Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/DrWxXEGqKdCg_bMpj7mFytV80zo.roa
File: DrWxXEGqKdCg_bMpj7mFytV80zo.roa (raw, json)
Hash identifier: dP86XBPHaAoqQNwxV0o6d90y7+jj5lB7qCLca45BHlY=
Subject key identifier: 0E:B5:B1:5C:41:AA:29:D0:A0:FD:B3:29:8F:B9:85:CA:D5:7C:D3:3A
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01A13E0F9E0F87490AAE956C74446C715F8A
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/DrWxXEGqKdCg_bMpj7mFytV80zo.roa
Signing time: Thu 15 Oct 2026 05:36:13 +0000
ROA not before: Thu 15 Oct 2026 05:36:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 80.46.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:0f:9e:0f:87:49:0a:ae:95:6c:74:44:6c:71:5f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 15 05:36:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eb5b15c41aa29d0a0fdb3298fb985cad57cd33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:f4:45:95:bb:85:c9:01:cd:e2:ee:70:7d:
3a:0b:0c:34:72:87:80:77:9b:f9:56:31:d5:1e:3b:
ff:85:55:90:20:8b:91:85:ec:d0:c6:a5:7b:aa:b2:
b8:0f:2f:d4:5a:af:af:f8:98:4e:83:0c:74:79:49:
f6:2f:aa:33:f0:03:d9:1c:20:31:bd:6e:2b:76:ee:
0e:16:96:9a:4c:26:f6:68:82:3d:d7:2c:52:e9:ed:
7a:5c:a8:2a:5a:b0:03:ac:de:a9:eb:42:ec:5f:38:
d7:d8:99:78:0b:5f:e4:b2:3a:1f:70:28:fb:14:68:
61:88:2b:29:1b:bd:11:f1:ca:1d:c7:a0:b5:5d:af:
9d:31:99:0f:35:c9:e0:bc:bf:0f:b9:41:a3:8b:0f:
c5:cb:ef:e0:78:c6:e8:ac:43:23:37:52:44:ec:f6:
3d:55:24:c8:fd:f4:95:92:7d:76:56:98:95:a4:d6:
17:05:39:4e:a0:91:4c:5b:68:5e:ed:60:e2:b5:a7:
bc:68:87:23:55:94:a7:cc:e9:92:e5:c5:50:8a:e6:
ed:e7:52:d7:c8:09:a4:6d:51:7c:bb:63:8a:ff:47:
41:a1:02:6d:1d:f0:6d:e3:a9:e2:53:c0:c7:67:a9:
79:8f:7d:88:28:c8:6c:2d:13:60:09:18:1f:bd:3c:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B5:B1:5C:41:AA:29:D0:A0:FD:B3:29:8F:B9:85:CA:D5:7C:D3:3A
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/DrWxXEGqKdCg_bMpj7mFytV80zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.46.139.0/24
Signature Algorithm: sha256WithRSAEncryption
51:14:64:2a:07:40:f9:63:54:57:43:34:e4:dd:0b:0f:a9:0d:
67:08:25:44:c8:21:01:49:c2:79:71:1a:96:9c:fb:89:fb:85:
fe:36:71:51:9b:34:d2:0d:1f:c7:f9:13:50:00:23:8e:41:44:
a1:3d:4c:49:fc:ce:44:33:a9:06:00:de:6b:81:df:65:94:1a:
0b:c4:d9:e2:77:d6:39:35:30:22:1c:bd:42:a6:aa:a2:81:09:
9b:15:e9:1d:56:0e:24:dc:be:97:c5:6d:4e:14:98:35:a3:9c:
01:4a:6a:57:7b:e1:88:69:a5:a2:db:0f:e8:8f:d4:11:51:4d:
18:55:85:f9:46:2e:ed:a9:46:8e:19:f2:79:64:bc:37:2a:71:
ee:ca:63:94:f3:73:15:27:6e:64:77:e8:7a:76:77:30:f9:6e:
dd:26:e0:c3:2b:a1:55:e4:e0:b3:6b:6e:7e:44:94:c8:88:9a:
ca:f2:49:8a:69:95:bc:b3:56:14:5e:aa:c9:2f:f6:74:c1:5b:
67:8e:5f:45:3f:17:5a:7a:8f:ad:9c:02:a9:72:c0:fd:b9:7a:
2d:2b:2e:9e:86:15:62:fa:34:c5:dc:fb:26:0c:1e:21:33:ec:
97:f7:88:54:73:f3:2c:9c:7c:4d:86:4e:38:58:35:24:ff:be:
2c:87:03:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:32:54 2026 by rpki-client