Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/1chukKiBeqKubLtwP0rGk210lgU.roa
File: 1chukKiBeqKubLtwP0rGk210lgU.roa (raw, json)
Hash identifier: cN1FHXnQyu4jURF/hMvOqKc+36+mh5q51SMzdcXq+P0=
Subject key identifier: D5:C8:6E:90:A8:81:7A:A2:AE:6C:BB:70:3F:4A:C6:93:6D:74:96:05
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A13033FE977C8E281D1BE84BDBC8258C14
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/1chukKiBeqKubLtwP0rGk210lgU.roa
Signing time: Mon 12 Oct 2026 13:01:16 +0000
ROA not before: Mon 12 Oct 2026 13:01:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218427
IP address blocks: 2a0a:87c0:fff9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:33:fe:97:7c:8e:28:1d:1b:e8:4b:db:c8:25:8c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Oct 12 13:01:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5c86e90a8817aa2ae6cbb703f4ac6936d749605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:22:5e:b0:42:f3:77:b1:ff:cd:27:bf:ae:
60:b6:87:93:a5:94:99:48:72:0e:c5:84:a7:3e:83:
55:3f:b0:fd:2d:14:8b:bb:b0:8b:ca:b5:10:bd:db:
69:bd:8f:bc:48:82:aa:5e:bf:90:df:ed:af:b0:85:
d6:1c:47:58:e6:5f:f4:2e:80:60:c1:83:5a:c5:99:
bb:ca:14:b7:60:a4:b6:ae:f1:c8:35:e2:12:fa:da:
ed:4f:96:cc:c4:39:cb:36:ed:4f:5a:cb:d3:82:67:
23:ff:73:6c:8f:54:93:66:20:92:2d:58:7d:3d:c1:
5b:e3:1f:6f:4a:8b:df:0f:4e:42:c2:2b:d7:0e:f4:
e2:52:09:a6:45:56:7e:32:4a:ad:c3:a1:1f:8f:06:
15:b8:e7:02:3c:e7:ed:bd:07:e1:21:68:5d:62:94:
ac:60:00:d6:7b:f4:ce:f6:3f:a9:55:34:af:04:71:
79:0d:74:2e:d8:be:af:56:fe:eb:15:e4:98:58:7a:
a5:a6:89:ae:df:76:cf:25:85:9e:6e:9c:8a:74:a8:
2c:0b:45:3a:e9:0f:90:f4:50:33:d3:2a:9d:17:c1:
f7:d4:01:68:11:72:b5:0f:f5:b9:2f:fb:ac:f6:7c:
9a:4e:53:9b:ae:97:84:56:f6:3d:c2:0b:dd:8e:01:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C8:6E:90:A8:81:7A:A2:AE:6C:BB:70:3F:4A:C6:93:6D:74:96:05
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/1chukKiBeqKubLtwP0rGk210lgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fff9::/48
Signature Algorithm: sha256WithRSAEncryption
47:78:e1:32:43:67:cb:b0:59:84:0a:05:c5:3a:34:72:72:95:
57:de:ca:74:e3:c7:d7:b2:56:10:58:37:15:96:38:1c:87:29:
e4:5f:d6:ff:37:ba:46:f4:63:9d:cf:76:d4:ef:db:ea:55:af:
64:14:51:f6:9a:f1:13:73:31:2b:58:74:3d:9f:ff:e7:fb:a9:
0a:db:39:ba:e2:df:b3:0b:de:32:a1:f8:8d:12:df:a9:aa:96:
14:b4:f0:63:23:8b:89:55:ec:df:dd:af:1f:84:0f:37:59:5d:
71:f3:fc:73:30:7c:10:06:e6:56:1b:66:5d:da:a5:b8:f6:95:
28:92:d9:f1:1c:5f:5e:01:52:d0:5e:f9:1f:b2:96:1d:ee:f6:
49:ea:82:89:49:da:4f:60:b2:5b:c5:53:68:e1:88:04:4f:08:
1b:f2:d8:e2:da:d3:ab:7f:0a:44:f5:ef:23:46:07:f2:8f:0d:
de:25:5c:6b:21:07:88:82:55:4f:f6:bc:93:52:96:8d:07:6b:
2c:c3:05:ac:47:19:cb:70:24:be:cf:f5:92:ac:66:71:fe:27:
9d:11:4c:6c:2e:65:51:db:ba:bb:c6:4b:e8:b2:a2:8c:89:ec:
9e:99:3e:b1:89:0f:cd:db:66:12:3e:01:2a:84:dc:2b:32:fa:
d2:84:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 11:51:13 2026 by rpki-client