Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/laAtmxDLJutnaok9DPLD_9tW5nI.roa
File: laAtmxDLJutnaok9DPLD_9tW5nI.roa (raw, json)
Hash identifier: gMiIQavblmJ4WXXFs9hIWfn9a4q1d91AMdO/XEAQjKw=
Subject key identifier: 95:A0:2D:9B:10:CB:26:EB:67:6A:89:3D:0C:F2:C3:FF:DB:56:E6:72
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A178DC980BE86A2F3394F900E41F50FFCA
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/laAtmxDLJutnaok9DPLD_9tW5nI.roa
Signing time: Mon 26 Oct 2026 15:38:05 +0000
ROA not before: Mon 26 Oct 2026 15:38:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402510
IP address blocks: 37.235.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:dc:98:0b:e8:6a:2f:33:94:f9:00:e4:1f:50:ff:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Oct 26 15:38:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95a02d9b10cb26eb676a893d0cf2c3ffdb56e672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:57:16:4b:1c:2d:46:c8:18:95:e2:2e:c4:
d2:21:1d:d6:d9:55:7d:b7:02:76:cf:c5:ff:8f:2f:
4e:a5:ba:b1:34:9d:cc:d7:13:45:c8:75:0b:37:95:
6b:cd:8f:e3:2c:29:b3:ba:a3:7a:d8:2a:4c:10:ed:
e7:28:66:0c:5f:54:af:23:ce:69:7a:33:ea:dc:d6:
7c:c7:c0:0a:89:74:a8:80:5b:9b:74:1f:26:6c:a8:
ab:4e:40:7f:03:0b:93:86:ca:8c:1c:e2:82:6b:8e:
9a:e6:d8:65:9d:e9:b9:41:02:c2:31:a6:93:8e:9e:
a9:df:52:83:e3:3f:4a:74:74:7d:1a:90:44:ee:60:
55:09:6e:a7:a1:de:24:80:b7:ac:d1:00:9e:d0:20:
99:5e:e7:e9:ae:18:a2:ad:bd:5e:c2:66:4c:57:27:
7b:0b:0a:0c:49:51:5f:cb:71:89:09:ab:c9:c2:ef:
e3:14:21:56:cc:86:0b:b2:7a:3a:29:0f:fa:b0:fc:
7a:46:55:de:61:2b:65:29:47:45:6d:af:19:2a:32:
5a:30:67:be:60:3c:25:ce:c0:19:29:9a:0c:06:97:
59:a1:1d:ba:03:9b:86:68:ac:36:fe:35:af:2d:7b:
3a:00:23:e2:e2:d4:7c:fa:40:78:45:3e:ef:e8:7e:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A0:2D:9B:10:CB:26:EB:67:6A:89:3D:0C:F2:C3:FF:DB:56:E6:72
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/laAtmxDLJutnaok9DPLD_9tW5nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c7:ea:c7:93:72:1d:7e:38:b4:15:74:f6:c4:9a:f1:ab:95:
8c:3a:44:69:89:a4:9a:60:ca:db:38:ec:0c:4e:d1:f4:0b:5e:
ca:4f:22:6f:e2:a8:da:60:c9:83:8a:ab:db:15:94:bf:24:6d:
37:8e:91:17:f6:d6:cc:c0:fe:63:20:60:67:cb:0a:58:ee:cb:
a2:e3:f8:ce:75:f5:9c:6e:6d:1c:d5:5f:7f:d0:78:55:96:2c:
21:df:69:a2:ae:6a:8e:6b:df:91:79:83:aa:62:47:15:d7:6c:
5b:75:1d:6a:52:2c:cf:89:3b:42:2b:74:d7:68:aa:0a:56:02:
d2:4c:cb:28:cc:3c:e7:fb:69:65:a8:47:01:c2:7c:f3:6f:a1:
e2:c5:53:e7:be:a1:ee:d0:98:78:4e:63:3b:91:eb:5d:1f:a0:
f0:82:cd:9c:81:57:be:62:3e:86:23:d1:cd:f5:db:5f:62:4f:
7f:f5:a8:ca:21:9d:3f:3b:1a:21:53:39:b0:7b:a0:88:44:77:
b7:5a:b1:52:bc:ac:e1:18:a8:2f:ba:ef:c2:8b:79:f0:10:f1:
23:90:12:c0:55:61:bd:96:46:67:0a:94:45:68:5e:95:4e:1e:
78:12:48:78:db:5d:39:df:c2:2b:74:b2:94:8c:ee:ea:26:60:
1d:37:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 11:32:09 2026 by rpki-client