Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/05al2qwbDOvNewO2KpRBi-g2hxA.roa
File: 05al2qwbDOvNewO2KpRBi-g2hxA.roa (raw, json)
Hash identifier: /YwEK75RuFEUhGYOutpE06SlROaIo7nhH8tX5shjcUE=
Subject key identifier: D3:96:A5:DA:AC:1B:0C:EB:CD:7B:03:B6:2A:94:41:8B:E8:36:87:10
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A1166910F0B922AC660D6B40B2AA65BE8B
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/05al2qwbDOvNewO2KpRBi-g2hxA.roa
Signing time: Wed 07 Oct 2026 12:49:06 +0000
ROA not before: Wed 07 Oct 2026 12:49:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218674
IP address blocks: 84.252.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:69:10:f0:b9:22:ac:66:0d:6b:40:b2:aa:65:be:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 7 12:49:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d396a5daac1b0cebcd7b03b62a94418be8368710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:93:b6:8e:00:0d:04:a7:05:96:f7:1b:9e:
9d:16:d6:ed:07:9a:a9:74:83:a9:b0:f0:26:55:f0:
1c:83:ed:93:2e:37:47:04:08:c2:e5:5d:6d:09:a3:
cc:ac:65:79:c7:0f:b2:bf:91:73:f6:eb:1d:e9:9e:
e1:5b:38:8c:bb:bf:fa:46:c0:66:a9:18:5a:01:67:
ee:5a:36:34:d3:ce:90:77:48:75:4d:1a:51:1e:0d:
94:38:92:b5:70:1d:c8:44:12:87:14:0e:b0:50:01:
ea:02:96:b7:6b:e9:d8:bf:ec:e3:0a:f1:97:ad:d3:
6d:30:f7:a9:4d:32:cd:40:af:85:4a:e9:bb:bb:88:
aa:28:fb:5d:f6:73:74:da:9f:96:8b:2a:19:e1:31:
70:ba:63:c2:38:65:8b:d0:bc:6c:da:ff:c3:c1:09:
e6:9a:cf:1a:f4:c2:8b:26:a8:ba:78:35:ab:31:dc:
b5:da:4e:ab:fa:e0:70:73:a1:c9:a6:ea:bc:5e:93:
6c:29:a6:0c:85:eb:cd:35:18:7c:db:c2:32:a1:b5:
06:df:27:2d:9f:ff:50:58:c1:0c:e2:20:81:88:11:
2c:60:57:ab:66:94:27:67:d7:91:d5:47:7c:45:bf:
de:c8:d1:29:35:cd:85:69:78:06:df:ff:0a:b1:a6:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:A5:DA:AC:1B:0C:EB:CD:7B:03:B6:2A:94:41:8B:E8:36:87:10
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/05al2qwbDOvNewO2KpRBi-g2hxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.67.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f0:2d:81:69:be:52:89:b3:49:bf:f2:a4:32:e9:e6:d2:58:
b7:b5:9b:c9:a5:63:95:e9:99:aa:85:34:5c:b4:1a:ac:cb:8c:
a5:60:a6:25:ab:2d:bf:98:b8:f2:1b:04:14:ba:7f:f2:51:a9:
a9:f0:71:9e:89:bf:fb:91:69:ab:86:63:f0:2c:29:f8:80:69:
72:d5:a4:43:06:fa:ab:fd:cb:7d:14:56:7a:bc:91:06:d0:a6:
5a:12:4f:95:12:fc:db:7e:71:77:e9:e7:52:73:69:39:d1:8b:
f3:27:9c:74:9c:14:79:f6:ef:b2:6e:4b:6a:83:dc:48:10:5b:
21:6b:b3:5d:65:11:ac:fb:03:39:4e:66:2b:2e:e6:cb:17:e9:
4b:2e:14:f3:b0:6e:3c:91:42:7f:a6:65:92:91:d6:1f:6c:d6:
11:fd:18:ab:5e:fb:fc:e7:6b:ad:f2:36:73:4d:cc:15:c6:db:
fe:fc:2b:53:f4:71:1a:4b:94:8a:30:9a:87:ae:f3:48:07:d1:
06:b4:33:c7:7a:6f:f4:a1:01:01:a9:17:c6:ab:80:01:0d:8d:
9c:ac:2a:cd:86:c6:c4:ab:80:e5:b7:71:a7:2d:d6:66:f4:36:
2f:aa:84:51:ac:51:bd:83:e8:e5:a6:60:a6:20:93:ff:49:39:
b3:a2:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:33 2026 by rpki-client