Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/RZ6uFxZ2wYiFqpML90e3oMn4Nmw.roa
File: RZ6uFxZ2wYiFqpML90e3oMn4Nmw.roa (raw, json)
Hash identifier: rbN6eVizh26w+omU1nsGiqVhr1M2qWZqIe+UTFZ39T0=
Subject key identifier: 45:9E:AE:17:16:76:C1:88:85:AA:93:0B:F7:47:B7:A0:C9:F8:36:6C
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01A038C02C17898E914110274DA12F44A1F3
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/RZ6uFxZ2wYiFqpML90e3oMn4Nmw.roa
Signing time: Tue 25 Aug 2026 11:48:33 +0000
ROA not before: Tue 25 Aug 2026 11:48:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 103.101.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 14:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:c0:2c:17:89:8e:91:41:10:27:4d:a1:2f:44:a1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 25 11:48:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=459eae171676c18885aa930bf747b7a0c9f8366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:72:f0:d9:0f:3e:7b:9b:e3:ee:df:8e:d4:
ce:db:8f:68:9a:ee:7b:f0:c6:52:e2:80:94:2a:02:
8f:b4:a5:9a:21:32:66:b5:94:bc:c2:dd:b4:f5:f5:
d6:ad:b4:d1:0d:dd:28:a7:16:ea:2f:17:93:4e:ce:
d4:3c:42:08:27:04:e6:e5:0c:2f:f8:ab:90:59:fe:
65:2c:24:21:d3:d5:3c:54:ca:66:c2:dd:2a:c3:51:
31:25:a1:0b:94:2a:cd:9b:d5:88:c2:4a:6d:01:70:
5d:71:4c:2d:4c:1c:61:84:51:b6:c7:3a:3f:fa:45:
3b:0f:5e:23:52:f1:34:f6:a2:86:dc:54:4b:2a:27:
1e:f4:b5:26:4c:51:02:59:b1:27:df:d8:e4:51:87:
db:b9:d5:7d:ae:b8:9a:f6:01:f3:f2:03:24:ac:f6:
1f:77:fe:95:0e:3f:b6:25:9c:d8:e6:f9:2e:eb:e1:
32:b1:08:a2:79:55:3e:cb:9d:2c:ef:41:ab:52:31:
a2:f9:e4:3a:82:3e:db:bc:fd:29:8c:5e:35:c5:a6:
6f:23:ce:4b:76:09:e4:db:11:2e:f1:3e:6a:2c:d1:
62:00:06:fc:3d:69:c1:19:f3:2d:23:03:83:8f:cd:
b7:33:73:b4:38:39:19:5e:80:df:23:a7:a6:42:46:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:AE:17:16:76:C1:88:85:AA:93:0B:F7:47:B7:A0:C9:F8:36:6C
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/RZ6uFxZ2wYiFqpML90e3oMn4Nmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.101.87.0/24
Signature Algorithm: sha256WithRSAEncryption
14:dc:be:47:59:87:8e:87:05:07:d5:05:0f:31:8a:8d:61:1a:
ef:57:2a:a5:91:e9:34:30:08:01:6c:40:ef:52:23:04:29:49:
a6:1a:2f:da:4f:1e:8a:6b:bb:17:5e:13:e4:4b:5a:cc:e2:5b:
58:09:8a:83:c4:fd:94:16:12:f0:c7:a3:66:52:f6:46:33:8f:
ac:ce:38:3e:ff:fa:83:b3:68:63:23:4f:f2:fc:91:7e:48:ba:
92:4b:20:f6:47:e7:02:d8:49:c8:04:49:80:d3:dc:7d:3f:8b:
91:84:2e:64:04:c2:a1:b8:fe:bc:a6:98:6d:0a:dc:5e:11:79:
3f:6c:09:e3:c1:c6:e4:24:59:b5:41:09:2b:ef:10:1a:06:b5:
e6:4a:b3:66:53:46:48:20:c2:e3:ea:80:20:4e:00:f9:6b:80:
f9:0f:59:9e:4a:9c:90:fe:b5:49:0e:1e:51:7c:c0:44:00:a5:
63:a4:88:2d:a6:49:da:47:ff:77:e0:e1:54:82:e1:1e:a9:e7:
97:99:36:69:2a:fb:2c:81:96:fd:00:32:55:33:2f:a1:8c:ee:
8b:4e:a0:66:4c:eb:e3:08:e3:70:ee:52:55:6f:6c:96:bf:66:
ab:3e:ea:a8:0f:3e:42:08:f2:cf:59:d1:df:fc:6a:37:5f:f8:
fd:68:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:48:51 2026 by rpki-client