Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/29odbuprtCj7WPL5-_schDbHgm8.roa
File: 29odbuprtCj7WPL5-_schDbHgm8.roa (raw, json)
Hash identifier: XIIoYS6NjJtTvrEkYnxIIAAx80iEEjwxP71SPrAr+8o=
Subject key identifier: DB:DA:1D:6E:EA:6B:B4:28:FB:58:F2:F9:FB:FB:1C:84:36:C7:82:6F
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01A11880A51DA6214EF974EE78DDC88CE6B9
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/29odbuprtCj7WPL5-_schDbHgm8.roa
Signing time: Wed 07 Oct 2026 22:34:06 +0000
ROA not before: Wed 07 Oct 2026 22:34:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13301
IP address blocks: 146.19.166.0/24 maxlen: 24
185.45.248.0/22 maxlen: 24
194.126.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:80:a5:1d:a6:21:4e:f9:74:ee:78:dd:c8:8c:e6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Oct 7 22:34:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbda1d6eea6bb428fb58f2f9fbfb1c8436c7826f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b0:54:ad:d6:72:b7:9f:12:3f:14:5b:83:90:
b4:68:0c:a0:2f:14:f1:e1:16:79:3c:4d:44:e7:05:
7e:00:7f:d1:6d:99:59:17:3c:76:dd:c7:7d:95:7a:
03:1e:56:11:03:7b:01:c5:ca:3f:35:9b:44:21:f7:
1e:f6:e2:0e:38:61:d9:b0:fd:0d:6f:cd:90:b2:61:
3a:d4:e8:6f:cb:31:a6:91:04:c8:d8:83:ca:dc:03:
c0:99:2b:a1:4e:e4:61:d6:1a:57:16:12:e6:88:c6:
fd:11:6e:cb:8e:bd:d2:06:54:88:c1:3a:db:26:d0:
f3:7c:8e:14:17:dd:f2:0f:d7:b8:32:11:71:4a:8e:
c8:c8:95:d3:ad:2d:b3:ef:e0:94:e0:3e:8b:97:4d:
d7:5f:c7:7d:3b:f4:10:eb:8b:80:0f:ac:13:34:f9:
0b:9c:c1:aa:cb:43:41:9c:3a:ce:19:db:06:13:96:
04:b1:f0:56:37:6b:94:b1:1e:9b:55:0a:b1:13:02:
8d:a2:dd:9c:62:8a:46:dd:f6:bd:5c:06:57:b0:eb:
60:ce:0e:b3:16:db:f2:db:ae:f6:8c:33:3f:7e:54:
a5:9a:d6:cc:7f:32:23:20:08:e7:10:23:07:d7:a5:
4f:6d:47:c3:d8:d4:26:94:95:98:e7:75:6f:fb:0b:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:1D:6E:EA:6B:B4:28:FB:58:F2:F9:FB:FB:1C:84:36:C7:82:6F
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/29odbuprtCj7WPL5-_schDbHgm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.166.0/24
185.45.248.0/22
194.126.198.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4f:08:0f:91:ec:0e:48:fd:23:2d:2c:7a:ce:af:1d:20:d3:
f0:c2:e6:4d:96:f6:4b:ad:06:fd:aa:aa:50:38:b0:b6:81:e8:
94:fe:8d:7e:82:92:20:24:dd:1e:ab:88:49:39:c6:f0:05:74:
41:73:4a:ee:97:cf:57:0b:a2:61:1f:05:b6:11:9d:3b:0a:28:
6d:5d:df:9c:d9:2a:5f:8d:3b:1b:3c:0b:71:99:24:fc:40:90:
0d:49:65:e3:7b:c1:e0:bc:38:ce:71:de:fc:64:19:15:b5:ea:
59:fa:15:f1:d4:1d:d7:42:de:b4:66:b0:0e:29:21:30:2b:f2:
26:d1:73:41:1f:28:cd:6e:1a:12:ed:c5:51:0e:2b:b0:9f:5f:
56:9b:e5:08:dc:6f:b1:45:b2:79:cc:58:e1:47:ba:03:fc:9a:
78:28:4d:c3:6f:06:32:70:25:8d:24:91:83:69:64:e9:8f:6e:
18:65:eb:e2:be:34:95:e2:87:f7:b0:75:b1:32:1e:70:b0:78:
8d:92:b8:68:85:5c:da:27:5b:2b:27:6d:2e:4a:4a:84:77:e6:
90:e1:3b:85:ba:25:41:ba:ce:32:30:81:d3:71:1f:fd:98:8b:
5d:d7:69:cd:28:79:b3:44:87:81:9d:aa:ec:b7:d0:3c:c5:5e:
fd:15:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 23:19:55 2026 by rpki-client