Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/70M8T0-KMMetks3OQUPmQuRMSe8.roa
File: 70M8T0-KMMetks3OQUPmQuRMSe8.roa (raw, json)
Hash identifier: 3DfL5ArstFNwTt/hrmYIH5omP7/7TKdrJV/ReRALwvg=
Subject key identifier: EF:43:3C:4F:4F:8A:30:C7:AD:92:CD:CE:41:43:E6:42:E4:4C:49:EF
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A0DBB9132D4F1FA55A40069651AA4D553E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/70M8T0-KMMetks3OQUPmQuRMSe8.roa
Signing time: Sat 26 Sep 2026 03:18:54 +0000
ROA not before: Sat 26 Sep 2026 03:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.111.48.0/20 maxlen: 20
109.111.54.0/23 maxlen: 24
109.111.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:b9:13:2d:4f:1f:a5:5a:40:06:96:51:aa:4d:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 26 03:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef433c4f4f8a30c7ad92cdce4143e642e44c49ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:d7:25:f1:24:b8:94:4c:41:e1:b3:25:63:
ad:be:af:d1:ec:7f:75:b2:a6:bc:ef:b2:c4:12:94:
3a:98:e9:52:ef:06:84:a6:0a:23:4d:8e:ab:0e:e0:
5c:33:6c:97:c9:c2:72:11:22:23:1c:7b:2f:d0:3a:
46:3c:05:04:08:4c:f2:bd:c7:bf:38:e1:1b:9a:e0:
ec:7e:2d:5a:44:a0:ed:60:86:f7:8f:89:ed:35:16:
56:c0:fb:6d:c8:0d:ca:13:4e:f0:c8:f8:50:0d:1d:
83:65:83:f9:63:67:c8:87:9f:43:ea:78:0e:1a:22:
4f:97:f9:a3:5d:1d:46:91:12:7e:df:86:4e:da:7e:
65:7b:61:47:fe:d4:63:30:42:c7:4b:b5:be:00:9a:
f5:a3:3a:41:50:28:c2:30:dc:37:5d:c2:3d:91:fc:
5a:82:b4:e4:a8:47:ac:9a:aa:40:81:84:54:11:7a:
c7:e5:ed:d2:75:27:31:64:c0:29:cb:de:53:62:8a:
fe:a2:55:54:fe:fc:bb:6d:a2:d0:66:00:79:23:1f:
75:3d:9b:e2:df:42:97:98:35:28:b4:4a:aa:0e:3f:
d2:a2:7b:2b:6c:20:b9:ee:68:c9:40:14:7d:df:de:
ac:f5:f0:a4:64:39:5d:8b:dd:0b:56:52:1f:fd:38:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:43:3C:4F:4F:8A:30:C7:AD:92:CD:CE:41:43:E6:42:E4:4C:49:EF
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/70M8T0-KMMetks3OQUPmQuRMSe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.48.0/20
Signature Algorithm: sha256WithRSAEncryption
18:8b:3f:b8:af:f9:ec:88:7a:6f:a0:b7:95:2b:fd:6d:a8:90:
72:c5:12:0c:cb:e3:aa:c5:38:51:59:04:10:06:b0:a8:a1:d5:
7f:09:06:30:70:72:2f:6e:2b:b9:22:e4:fb:b4:1c:a3:4a:c9:
9f:d0:15:24:77:72:59:4f:f7:1d:5b:9f:1f:2d:98:a6:01:eb:
2b:6a:2a:9b:ca:53:15:b6:59:3f:58:97:5f:19:06:f6:59:4d:
9b:6a:4b:03:90:6d:df:96:2a:ef:be:b5:1b:ae:0b:c5:8d:dc:
a8:a7:e9:d5:b9:b6:21:9a:1d:a4:31:ab:71:58:3e:48:49:5b:
50:39:62:a1:0f:f2:f7:06:66:f5:9c:10:54:18:d2:a3:47:50:
23:04:7a:c3:7f:1c:98:16:e3:90:d2:e4:0e:fc:01:be:5b:fb:
8d:3f:6a:86:60:36:41:c8:55:9f:5d:4d:38:04:b7:c5:69:d9:
1d:8b:5a:c9:58:25:cb:f4:a0:ac:12:c8:10:09:b1:25:ed:29:
d9:3a:77:67:67:41:87:1a:b9:c4:d9:8d:28:a0:fa:29:81:ff:
aa:cb:d6:3c:c3:ac:cf:2c:88:c0:df:00:2e:c6:22:61:85:c1:
05:09:91:d7:b9:4c:e0:a1:4d:9b:28:e9:66:e0:86:4d:b2:f7:
85:28:8e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:33:58 2026 by rpki-client