Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/b3EjulfVBnsiBubqJxsogKymvIA.roa
File: b3EjulfVBnsiBubqJxsogKymvIA.roa (raw, json)
Hash identifier: ftuw80HWBJMK+QGd+FWrStCKOHQwwo14+v4iOrbyt/A=
Subject key identifier: 6F:71:23:BA:57:D5:06:7B:22:06:E6:EA:27:1B:28:80:AC:A6:BC:80
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A13B41D8017F176B7870473ECB7397A4CD
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/b3EjulfVBnsiBubqJxsogKymvIA.roa
Signing time: Wed 14 Oct 2026 16:32:13 +0000
ROA not before: Wed 14 Oct 2026 16:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218410
IP address blocks: 150.40.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:41:d8:01:7f:17:6b:78:70:47:3e:cb:73:97:a4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Oct 14 16:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f7123ba57d5067b2206e6ea271b2880aca6bc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:b9:3f:89:3b:da:64:ad:27:91:c2:a3:4c:
3c:f0:70:8d:ef:d9:ca:22:4c:32:80:5f:3d:7b:06:
c9:ba:b2:c9:2b:8c:ce:7f:ee:cf:d4:e2:dd:57:e8:
c3:ab:6c:24:67:1c:2a:cd:e7:76:43:ad:37:7c:3c:
e1:92:29:54:c2:00:1d:97:7a:e5:f6:de:0e:bd:ec:
9d:85:00:ad:cd:40:f3:71:f1:a5:74:9f:ed:e6:89:
d2:9f:69:b2:bb:f7:03:f7:c7:00:a6:a3:b2:55:31:
d2:cd:fb:28:3c:c3:db:1a:c9:db:48:fb:34:91:e3:
2e:1e:16:a0:4c:4f:04:44:5b:9b:a9:10:2f:6a:7a:
5d:99:36:c4:74:49:40:e7:18:f0:1c:4d:8c:bb:f9:
ec:3d:63:39:96:2a:ba:61:0e:7b:76:e0:09:93:3a:
91:16:d7:37:3e:90:ed:ee:fe:1f:95:fc:28:02:f1:
08:91:f2:24:25:7d:77:07:1d:cd:f9:9b:16:18:1c:
28:f4:13:31:82:e3:df:ac:5e:c2:7d:79:8a:73:ea:
5b:a0:e1:a0:a9:32:74:45:56:c5:e8:a8:ea:42:58:
36:e5:24:1e:21:6c:34:80:28:f4:d0:aa:07:c2:21:
a4:f9:41:24:d1:e3:08:62:7b:8e:db:35:d1:87:1c:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:23:BA:57:D5:06:7B:22:06:E6:EA:27:1B:28:80:AC:A6:BC:80
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/b3EjulfVBnsiBubqJxsogKymvIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:70:ac:91:5d:c3:28:41:f4:fd:81:01:3d:ff:00:1d:29:e4:
93:d5:93:7b:09:87:e6:2f:a6:d2:cb:d2:f4:7a:2f:32:a4:7d:
95:08:4e:3b:61:18:26:12:27:8f:38:e0:bc:a3:d2:2d:02:b6:
e4:d3:d5:e0:e3:e4:ad:63:6f:52:5f:80:68:8f:f8:9a:80:ea:
ca:86:be:12:db:29:38:59:1b:5e:20:aa:c0:09:52:5a:71:cf:
c6:18:1f:72:85:2a:6e:0f:93:fd:72:f8:92:86:84:d4:ff:5f:
b0:f7:06:12:72:bd:9f:40:08:2f:f4:66:63:69:91:c7:cb:4c:
5e:97:be:cf:95:5e:f3:22:5a:f8:f0:d0:19:51:10:aa:f2:f5:
a6:c5:74:90:78:b9:f6:78:6a:01:84:34:46:a2:2a:1f:ee:43:
00:5e:6e:a4:62:4b:b8:53:0d:c1:c5:47:b3:97:07:4c:f2:82:
fa:25:5f:2e:22:7d:84:7c:33:77:a6:37:0b:cc:02:02:8d:f1:
89:66:09:ba:97:2b:fe:0d:42:e3:65:93:3b:83:1b:6f:8d:70:
9a:5f:26:fe:ab:d7:bc:93:ae:e6:b8:8d:ca:a8:11:d8:76:5b:
8d:fb:26:16:0d:52:47:65:a0:5a:37:58:7c:04:0a:c4:01:9b:
c4:f7:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:33:47 2026 by rpki-client