Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/227jYpmGy9pUGt1cRO2wZuHyegs.roa
File: 227jYpmGy9pUGt1cRO2wZuHyegs.roa (raw, json)
Hash identifier: wS0yqR/qqVVhsJLVWoB1woSmOabwdAn18pOwLgZwhCg=
Subject key identifier: DB:6E:E3:62:99:86:CB:DA:54:1A:DD:5C:44:ED:B0:66:E1:F2:7A:0B
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A0C995098611450E626329D9A68A95BB2C
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/227jYpmGy9pUGt1cRO2wZuHyegs.roa
Signing time: Tue 22 Sep 2026 14:46:22 +0000
ROA not before: Tue 22 Sep 2026 14:46:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40994
IP address blocks: 132.243.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:95:09:86:11:45:0e:62:63:29:d9:a6:8a:95:bb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Sep 22 14:46:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db6ee3629986cbda541add5c44edb066e1f27a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:69:92:63:22:36:87:d7:02:48:81:e2:cb:
da:b6:d9:2b:83:a6:40:ac:8a:16:9a:9f:46:36:15:
01:2c:74:fd:4c:b9:57:63:58:64:0c:13:a3:4c:6a:
01:d2:84:93:7a:b3:27:9c:cd:e5:2f:dd:e3:aa:51:
da:54:9f:4a:c2:d3:5a:8c:53:fc:1e:0a:12:44:02:
32:8c:1e:0e:c1:c7:7b:8a:c6:90:99:fe:eb:be:28:
6a:8b:85:eb:2b:9a:01:a4:fa:fe:39:74:f0:a8:6f:
13:65:83:26:9d:c7:7d:b3:41:83:ff:25:d2:2d:d7:
cf:05:9e:6e:1d:d5:8d:58:1d:a7:1e:da:a9:38:fb:
15:c2:f1:ce:af:00:9c:7a:81:6e:15:ab:6f:84:92:
c4:92:6f:7c:f0:2f:4b:c9:45:ce:8c:2d:3f:90:ad:
e9:b0:01:51:94:09:da:8e:c9:b8:38:b4:47:71:00:
8f:50:d9:ba:a9:66:27:4d:ae:11:cb:49:13:90:75:
42:cd:2d:6b:3c:18:a6:3b:cc:62:5f:cf:c5:75:dc:
d3:e2:61:03:36:b2:69:5e:ce:b5:6d:0e:22:72:08:
e9:47:96:c2:68:35:24:ea:5a:96:54:29:8d:5e:95:
cd:3a:7d:c6:ce:7e:21:95:10:62:b3:76:9f:53:7a:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6E:E3:62:99:86:CB:DA:54:1A:DD:5C:44:ED:B0:66:E1:F2:7A:0B
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/227jYpmGy9pUGt1cRO2wZuHyegs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.203.0/24
Signature Algorithm: sha256WithRSAEncryption
58:89:6e:f8:e4:96:3f:32:27:53:b6:10:be:c1:be:fa:bd:81:
51:7a:54:21:27:de:aa:56:32:b8:e7:e8:bf:fb:02:f4:1d:ce:
37:30:6a:3d:c5:2c:55:8b:49:35:ad:39:d8:7a:a6:5f:0d:54:
46:2d:e4:fa:51:25:cf:85:55:e2:74:70:22:ca:63:0d:2d:68:
a5:c5:8b:a0:88:03:8d:b8:54:a0:40:30:f1:5f:a2:61:10:7a:
d5:12:ca:9b:5c:98:7d:35:f3:aa:bf:df:26:bf:cc:0e:a2:27:
f9:0c:c1:a8:41:3a:46:12:f7:e4:ae:76:3b:ed:09:d1:13:4f:
85:db:d0:af:78:3f:a4:2a:33:79:b1:e8:2e:99:a2:d0:d7:5f:
86:b8:a5:99:f2:aa:e5:c5:2f:57:f5:5f:b1:4b:cc:21:db:be:
61:68:d0:08:87:61:49:47:aa:b8:a7:d4:b3:e9:95:83:a7:45:
81:0a:47:ae:fc:04:03:4e:50:84:26:e0:55:28:60:26:36:12:
9f:ec:00:70:25:a0:71:5d:a0:b8:c3:95:db:a5:38:36:cd:aa:
f7:55:ec:1b:9c:0b:86:cb:65:a3:34:1c:97:bb:00:a0:6a:f1:
6d:a0:e7:b2:51:8f:88:af:e9:e8:68:5c:2e:7e:cd:d4:3a:22:
ea:69:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:21 2026 by rpki-client