Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/l7e7DOM4EI6HBuhJzIAMSRuUDC4.roa
File: l7e7DOM4EI6HBuhJzIAMSRuUDC4.roa (raw, json)
Hash identifier: AgAoPzirDKTH09RNhlxmuJdCz+iT8p5/x3TcGE7DCNs=
Subject key identifier: 97:B7:BB:0C:E3:38:10:8E:87:06:E8:49:CC:80:0C:49:1B:94:0C:2E
Certificate issuer: /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial: 01A112F19A4319B68059928706BDF7D07A4D
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/l7e7DOM4EI6HBuhJzIAMSRuUDC4.roa
Signing time: Tue 06 Oct 2026 20:39:45 +0000
ROA not before: Tue 06 Oct 2026 20:39:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 2.152.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:f1:9a:43:19:b6:80:59:92:87:06:bd:f7:d0:7a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Validity
Not Before: Oct 6 20:39:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97b7bb0ce338108e8706e849cc800c491b940c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:07:c4:d0:4f:03:76:11:88:6a:79:3c:7b:
47:9c:50:fe:fe:2c:af:5a:c6:26:d9:83:a0:ec:96:
68:6d:c9:56:1a:01:7e:7a:32:a3:6a:56:4b:58:17:
4b:76:f9:44:68:18:92:ec:c3:45:76:ff:87:c7:14:
7b:3d:45:47:cd:55:6f:5a:be:bc:1b:0e:dd:d1:f5:
2c:53:24:96:3f:d0:0b:a4:c5:3c:41:bc:18:b0:56:
0d:76:2b:5b:77:63:32:2b:6d:0e:d4:c3:0a:81:32:
38:53:f2:3a:25:03:80:12:67:0e:58:a4:51:55:7c:
65:85:50:b6:e6:1f:56:3e:a4:c5:77:6f:43:61:48:
f9:c3:ad:78:84:65:ef:36:da:1f:17:39:e9:66:9e:
82:20:fb:8e:8b:29:31:a0:71:cc:b8:16:ef:aa:ec:
b8:9c:ea:11:84:ad:a6:bd:5f:77:97:ca:28:26:32:
51:88:88:41:1b:71:57:85:9a:7e:58:d6:e1:fc:a6:
e6:88:aa:5b:6f:2e:b7:d3:7c:8f:35:88:23:a4:2a:
61:9d:25:c1:70:29:b8:02:76:2b:e1:8f:7d:fa:7f:
c2:a6:23:df:06:a1:11:d4:16:59:3a:10:88:70:05:
56:03:e0:d4:57:c3:8c:89:d7:c6:8d:8b:3e:9b:51:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B7:BB:0C:E3:38:10:8E:87:06:E8:49:CC:80:0C:49:1B:94:0C:2E
X509v3 Authority Key Identifier:
keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/l7e7DOM4EI6HBuhJzIAMSRuUDC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.86.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f6:2c:fc:9d:08:23:c4:78:e7:b9:c7:01:5a:e7:aa:3e:09:
e0:5c:e2:c8:e3:c2:18:62:cb:54:88:a9:95:d0:0c:93:3f:f4:
44:83:0e:23:4b:70:49:da:69:21:63:4c:2a:db:c1:f7:a1:cc:
41:97:92:d1:ad:e1:b7:bb:ff:3f:26:24:c9:87:b9:7f:ea:cd:
d7:70:77:7b:c0:cf:ad:07:4f:07:8b:37:78:86:8a:0a:39:7f:
b4:44:9c:2e:4d:c9:af:21:ed:bc:d5:1c:f7:a5:67:49:3f:0f:
ee:7e:ee:bb:be:db:56:57:fb:bb:53:06:56:13:55:2d:2e:7f:
ef:59:b1:73:51:d5:26:6e:db:7c:85:32:01:2c:48:9c:ed:e8:
3d:a8:de:ce:e3:82:76:62:56:a2:ef:23:8f:01:f0:2a:d8:54:
7a:63:a0:1b:30:69:8d:e7:01:7d:41:8f:97:cc:fa:32:85:06:
bc:2a:d7:84:86:ec:26:b7:e3:42:e7:2c:80:27:06:82:43:27:
73:d6:c8:77:f6:81:11:ea:e6:ca:80:83:ba:af:b3:55:11:a3:
3f:d5:13:95:ec:ec:c7:2c:ce:aa:fa:d1:25:44:70:82:e9:9f:
ec:32:27:57:df:7d:2e:0a:fe:17:dc:83:b1:dd:48:e9:f4:c5:
31:f9:ed:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:11 2026 by rpki-client