Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/r65CtO4n3q3SRRjk6bylneiNA8c.roa
File: r65CtO4n3q3SRRjk6bylneiNA8c.roa (raw, json)
Hash identifier: M+UXBrWeUxzGrr1Lp3fpORybLRapxULqqPZ/kLQKoss=
Subject key identifier: AF:AE:42:B4:EE:27:DE:AD:D2:45:18:E4:E9:BC:A5:9D:E8:8D:03:C7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019FFCD1ADB8C3A98D09D2B26F133BA2A1AD
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/r65CtO4n3q3SRRjk6bylneiNA8c.roa
Signing time: Thu 13 Aug 2026 20:30:27 +0000
ROA not before: Thu 13 Aug 2026 20:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20546
IP address blocks: 203.56.112.0/23 maxlen: 24
203.56.114.0/23 maxlen: 24
2a14:3e40:110::/46 maxlen: 46
2a14:3e44:114::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:d1:ad:b8:c3:a9:8d:09:d2:b2:6f:13:3b:a2:a1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Aug 13 20:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afae42b4ee27deadd24518e4e9bca59de88d03c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:2b:a6:ae:92:e9:a5:d2:c7:f3:bd:4e:c5:
e0:6c:6a:e3:c3:28:f1:a8:47:ae:3e:e6:84:e9:e1:
55:22:9f:57:bc:62:32:b5:78:45:b7:5e:40:ba:5b:
72:68:bf:92:45:13:6c:ff:e2:c8:f5:8b:ae:5a:46:
bb:94:62:db:57:69:05:a1:21:10:c5:f7:36:09:a8:
71:de:b3:b4:0b:3f:f6:f3:7d:30:9e:93:d7:d8:d6:
12:36:bf:af:b4:9b:b0:19:a6:02:45:04:53:de:ea:
98:40:3e:94:8d:f5:71:d2:d8:cb:c3:da:a8:ce:c4:
ec:10:58:52:18:10:a9:66:81:32:f0:37:62:62:7b:
7d:84:d7:a4:ea:cf:2d:e7:a7:f5:b6:83:ab:52:29:
43:0a:b1:5c:c9:6f:b6:97:b2:85:7e:2c:ee:2a:74:
58:c6:79:82:b5:f3:cc:d2:aa:17:e0:f3:6c:26:3c:
73:0d:9e:4b:4c:9a:aa:5f:63:0f:ca:75:93:d9:aa:
f9:33:77:d7:c0:54:af:41:29:a4:10:b6:31:81:5e:
3c:c0:22:7f:90:85:be:95:d5:3d:47:68:b0:94:79:
0c:83:78:db:3b:ee:ff:2b:71:7e:58:a9:70:db:23:
0e:28:4c:63:21:94:c8:3a:88:b2:d7:f3:2d:dc:2d:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:42:B4:EE:27:DE:AD:D2:45:18:E4:E9:BC:A5:9D:E8:8D:03:C7
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/r65CtO4n3q3SRRjk6bylneiNA8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.56.112.0/22
IPv6:
2a14:3e40:110::/46
2a14:3e44:114::/46
Signature Algorithm: sha256WithRSAEncryption
2a:a4:95:02:c0:47:a0:e3:22:aa:55:9d:4c:21:25:c1:58:8a:
75:46:38:ae:ea:df:d2:70:f0:cb:d7:45:d7:27:f8:6e:8f:43:
20:51:5c:87:b4:c3:b6:27:77:48:78:c2:b7:a2:06:9c:db:d0:
26:3c:19:a8:96:f0:e4:51:3b:ec:88:42:33:b9:f9:c3:ea:23:
a9:d7:0b:a6:4e:b7:79:b6:db:c5:a8:ab:81:af:7b:b2:39:83:
12:86:0b:3b:a0:32:1c:f3:b1:36:17:12:37:5a:f1:39:c3:37:
59:54:e1:8e:e8:22:ee:7e:e1:2e:9e:60:96:40:eb:62:2c:74:
d3:21:60:b4:e2:98:eb:cd:7e:1f:93:e2:46:2c:de:e3:a6:2b:
16:a9:14:9c:f7:57:c3:59:00:5a:3f:bd:71:d9:ac:bf:bc:8b:
6f:d8:15:dc:ec:40:30:ff:aa:3a:09:7d:7f:97:39:00:55:ec:
3b:26:c7:5c:f2:9e:80:8a:74:f8:04:05:92:a7:21:e4:2f:bb:
bf:e6:b5:ac:3b:9e:e9:00:8f:63:9c:b8:a6:69:dc:2a:0f:13:
9c:6e:95:df:58:40:e5:67:8e:cf:ba:93:87:fe:2d:22:5a:e7:
43:bc:c1:41:55:96:49:75:95:9c:94:03:d1:eb:2b:77:f7:06:
a3:6c:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 21:02:18 2026 by rpki-client