Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/90Hwl_EZEJm0v_GSfc5j5SNv-Ag.roa
File: 90Hwl_EZEJm0v_GSfc5j5SNv-Ag.roa (raw, json)
Hash identifier: riDlZzRrX9SmcscuXBWKHKZW7qv5eLgSO00fy5/zfck=
Subject key identifier: F7:41:F0:97:F1:19:10:99:B4:BF:F1:92:7D:CE:63:E5:23:6F:F8:08
Certificate issuer: /CN=bdc7926e0abeda6c8d72d1d190c2e7d9d00449d8
Certificate serial: 01A13FF0F86C70DD580C82AD0A2218EAAD03
Authority key identifier: BD:C7:92:6E:0A:BE:DA:6C:8D:72:D1:D1:90:C2:E7:D9:D0:04:49:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/90Hwl_EZEJm0v_GSfc5j5SNv-Ag.roa
Signing time: Thu 15 Oct 2026 14:21:59 +0000
ROA not before: Thu 15 Oct 2026 14:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58006
IP address blocks: 192.162.194.0/24 maxlen: 24
192.162.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:f0:f8:6c:70:dd:58:0c:82:ad:0a:22:18:ea:ad:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc7926e0abeda6c8d72d1d190c2e7d9d00449d8
Validity
Not Before: Oct 15 14:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f741f097f1191099b4bff1927dce63e5236ff808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:2b:af:fa:17:0b:f9:07:eb:76:be:5e:41:
2a:35:ce:a0:44:df:7a:df:61:a1:55:e7:12:9d:c0:
e7:9d:4b:ad:00:9a:34:49:95:0a:c3:90:4e:5c:88:
bf:31:59:ac:04:69:f4:8d:fd:2e:59:3b:96:34:1d:
ba:3d:9b:85:b2:46:ae:d9:0e:6c:57:f5:66:38:ae:
e2:a1:1c:cf:9f:62:c8:99:d1:4d:e3:17:b0:4a:e4:
dc:7a:8f:86:95:4a:df:ae:30:2c:bf:86:00:74:fc:
8e:39:d0:93:37:d2:0e:b5:4b:f6:b6:b3:46:1b:5f:
1c:62:b5:8c:6d:dc:17:7c:3b:f4:39:da:ae:35:68:
80:b2:1a:82:d5:ed:b1:2f:17:88:fc:8d:c0:c6:c7:
c6:8c:b1:e5:c1:17:09:e3:d7:b0:47:67:60:de:ad:
62:84:aa:2d:91:8c:6b:e1:75:a2:62:60:aa:46:e4:
9f:12:1a:f4:66:dd:67:a1:e4:f4:03:e6:3b:32:16:
0e:24:01:fa:be:38:d5:b8:5c:bb:1e:b0:41:63:66:
db:e7:27:1f:e3:4d:69:ed:76:b4:c1:02:f1:26:d3:
6c:6b:fe:49:e0:57:93:26:b4:9a:57:e1:95:1c:28:
56:6f:52:b5:e7:aa:62:ce:d7:db:53:29:e1:0b:e0:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:41:F0:97:F1:19:10:99:B4:BF:F1:92:7D:CE:63:E5:23:6F:F8:08
X509v3 Authority Key Identifier:
keyid:BD:C7:92:6E:0A:BE:DA:6C:8D:72:D1:D1:90:C2:E7:D9:D0:04:49:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/90Hwl_EZEJm0v_GSfc5j5SNv-Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.194.0/23
Signature Algorithm: sha256WithRSAEncryption
00:d2:c3:08:a0:a3:69:5b:84:5e:9d:88:c8:09:62:eb:a7:56:
5d:40:f9:ea:be:af:fa:2a:a7:f0:21:18:18:64:fa:6e:a7:f0:
69:34:7b:f4:bb:5d:d5:0b:6f:a9:6c:d8:a7:94:48:43:4b:2f:
09:e1:48:e2:75:62:d6:0d:44:50:44:13:29:6d:4b:08:db:3a:
bd:31:91:e7:5c:90:60:6c:c5:90:f0:cb:38:6a:b4:50:49:d9:
c9:f4:60:d1:90:40:bf:72:d0:c3:fd:d9:4f:eb:10:3e:49:95:
12:80:bf:a4:0a:2c:6e:a3:93:21:9a:d3:63:96:3c:82:ab:75:
0a:72:7e:c0:cf:d9:13:a7:3f:33:70:fb:de:79:d0:3a:9f:27:
80:8d:29:50:df:8a:c7:90:1e:b1:fe:ca:91:c3:f8:27:04:93:
f5:d6:0b:b0:a5:e8:fe:16:f8:e6:a9:a9:f0:c7:bb:fb:7c:79:
d7:f7:f0:bf:f9:50:e3:16:6c:7f:c7:c2:ba:79:5a:70:91:84:
29:8a:85:93:7a:10:84:4b:40:11:53:a7:17:12:1d:22:44:cb:
35:1d:ce:bc:6c:10:cb:d9:6b:e0:38:ac:60:26:76:0f:a8:a4:
26:9c:ab:be:91:30:27:7a:4a:7e:41:12:6d:5a:b2:fe:54:9b:
6e:c0:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:20 2026 by rpki-client