Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/idX57WLplHepMMWakDsba7errkg.roa
File: idX57WLplHepMMWakDsba7errkg.roa (raw, json)
Hash identifier: NkQy1xhiDTBZirJF7A0Hy42dcPjqHqJkT8i7GaPQw1Y=
Subject key identifier: 89:D5:F9:ED:62:E9:94:77:A9:30:C5:9A:90:3B:1B:6B:B7:AB:AE:48
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01A15E0896C326ECA3820DF61BAACB5230DA
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/idX57WLplHepMMWakDsba7errkg.roa
Signing time: Wed 21 Oct 2026 10:36:23 +0000
ROA not before: Wed 21 Oct 2026 10:36:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 2a00:15c8::/29 maxlen: 29
2a00:15c8:1083::/48 maxlen: 48
2a00:15c9::/32 maxlen: 32
2a00:15c9::/40 maxlen: 40
2a00:15cc::/40 maxlen: 40
2a00:15cd::/40 maxlen: 40
2a00:15cd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:08:96:c3:26:ec:a3:82:0d:f6:1b:aa:cb:52:30:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Oct 21 10:36:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89d5f9ed62e99477a930c59a903b1b6bb7abae48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:27:9e:df:19:08:8a:b3:7e:ec:2c:f8:18:
03:0f:d9:10:62:ad:9d:50:41:74:df:5a:df:70:ba:
f6:2f:8c:24:3f:a1:be:92:80:40:cc:65:b3:cb:ee:
e4:19:f3:2a:27:f2:6a:2f:0d:c6:03:d0:eb:90:da:
42:ce:65:d9:84:6c:0f:d5:8f:83:fd:1b:3e:10:83:
e2:90:f8:92:a4:55:2d:5c:7b:36:77:c6:a2:49:2a:
d4:a7:83:bc:a7:53:b9:ab:dc:5f:a3:28:bc:d4:af:
1e:b2:fb:3a:3b:54:d4:6b:86:55:eb:1c:06:44:71:
46:7f:18:7a:d9:6b:3f:31:e6:de:84:fb:85:f3:07:
63:c7:c9:47:5b:6c:eb:46:a1:df:1b:81:29:c3:25:
06:25:f0:8b:e6:de:f2:af:01:66:a2:54:fd:1b:f8:
cb:eb:ff:42:fb:1d:c7:15:3f:5c:76:90:f9:46:20:
81:cc:71:cf:1d:3d:68:b0:b8:c6:72:ae:0a:0e:74:
64:03:55:59:da:f6:a5:94:43:0c:e1:04:4e:d9:36:
f1:9a:36:21:d2:cf:75:01:b1:13:3d:11:a5:9e:f8:
16:f6:d0:a9:48:6d:26:7a:4e:a7:97:a4:ca:7a:49:
60:21:4c:28:5b:b2:ee:94:df:8e:b9:5f:4a:89:e1:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D5:F9:ED:62:E9:94:77:A9:30:C5:9A:90:3B:1B:6B:B7:AB:AE:48
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/idX57WLplHepMMWakDsba7errkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:15c8::/29
Signature Algorithm: sha256WithRSAEncryption
01:fd:38:0a:17:07:46:56:8a:44:0d:86:0c:ac:cf:2b:88:e7:
2a:38:a4:04:de:69:f2:82:9d:1d:79:0f:76:84:98:df:3f:3c:
74:64:78:0a:fd:75:5a:ca:cb:09:ad:3e:2d:ae:45:d4:d5:3c:
c0:32:1b:14:41:70:ba:a0:e7:66:85:97:d8:18:3a:af:6a:7f:
d9:6d:6f:f4:9f:e4:1d:9f:ca:ab:1f:c7:fb:10:f1:7a:e0:1e:
6d:2f:93:55:1f:30:85:4d:26:41:1a:60:45:9c:d0:5d:96:b0:
c8:38:07:5d:63:f0:2b:24:e2:e0:a8:38:f7:9b:47:74:1e:3e:
88:b0:64:6d:f9:e2:04:2c:2f:b6:f8:11:7b:19:64:66:61:69:
b8:a9:9a:8d:ae:f3:f5:b4:19:61:59:a1:09:33:a1:24:d0:90:
81:e2:8c:30:a7:15:62:f1:a1:40:4d:98:cb:ef:12:4c:83:b9:
32:15:2d:e8:e4:96:53:6c:1b:7a:58:6d:46:2e:d1:76:5d:c5:
04:de:26:69:11:60:55:59:93:7a:a2:db:11:47:35:f3:a8:7c:
c7:13:a3:c1:96:45:0c:7e:ae:cd:c0:9a:11:7f:68:86:0e:df:
3e:af:52:35:33:39:44:63:ec:bf:fc:0a:15:f6:a5:7f:24:7c:
df:e0:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:42 2026 by rpki-client