Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CmVpoKjyJazRO8E12M3wFzYNStU.roa
File: CmVpoKjyJazRO8E12M3wFzYNStU.roa (raw, json)
Hash identifier: ZUN3GZ+6nZmlGWTN/JXcuVVmvFpElibjHbDkbMSIdSM=
Subject key identifier: 0A:65:69:A0:A8:F2:25:AC:D1:3B:C1:35:D8:CD:F0:17:36:0D:4A:D5
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1890C586738EDB3F5E7223A3A2BB8EAD8
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CmVpoKjyJazRO8E12M3wFzYNStU.roa
Signing time: Thu 29 Oct 2026 19:04:10 +0000
ROA not before: Thu 29 Oct 2026 19:04:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218245
IP address blocks: 170.168.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:0c:58:67:38:ed:b3:f5:e7:22:3a:3a:2b:b8:ea:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 29 19:04:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a6569a0a8f225acd13bc135d8cdf017360d4ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:09:45:94:11:3d:cf:c4:97:a8:e5:81:d0:
cf:c5:86:4c:d1:95:60:52:54:37:c1:b1:c9:2c:ae:
15:e8:04:0a:8b:2f:ba:4e:63:5e:c5:ae:28:5e:51:
4f:b3:7b:b6:2c:ff:ac:6c:3b:de:7f:5c:98:55:be:
dd:9d:90:59:59:d0:3f:4c:e4:d3:f3:ae:57:61:c8:
00:7c:11:3d:34:9b:0d:fd:00:41:fb:eb:2f:aa:10:
86:ef:39:7e:a7:97:78:e3:60:f2:5d:bc:a8:c7:fc:
97:78:aa:d2:dd:79:df:da:c1:0d:3b:1a:cb:77:9c:
21:d9:95:4f:32:a0:ab:9e:2e:6a:49:44:75:e2:58:
49:53:bb:f8:f1:df:c8:c1:df:e1:e9:f1:05:61:5e:
9d:ab:ba:e1:cb:8a:76:af:99:9f:55:33:eb:e4:30:
39:83:6b:76:2b:bb:8e:80:e0:3e:31:9b:d7:fa:fb:
7e:ac:12:4f:d8:dd:1e:2e:8f:04:33:60:62:97:57:
97:b2:f6:ca:4a:ad:a9:1a:3f:61:f1:d1:33:4c:e4:
96:67:ca:12:48:e4:e8:21:ba:6e:43:61:ec:49:b4:
71:a8:bb:94:2a:9a:1a:ff:da:60:64:74:6d:84:85:
db:8a:80:c7:2b:46:aa:61:3a:43:02:bc:f4:da:cd:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:65:69:A0:A8:F2:25:AC:D1:3B:C1:35:D8:CD:F0:17:36:0D:4A:D5
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CmVpoKjyJazRO8E12M3wFzYNStU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.129.0/24
Signature Algorithm: sha256WithRSAEncryption
39:83:62:26:4f:8e:3b:1d:6b:59:87:05:18:84:82:bf:4f:ac:
ab:5a:d2:a1:59:ef:78:dc:76:cf:85:58:82:ca:88:ba:05:b0:
72:4b:a8:b5:de:ec:9f:a1:0c:ff:92:a0:d8:cb:eb:d8:0c:3c:
a9:19:d8:41:9b:91:7a:42:f1:3b:db:73:10:23:10:eb:84:4e:
19:57:db:d3:14:cb:8f:d8:ae:cb:d1:3d:24:2e:ef:cc:07:5e:
20:96:d8:27:5a:06:b4:86:56:14:00:fd:fb:f4:7f:27:20:40:
31:44:3a:bf:ba:dd:37:54:05:1f:7e:22:ed:92:3e:0f:14:d8:
24:ed:f6:6c:76:cf:ce:78:39:ce:98:65:13:5a:57:54:7a:0c:
85:dc:e4:88:a7:f4:4e:3a:13:ba:56:fe:1d:e8:9f:5c:13:af:
06:19:a0:24:f6:13:00:16:76:5f:d9:fa:34:05:15:15:36:ed:
38:e3:3c:c4:e8:12:85:58:a0:55:a2:f8:4b:eb:53:29:30:35:
b2:c5:85:66:2e:67:79:f7:74:c4:f9:0b:4a:37:1f:7a:7a:7a:
65:d6:99:37:4c:c0:19:9f:ad:75:98:79:0d:9b:4d:3a:22:8b:
16:6b:50:15:39:1b:57:ac:5e:5d:db:7b:d0:70:7e:14:8f:3f:
d6:59:1a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:09:39 2026 by rpki-client