Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/rxK1yVQLQgCGGxsUbYXcQXPAThA.roa
File: rxK1yVQLQgCGGxsUbYXcQXPAThA.roa (raw, json)
Hash identifier: tS2pQ2l8pudRxa5QB373ut4deXZNA2YLnKVmeyaKXO4=
Subject key identifier: AF:12:B5:C9:54:0B:42:00:86:1B:1B:14:6D:85:DC:41:73:C0:4E:10
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 01A1449D30EDA0B8E5BDD958E69A3191B602
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/rxK1yVQLQgCGGxsUbYXcQXPAThA.roa
Signing time: Fri 16 Oct 2026 12:08:34 +0000
ROA not before: Fri 16 Oct 2026 12:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21738
IP address blocks: 2.59.255.0/24 maxlen: 24
185.125.142.0/24 maxlen: 24
2a01:e286::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:9d:30:ed:a0:b8:e5:bd:d9:58:e6:9a:31:91:b6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Oct 16 12:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af12b5c9540b4200861b1b146d85dc4173c04e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:6a:ef:76:54:98:83:6b:be:55:81:a8:1d:
31:6f:6d:a1:04:32:6f:b4:3c:2a:5b:39:47:69:a2:
bb:9e:79:cd:c9:f1:c8:bc:0c:7c:7d:af:44:67:aa:
0e:e3:78:bf:84:fa:06:a4:4a:dc:05:40:64:9f:32:
86:b7:e9:64:6e:0f:fa:7c:44:30:85:48:34:ee:48:
c1:87:ce:52:8a:41:a8:a6:04:2f:b6:bd:a6:f6:95:
e0:d4:1b:e9:b9:5a:c6:0b:74:18:d6:53:dd:70:c3:
8d:4e:ef:4d:63:ce:f7:e6:14:54:34:ba:56:83:94:
e9:31:a6:44:25:3d:f4:8d:e4:fd:b9:76:c1:36:53:
f2:8b:cf:15:9b:a3:82:75:fd:3e:5c:26:cc:da:22:
33:ca:5b:eb:ad:2f:30:6d:ca:04:05:e0:3a:4e:6a:
d1:4e:06:fc:2b:f9:87:33:e0:b3:47:83:6a:c7:1f:
59:2a:50:cc:76:1d:1c:c2:e6:01:22:c1:9e:a5:94:
f0:c9:10:79:5d:e8:c2:b9:b3:a1:74:c2:e4:d0:42:
b5:d1:8a:70:3d:ce:3d:62:46:0e:95:7a:85:6b:15:
9a:9e:fa:97:ce:b1:7f:ab:ee:ac:78:46:69:35:9c:
81:0c:c7:ac:bc:12:bb:7f:6f:38:c2:40:3f:8a:07:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:B5:C9:54:0B:42:00:86:1B:1B:14:6D:85:DC:41:73:C0:4E:10
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/rxK1yVQLQgCGGxsUbYXcQXPAThA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
185.125.142.0/24
IPv6:
2a01:e286::/32
Signature Algorithm: sha256WithRSAEncryption
3f:06:59:96:f5:ce:81:8b:c1:c0:91:ef:ef:b4:96:7e:ac:61:
87:e4:24:93:17:75:49:1a:53:1b:12:e6:1a:f2:d1:22:1f:4c:
19:f3:56:9f:1b:4f:dd:5b:7c:f1:1f:ee:7c:3e:6f:df:e9:dc:
76:5c:ac:d0:e8:53:f2:68:f7:5d:65:92:34:34:e3:10:a6:d1:
a0:d6:57:db:29:dd:08:8c:5a:e8:ca:ef:25:8a:f7:48:ec:6e:
c1:da:48:dd:93:14:62:d8:4e:93:3b:d4:30:81:9f:0d:ae:46:
94:d2:42:5a:54:85:1e:3a:f6:0f:3b:5c:c9:e0:52:62:e5:c5:
d2:dc:02:b1:34:df:09:bb:4f:a4:ff:62:73:8f:d6:ab:4a:0c:
99:e2:a7:b7:c4:d2:f0:e2:2f:05:af:c2:5f:7b:04:97:93:40:
4a:57:b2:60:58:7c:db:c5:a4:bb:c8:b5:2f:8b:8d:66:9c:bf:
22:12:0a:cb:7a:64:c8:66:41:ca:c8:37:51:1f:c0:cf:e1:9c:
46:f7:04:d2:ee:09:d4:00:f0:38:16:61:21:91:f0:fb:57:fb:
75:cc:92:a6:28:26:7e:99:3a:95:b1:e3:d2:b4:1f:ef:5d:d2:
87:e8:20:e6:6b:c4:b2:32:8c:59:cc:d3:04:88:8d:6a:26:dd:
1d:19:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:49:38 2026 by rpki-client