Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ALz4VJ49IKYJ1xBMT2oqrLnskso.roa
File: ALz4VJ49IKYJ1xBMT2oqrLnskso.roa (raw, json)
Hash identifier: r+MiDWVAjxFYOGEWebbDByQAAKndwyba/ZZVnzqLqKs=
Subject key identifier: 00:BC:F8:54:9E:3D:20:A6:09:D7:10:4C:4F:6A:2A:AC:B9:EC:92:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A1637050708FA0D14DDF261592374F216C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ALz4VJ49IKYJ1xBMT2oqrLnskso.roa
Signing time: Thu 22 Oct 2026 11:47:47 +0000
ROA not before: Thu 22 Oct 2026 11:47:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268860
IP address blocks: 87.120.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:70:50:70:8f:a0:d1:4d:df:26:15:92:37:4f:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 22 11:47:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00bcf8549e3d20a609d7104c4f6a2aacb9ec92ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:f0:ce:ba:93:fa:af:f5:0f:65:12:13:2c:
33:d5:ef:41:18:8f:f0:94:51:39:55:1d:50:2d:72:
3a:9c:7e:32:2c:60:61:6a:21:23:d1:08:55:b9:a6:
55:69:59:91:fb:91:1d:91:16:ad:6a:95:94:05:8c:
d4:ef:38:82:0d:c7:aa:4e:a6:9c:5c:c0:b1:99:c4:
04:c2:b9:61:a3:f5:7d:55:d1:3c:87:3b:ed:15:3b:
98:b4:c3:a5:c0:72:63:f5:13:4f:19:1a:0b:14:76:
34:84:22:c2:d4:0e:58:8c:57:39:71:d3:b8:f7:ae:
25:88:05:d3:12:d4:f8:10:e7:19:bc:25:2b:92:8f:
f5:05:34:6a:8e:10:8e:9e:d6:62:29:fc:2b:e3:75:
fe:6c:f5:13:46:1b:61:01:49:98:b7:c3:bb:36:70:
1f:3c:4e:4e:2e:8b:eb:8b:68:23:79:7d:d3:03:c6:
b3:bc:dd:e4:8c:26:43:78:ce:62:31:81:30:05:72:
3a:d8:3f:d5:4c:a5:d7:23:c9:5f:a5:9d:95:a8:ef:
14:72:a5:0f:16:c6:23:fb:86:33:52:34:8a:69:b8:
6f:66:98:85:ec:bd:0c:87:8c:e6:9b:7b:82:66:3d:
5f:68:16:8d:81:7a:9b:eb:21:ca:17:2b:24:60:c5:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BC:F8:54:9E:3D:20:A6:09:D7:10:4C:4F:6A:2A:AC:B9:EC:92:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ALz4VJ49IKYJ1xBMT2oqrLnskso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.130.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1a:11:c2:8c:cf:74:49:9a:b3:1f:23:6b:42:12:be:8b:f0:
5f:a9:1c:b1:5b:e4:c2:3e:17:5b:b6:e0:6d:d2:e2:9a:32:c0:
43:a5:3c:96:3b:5e:e8:56:f4:60:f0:1e:d2:ae:f6:46:c2:0a:
6c:00:2a:a6:ff:5b:0e:8c:e5:3d:72:89:06:4f:0f:03:55:16:
e3:76:70:a6:a5:d6:4e:d2:f4:c7:c0:06:57:24:a6:30:cf:18:
ef:5f:1e:0c:75:ba:4f:69:b2:c8:a9:42:6b:3a:46:45:37:7d:
2a:2e:a5:21:62:fb:53:3d:25:d8:3f:7d:26:cb:4e:8f:96:4b:
12:de:57:6b:2d:78:db:41:68:d4:f0:74:2b:67:bf:25:47:3e:
ed:28:b3:3b:cc:98:cd:73:82:60:3f:c8:fb:04:c1:5d:d0:c0:
4a:d9:44:10:a4:2f:7d:d6:1e:af:88:e5:84:48:fe:74:60:1d:
9b:35:df:92:37:0b:8d:9f:10:4d:92:8b:ca:5f:47:ff:60:bb:
98:14:1f:c6:36:7a:e6:32:a1:75:46:ff:c3:41:bd:56:87:38:
5c:b3:8c:f4:8e:93:1e:eb:31:04:63:85:ac:fc:80:b1:a2:30:
9e:45:3a:2d:18:b7:63:70:ae:15:b5:d5:cb:4a:9a:cf:62:08:
96:a2:5b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:52:21 2026 by rpki-client