Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u1L3ZB09RwCRuaF5N3Pftk1WENc.roa
File: u1L3ZB09RwCRuaF5N3Pftk1WENc.roa (raw, json)
Hash identifier: ObicshZatZNuYv7v3v/Y9aFvSMebPDg/sFZYQqyt+YE=
Subject key identifier: BB:52:F7:64:1D:3D:47:00:91:B9:A1:79:37:73:DF:B6:4D:56:10:D7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A15F9B6BA0073882E2CADAF47FE243FCD0
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u1L3ZB09RwCRuaF5N3Pftk1WENc.roa
Signing time: Wed 21 Oct 2026 17:56:23 +0000
ROA not before: Wed 21 Oct 2026 17:56:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 109.122.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:9b:6b:a0:07:38:82:e2:ca:da:f4:7f:e2:43:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 21 17:56:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb52f7641d3d470091b9a1793773dfb64d5610d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:16:a0:4e:06:0d:c2:7e:cf:43:b1:21:05:
9c:7e:00:f8:aa:96:af:6a:f6:01:f3:d5:b6:4d:c0:
94:1f:85:ac:c9:dd:dd:9d:95:27:e9:90:05:28:de:
f0:9c:a8:d9:b9:9d:bf:09:36:26:fd:2b:27:80:b7:
bb:5e:57:cc:37:5d:07:ba:b1:31:8c:46:a5:8a:fb:
6d:d2:b0:7c:bc:7f:df:ae:05:b6:26:30:52:94:d9:
85:a5:5e:f1:da:f4:ad:39:8f:29:cb:94:4a:02:59:
0e:55:5e:2a:1f:be:40:64:e2:f5:1b:f1:95:85:3b:
d0:a1:79:82:3b:6c:b9:f4:9a:de:07:db:b2:aa:ad:
89:f7:aa:b9:91:d6:cb:70:ab:39:39:f5:a4:00:c6:
9e:39:39:ce:fc:88:65:e5:15:f1:e1:bb:2d:b3:01:
3d:e7:06:7f:9e:a6:41:bd:1c:40:23:3a:fc:b5:18:
06:82:e9:93:72:8f:e1:2c:55:20:42:4f:21:c9:5e:
80:2c:8b:25:8d:40:2c:ea:0f:be:72:52:b4:ac:a4:
48:e6:39:92:04:c0:5c:ca:c5:aa:67:f8:19:1a:d7:
bc:bc:97:9a:f9:63:d0:45:56:00:9e:1a:f3:b8:48:
cd:29:91:8f:7e:f4:e5:90:e4:1b:2e:82:0f:22:af:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:52:F7:64:1D:3D:47:00:91:B9:A1:79:37:73:DF:B6:4D:56:10:D7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u1L3ZB09RwCRuaF5N3Pftk1WENc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.43.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d1:03:ad:89:d1:cf:f0:47:93:dd:03:30:a9:9d:d8:8b:cf:
50:8f:b5:7b:c3:d2:03:5d:66:3f:48:5d:cf:86:a6:a1:44:ea:
1a:5e:c9:c4:14:70:b1:ff:a8:97:5b:ab:7d:01:e9:fb:ae:5c:
28:6b:8b:a4:7f:63:af:9b:0c:b3:56:5f:30:44:cc:a9:22:28:
de:f2:37:7b:0c:41:52:fc:ba:e9:65:1c:7a:4b:69:a8:7e:4d:
1e:44:2d:bd:32:c8:12:6d:c4:62:bd:4a:62:38:ee:04:43:b4:
fd:b2:be:b0:dc:dd:12:85:9d:1a:0e:bd:08:30:e7:91:dd:1f:
40:10:c9:29:fe:fa:e9:27:1b:9e:80:c3:94:9d:83:14:e2:1f:
59:83:b8:99:0d:bf:f4:69:0b:74:61:93:84:23:cd:0f:53:25:
a2:dc:9c:da:ba:0e:79:dc:57:ce:3d:1f:9b:aa:05:d4:41:2c:
92:dc:3b:19:ad:dc:8f:02:c5:69:86:b7:c2:09:55:73:04:7e:
57:35:b3:b1:63:f1:56:17:bd:ea:44:af:b6:94:03:62:26:39:
54:12:60:8b:44:99:77:13:14:0e:ea:23:72:31:73:ae:77:3c:
b9:bd:9d:6e:79:42:e3:ce:90:44:81:cc:8f:9f:79:62:77:26:
e4:ea:6b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:07 2026 by rpki-client