Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/a1bVO0ckGyR5RAdUKb14doqmY1Y.roa
File: a1bVO0ckGyR5RAdUKb14doqmY1Y.roa (raw, json)
Hash identifier: DiKvMb/S5/tIEx2dVRhu5wKcRs0L0R0Ljnjm6cmc2r0=
Subject key identifier: 6B:56:D5:3B:47:24:1B:24:79:44:07:54:29:BD:78:76:8A:A6:63:56
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01A060956C6CEF7B9C509A50246742CD7AAF
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/a1bVO0ckGyR5RAdUKb14doqmY1Y.roa
Signing time: Wed 02 Sep 2026 05:26:40 +0000
ROA not before: Wed 02 Sep 2026 05:26:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 194.53.202.0/24 maxlen: 24
194.53.203.0/24 maxlen: 24
194.61.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:95:6c:6c:ef:7b:9c:50:9a:50:24:67:42:cd:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Sep 2 05:26:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b56d53b47241b247944075429bd78768aa66356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:3b:be:65:b9:bf:94:20:7c:fa:56:bc:de:
c4:df:6e:8d:36:8c:c1:35:6c:37:da:90:f5:cf:ee:
eb:b8:64:08:ac:46:36:c5:b4:b9:df:e5:4b:22:69:
1d:ae:3f:5d:21:75:98:a3:91:d2:7e:13:2a:e0:48:
cf:91:a0:80:06:66:b8:51:84:ee:d2:e5:85:06:ae:
12:17:9c:84:08:b6:4a:64:18:30:97:cf:2c:12:e5:
af:70:dc:c0:eb:22:21:bf:e4:3f:ad:b3:cb:d1:35:
c4:f6:cf:50:3c:92:ed:0a:f2:c0:b0:e3:30:10:6b:
a1:f4:36:4a:43:01:43:cf:06:26:7f:f3:d2:84:66:
f3:f9:af:05:c0:8f:67:4d:51:14:d6:50:83:b5:76:
1c:f7:8e:ea:8b:a0:cb:bf:86:22:63:9a:dd:62:34:
59:41:57:33:47:19:65:0d:d2:28:21:87:3d:51:07:
a0:24:b5:39:f5:31:05:89:40:bf:0b:17:c3:8d:31:
30:4b:38:b2:27:5f:73:82:d3:1e:b1:d7:d5:2c:c1:
c2:d5:dc:d6:8a:78:df:51:70:8f:1e:38:39:9c:af:
ba:01:0b:8f:05:13:dd:97:c0:1c:b7:14:5f:08:13:
86:7c:1d:4e:77:44:e9:58:23:8d:27:31:28:c0:08:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:56:D5:3B:47:24:1B:24:79:44:07:54:29:BD:78:76:8A:A6:63:56
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/a1bVO0ckGyR5RAdUKb14doqmY1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.202.0/23
194.61.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:40:25:d4:0a:b5:96:7d:43:95:36:b5:7f:e2:ee:06:6d:a8:
c0:86:07:30:8d:39:12:35:d9:2c:e7:f4:ea:ed:43:b4:a5:b9:
a0:fa:8a:9d:d3:56:26:ad:0b:4f:7d:3e:52:dd:aa:c0:4d:e8:
e2:04:80:5e:1a:22:ce:66:51:9a:b7:83:64:d8:2c:18:0f:e8:
2b:96:0c:36:ae:ed:79:dd:92:54:92:cd:c4:00:6e:02:a9:b9:
df:85:77:cc:42:e0:b7:90:f2:03:c1:4b:ff:91:1f:75:82:23:
a5:ba:4d:36:e7:93:83:89:eb:73:37:2a:00:72:7b:4e:77:57:
6d:f5:f6:0d:39:61:39:4f:db:02:3c:c5:1c:23:04:40:54:32:
1f:fe:4a:7d:47:d5:89:ff:1d:ee:cf:ae:71:aa:2d:99:bb:1d:
8f:0d:23:0b:89:eb:ff:46:e9:f6:a5:40:a2:d4:59:a5:97:c6:
e3:69:a0:b2:97:f5:9d:4e:01:6b:8c:9a:e5:f7:81:e6:32:0b:
dd:01:4a:11:f6:c5:43:13:ee:96:11:15:b2:6b:94:fc:5e:b9:
1e:1f:f8:ad:fd:22:aa:db:3a:f1:b0:b8:fa:9c:77:20:29:47:
4c:9b:52:a5:2d:42:ad:50:a7:4b:66:02:01:11:33:77:1c:ba:
3d:81:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:06:58 2026 by rpki-client