a:38:19:10:f1:8c:dc:60:52:23:8e:05:b2:55:2d:
29:12:e4:10:65:8b:80:ab:81:19:95:19:b7:e1:a7:b3:b3:05:
0a:a7:df:8a:ec:12:b0:80:a6:d1:94:86:0a:53:4d:97:4c:de:
d9:8c:9a:92:c0:3f:f9:07:ff:94:ac:4f:40:11:4a:b9:c1:f4:
58:19:00:d9:82:f9:db:9a:24:14:37:6a:30:af:94:29:2a:ec:
80:37:2e:0c:49:92:f8:b0:fa:f3:ca:13:19:8b:64:4e:81:64:
2c:db:56:70:46:88:94:f5:1f:31:8c:75:51:4b:4a:ee:86:a0:
00:52:33:d4:c8:22:65:ae:ef:98:32:c1:dd:69:1c:8b:bb:09:
29:b3:79:5a:db:b7:80:8b:f7:2e:3e:5a:03:54:e2:a0:28:7f:
34:31:3f:f3:fa:cd:86:26:26:e5:a1:aa:75:61:d2:6b:fd:7f:
f7:54:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:00 2026 by rpki-client