Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/pG2sKf3xuHuM8xtzhsHbPSWE62A.roa
File: pG2sKf3xuHuM8xtzhsHbPSWE62A.roa (raw, json)
Hash identifier: H3slC4OH4GYTNcwDC9NM9YIa3K9OuJgjITaCu3V8Jmw=
Subject key identifier: A4:6D:AC:29:FD:F1:B8:7B:8C:F3:1B:73:86:C1:DB:3D:25:84:EB:60
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01A162F68CB89DDA6CBE5D5600CA09715316
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/pG2sKf3xuHuM8xtzhsHbPSWE62A.roa
Signing time: Thu 22 Oct 2026 09:34:47 +0000
ROA not before: Thu 22 Oct 2026 09:34:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 77.111.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:f6:8c:b8:9d:da:6c:be:5d:56:00:ca:09:71:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Oct 22 09:34:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a46dac29fdf1b87b8cf31b7386c1db3d2584eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:ab:64:6c:89:1b:8a:e7:0c:9a:3d:80:aa:
ae:3b:cd:da:ab:d8:14:d0:0e:46:96:3f:e9:a1:a9:
05:1b:f8:54:bf:53:6c:56:2b:7c:f8:3c:8a:9d:10:
fb:8a:1f:45:eb:af:9d:5c:63:8c:ff:3e:81:7b:90:
d9:66:1e:e3:50:5a:1f:13:01:e9:58:76:6e:1b:ef:
b3:75:65:f3:35:55:20:7d:f0:6d:87:c1:8c:33:0d:
89:e0:c1:89:26:ea:ff:d4:11:61:de:d4:c5:ea:df:
89:4f:f3:80:b8:4e:ae:48:f6:db:4e:7d:65:66:eb:
ba:48:ff:bc:22:fe:c6:d6:b6:36:30:0a:6f:7d:9c:
2d:70:2a:ec:1e:64:25:c2:65:67:cf:47:d1:a3:e9:
fe:6f:df:f2:c3:05:64:f0:43:26:b2:b3:8d:0a:3c:
e1:24:e8:e3:e4:36:8c:75:3d:8a:bf:e8:c4:61:40:
fe:54:52:e6:6e:af:59:5a:8b:9f:8f:c3:95:57:20:
f6:40:ac:78:8d:3d:7e:73:92:a1:df:4e:96:07:ad:
ef:81:c6:aa:cd:4d:ce:5b:3e:00:6c:93:2c:ba:a4:
dc:5d:ec:12:62:24:95:8c:fd:a0:0b:ba:a4:6e:4c:
2c:09:c4:12:4d:97:e6:f7:77:ad:b5:0c:af:60:63:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:AC:29:FD:F1:B8:7B:8C:F3:1B:73:86:C1:DB:3D:25:84:EB:60
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/pG2sKf3xuHuM8xtzhsHbPSWE62A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.84.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:d4:52:74:77:0e:51:35:8a:19:2c:24:3e:f1:38:48:4d:2d:
22:a1:ac:16:c9:0a:1e:c9:7e:56:e9:63:e1:31:16:03:15:75:
d9:9b:e5:0b:f9:a6:03:4d:34:b1:a4:35:69:62:09:80:72:db:
39:de:76:42:8b:69:12:8d:b8:45:dc:80:a7:42:0e:2b:c2:ff:
b3:0c:30:68:6f:c5:69:fa:b7:9e:b1:2d:73:1e:57:7b:10:ba:
28:27:5e:1b:68:35:55:89:a0:a5:18:ea:4c:07:9e:fd:58:8b:
8a:b2:2d:a9:85:ce:89:24:3b:99:3b:54:69:a8:f9:9b:52:41:
46:81:ac:50:bd:43:bb:af:3f:06:b3:a2:96:af:2f:8a:f6:a5:
7c:fb:a6:fe:c5:ad:c3:d6:2b:52:a0:a4:42:61:2f:3c:34:44:
de:55:71:92:07:19:01:fc:c2:9e:83:dd:98:f6:5d:e1:87:ce:
d6:ab:2c:6b:31:11:c3:45:bd:c8:da:d8:2a:6b:ce:0b:06:e4:
f1:dd:1f:64:35:8d:18:68:d7:9f:a8:f8:97:d7:21:7d:ef:e3:
d2:e3:fa:aa:8a:c3:23:7a:86:f0:93:e1:e3:0b:11:cc:b1:fd:
d9:24:4d:28:d7:19:74:9d:65:fc:f7:55:2f:25:e9:fe:27:70:
04:1a:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:49:28 2026 by rpki-client