Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/v8seVYIDYHWoGxFEIsxg-SXECwU.roa
File: v8seVYIDYHWoGxFEIsxg-SXECwU.roa (raw, json)
Hash identifier: 5O+BU1G/+loNbYaWgI9nb1NRcs3e2blcuMzVwEOV2B0=
Subject key identifier: BF:CB:1E:55:82:03:60:75:A8:1B:11:44:22:CC:60:F9:25:C4:0B:05
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 01A182D59C07CD639ED13D993627764B8F41
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/v8seVYIDYHWoGxFEIsxg-SXECwU.roa
Signing time: Wed 28 Oct 2026 14:06:39 +0000
ROA not before: Wed 28 Oct 2026 14:06:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205634
IP address blocks: 144.124.216.0/24 maxlen: 24
144.124.217.0/24 maxlen: 24
144.124.218.0/24 maxlen: 24
144.124.219.0/24 maxlen: 24
144.124.220.0/24 maxlen: 24
144.124.221.0/24 maxlen: 24
144.124.222.0/24 maxlen: 24
158.94.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d5:9c:07:cd:63:9e:d1:3d:99:36:27:76:4b:8f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Oct 28 14:06:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfcb1e5582036075a81b114422cc60f925c40b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:00:11:ac:ee:58:1c:84:2c:01:65:05:65:
59:10:48:03:17:aa:7f:67:4c:5b:69:97:35:61:11:
c6:1e:7c:cb:f7:83:e5:5f:8e:c5:fa:17:f4:1c:66:
14:a8:7b:03:5a:b1:fb:49:0b:71:2e:40:d1:65:bc:
5e:27:55:aa:e9:0e:79:2c:d8:df:b9:ec:05:d3:60:
18:28:1d:71:60:2a:f2:39:a1:68:7c:6c:29:9f:14:
f6:1b:86:c2:00:6e:10:2a:57:9f:66:80:fb:4a:95:
8c:f2:85:0a:23:03:05:e6:ce:ec:22:0d:a9:95:8d:
39:ea:60:f4:0c:6c:f2:4a:49:e9:91:c7:2f:e1:77:
fb:de:01:58:b4:83:bb:3a:d4:de:5f:02:51:af:5f:
5b:12:06:92:6d:92:16:37:42:99:b6:f5:72:f1:96:
31:0f:ae:20:42:91:a2:29:61:d9:45:11:d4:e7:7a:
fa:28:a8:2a:a4:2d:76:b8:81:32:be:48:7d:6b:fb:
44:c2:3c:68:c1:a0:f9:fd:1f:78:67:2a:0f:d0:bb:
7c:2b:4d:bc:56:99:b8:71:6c:ab:ba:71:7c:f1:53:
16:e4:d1:f6:55:3a:99:d5:82:c4:ac:f7:c0:fe:0d:
97:62:99:f9:ab:b6:e3:84:ad:98:2f:f7:1f:7e:aa:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:1E:55:82:03:60:75:A8:1B:11:44:22:CC:60:F9:25:C4:0B:05
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/v8seVYIDYHWoGxFEIsxg-SXECwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.124.216.0-144.124.222.255
158.94.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a4:b5:11:c3:c6:b2:02:b3:4e:fd:82:cf:2d:8e:a7:a7:6a:
86:e5:bd:db:4b:a4:95:98:0f:21:04:25:91:ae:a8:27:78:8b:
54:cf:af:76:b3:e1:11:98:80:3c:30:83:88:b0:83:be:bb:8f:
8c:27:42:58:8f:da:34:4f:f7:fb:08:5f:28:35:af:e4:05:8d:
06:d7:8c:98:15:ba:4d:7c:f2:e8:2f:ac:71:5e:90:23:bf:73:
af:da:fa:a3:ea:0b:12:d8:70:7c:fe:78:86:99:7d:f0:20:9e:
73:30:f8:e6:37:3a:d4:5c:93:92:ea:d9:1d:95:2c:ed:d6:d0:
bf:47:7a:10:94:db:6f:31:2e:79:4a:d5:dc:ac:7f:2a:48:5a:
7b:20:1a:fd:91:73:72:b8:17:ff:44:e6:c3:97:ee:10:81:66:
43:62:76:8c:4f:6e:ae:18:79:1f:fa:67:5c:29:90:ce:8b:1b:
35:6e:d9:b1:12:c3:fe:be:fb:a0:2a:9f:5c:fd:95:77:a9:3a:
c7:29:c6:d1:2a:26:59:ef:c5:be:55:ba:6e:9d:9b:d5:64:48:
fd:4e:3c:08:8b:ef:a0:17:f1:e4:b1:38:d0:99:44:37:ad:46:
d8:be:c0:4a:b4:1b:cc:81:4b:17:ce:05:e2:13:82:46:5b:7c:
aa:5f:3b:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:36 2026 by rpki-client