Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/0AHImsbMetIR9BMrmd3qpDL6OSc.roa
File: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (raw, json)
Hash identifier: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=
Subject key identifier: D0:01:C8:9A:C6:CC:7A:D2:11:F4:13:2B:99:DD:EA:A4:32:FA:39:27
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019C476820AC03C49BD97E6C1C2F7AEDC181
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/0AHImsbMetIR9BMrmd3qpDL6OSc.roa
Signing time: Tue 10 Feb 2026 11:55:32 +0000
ROA not before: Tue 10 Feb 2026 11:55:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 146.247.114.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:68:20:ac:03:c4:9b:d9:7e:6c:1c:2f:7a:ed:c1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Feb 10 11:55:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d001c89ac6cc7ad211f4132b99ddeaa432fa3927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:93:c6:29:20:17:dd:e5:19:4a:20:46:98:
6d:1e:b7:df:9e:a1:ed:58:71:91:4c:88:0c:3a:7b:
aa:66:c1:38:2f:5c:de:c2:39:43:da:2d:c2:41:f3:
56:e7:ea:84:cf:1f:f7:24:18:6d:0f:49:6b:c7:cb:
47:d7:42:e5:c1:25:86:ff:0f:a4:54:bb:9f:06:e0:
76:41:d6:07:b2:b2:ba:2f:7a:72:81:f6:27:71:fd:
77:3e:a9:d8:04:6d:4b:90:59:21:1b:fc:ff:2e:bb:
33:d1:26:d3:c7:10:d7:28:b5:d5:d1:f5:a1:24:1a:
be:d6:60:12:12:6b:71:09:cc:34:8d:3d:ac:12:6e:
b4:bf:d7:1f:5a:be:bc:9b:52:aa:fd:57:18:da:82:
5e:08:17:e2:8f:79:13:ab:c4:87:da:6c:ec:ca:5b:
d3:32:82:9b:41:88:0b:26:bc:1a:91:e3:7d:5b:92:
25:74:10:f8:80:75:1b:1d:71:fd:c0:9d:a7:34:c3:
48:96:54:fd:3e:8c:29:45:d8:c4:ea:ce:e2:d6:7b:
ee:b0:64:80:02:98:6f:b4:61:af:57:b6:39:fa:3c:
11:6f:e7:fb:41:53:6b:69:45:c3:71:d0:86:a4:28:
c9:e7:ba:b0:b3:1d:de:ff:59:cd:eb:9a:37:6f:32:
f0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:01:C8:9A:C6:CC:7A:D2:11:F4:13:2B:99:DD:EA:A4:32:FA:39:27
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/0AHImsbMetIR9BMrmd3qpDL6OSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.114.0/24
146.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:78:c8:b8:65:56:c6:c2:2e:ba:56:fb:21:0d:30:60:ce:4d:
cf:37:b2:13:c3:a9:58:6a:eb:ea:ad:b0:9f:61:b0:f0:f3:5f:
f6:f9:4c:19:1d:e8:ce:ba:45:78:21:51:4b:4e:c8:b4:b4:73:
bb:e0:40:f4:e2:18:5e:a7:86:ee:fa:ed:a0:21:a9:93:3b:6f:
76:f1:98:46:ec:8b:23:69:5c:26:17:75:b9:93:51:c2:6e:0a:
e2:d5:35:06:06:8a:dd:36:4f:2a:21:1a:af:5f:65:af:2a:62:
a5:97:11:fa:fa:f4:ba:f0:4c:55:5e:c8:3e:9d:91:5c:03:61:
77:50:2b:7c:d0:d9:3d:68:1d:18:2b:41:00:cd:95:ca:79:e9:
30:7f:22:92:ee:e8:fe:b1:0f:eb:a9:df:b3:69:23:61:3b:8d:
a5:20:5f:58:ce:c7:5d:39:63:ca:e1:8d:08:4e:c7:c4:50:47:
20:08:af:46:51:74:17:4f:6b:0c:38:f6:39:7f:de:de:b5:ca:
21:c3:0a:41:80:3c:90:e3:71:ca:46:d3:a6:3c:0c:ba:2a:71:
69:49:dc:35:80:a7:f0:ec:e1:02:c2:7f:bd:17:97:23:12:ca:
2d:34:bf:5c:15:2a:dd:5b:ee:15:78:a7:73:fa:8d:de:66:65:
c3:2d:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:57 2026 by rpki-client