Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/dbCzVxas0_qsliPRNAMEfz-pRxU.roa
File: dbCzVxas0_qsliPRNAMEfz-pRxU.roa (raw, json)
Hash identifier: 49vZcXinvAQdpEtLtHlUszEEKYSFwV346IfbjEAEbuQ=
Subject key identifier: 75:B0:B3:57:16:AC:D3:FA:AC:96:23:D1:34:03:04:7F:3F:A9:47:15
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 01A13E0886B1464C6F78F60E96C11D4B8998
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/dbCzVxas0_qsliPRNAMEfz-pRxU.roa
Signing time: Thu 15 Oct 2026 05:28:28 +0000
ROA not before: Thu 15 Oct 2026 05:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35280
IP address blocks: 128.139.0.0/17 maxlen: 17
128.139.128.0/17 maxlen: 17
128.139.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:08:86:b1:46:4c:6f:78:f6:0e:96:c1:1d:4b:89:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Oct 15 05:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75b0b35716acd3faac9623d13403047f3fa94715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:d6:c4:3e:83:a4:70:97:b2:07:9b:40:12:
b3:04:a6:28:8f:3f:a1:17:cd:b3:27:72:cf:e7:99:
34:b9:ef:36:10:43:4c:a7:e8:ee:1b:65:31:61:71:
d5:07:a7:cd:b4:83:74:f3:5a:d4:ff:80:ed:cc:10:
b8:6f:b2:e2:25:91:b6:e5:e4:f1:f6:29:13:e2:58:
94:4f:23:b7:9f:18:b4:12:4f:cc:32:24:a5:6d:54:
ec:f1:22:1c:43:8e:a0:7d:eb:fa:e1:e6:d1:fb:be:
54:40:fe:59:21:ae:b3:0f:44:6c:6b:f4:c2:4c:47:
8e:b7:d8:ba:6b:bd:0b:1f:8f:f9:a9:54:5b:b2:c6:
c4:3c:d1:38:ca:30:70:b1:3f:e0:69:60:d1:eb:dc:
61:96:51:52:d8:56:37:1a:13:9c:17:0c:fe:06:ec:
6d:eb:ea:ac:d9:1d:a3:e6:83:2b:a1:0b:73:94:6a:
c1:4a:12:07:21:e2:69:53:f9:24:4c:4d:47:91:78:
f4:af:76:8f:e0:89:90:52:67:04:44:4e:b6:5b:b8:
94:da:66:fc:4e:5e:5b:7f:59:dc:cc:93:4e:c7:90:
bb:e3:0f:6d:c4:be:99:58:49:f5:d8:b9:25:e8:38:
65:d0:3d:9a:38:a7:66:ec:1b:48:db:ed:72:15:f8:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B0:B3:57:16:AC:D3:FA:AC:96:23:D1:34:03:04:7F:3F:A9:47:15
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/dbCzVxas0_qsliPRNAMEfz-pRxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:57:1d:39:05:30:9f:45:3d:1f:5d:21:6c:f9:44:83:34:82:
05:83:31:18:50:bc:d8:3f:47:ae:89:1c:48:d9:ca:cc:47:1b:
de:20:88:08:d1:e5:6a:0a:e6:a6:8f:09:f5:06:16:a7:65:3d:
60:3b:e6:80:97:69:2b:49:77:7c:55:4b:87:58:14:8f:07:b3:
fb:f7:74:b4:35:1d:d7:35:f9:9a:30:9c:3d:76:89:d0:bb:7a:
2e:3a:23:f2:88:b5:ff:ed:88:b4:5f:e7:c7:64:a4:74:85:95:
bb:ab:15:6e:7d:7e:ce:05:a9:ac:fa:0c:03:bb:1b:62:73:28:
72:f3:24:99:93:c4:ba:d9:ee:15:4c:e2:d9:24:0a:5f:d2:67:
2b:6b:7e:bb:93:d7:98:7b:3b:2d:2d:77:d5:51:ee:fa:cd:58:
b1:0f:0f:89:39:31:39:8d:23:b5:4c:55:bc:70:eb:ed:2a:57:
54:67:14:c3:c8:a9:2f:01:ee:d8:62:9d:8e:7e:c3:20:da:89:
ed:91:75:fb:c8:f1:c5:4e:24:7e:2e:75:e0:57:90:e1:7a:37:
c3:33:75:14:34:8d:ae:d6:74:31:5a:91:bc:f9:e3:b4:af:f5:
54:3b:13:fb:5a:a4:1e:6f:d6:fa:79:e8:58:ef:fb:3d:26:3d:
25:88:b8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:37:16 2026 by rpki-client