Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/at0MAsn7LZ4bRtjwi2boUrF1SQw.roa
File: at0MAsn7LZ4bRtjwi2boUrF1SQw.roa (raw, json)
Hash identifier: qiw3958H0O/sBog1cu2bX2Fe1B34pZuoz84YWjgYawA=
Subject key identifier: 6A:DD:0C:02:C9:FB:2D:9E:1B:46:D8:F0:8B:66:E8:52:B1:75:49:0C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1A1A6DDFCA6041F494E2EB47BA0E7EC32
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/at0MAsn7LZ4bRtjwi2boUrF1SQw.roa
Signing time: Tue 03 Nov 2026 13:43:49 +0000
ROA not before: Tue 03 Nov 2026 13:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201499
IP address blocks: 138.249.0.0/23 maxlen: 23
170.168.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 10:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:a6:dd:fc:a6:04:1f:49:4e:2e:b4:7b:a0:e7:ec:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 3 13:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6add0c02c9fb2d9e1b46d8f08b66e852b175490c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:74:22:d4:51:ad:67:85:1e:fb:73:91:e0:
e0:1f:f5:88:7d:a4:18:8e:1b:c9:e2:5e:54:ce:68:
b8:19:61:f0:6d:ba:d2:a0:98:29:a0:02:1e:59:ae:
92:e5:b9:33:e4:cb:16:03:55:2a:6e:06:f3:d3:60:
00:9b:b9:fa:42:45:66:00:31:8c:1f:9e:70:0d:db:
56:e5:85:2f:5d:f8:33:b9:2e:b5:79:f0:44:9d:52:
a4:53:3f:e4:10:52:66:42:e1:62:3f:47:d8:4e:3b:
e9:a3:06:59:1a:ed:fd:cb:e8:00:df:49:f9:da:60:
53:38:50:86:30:29:a8:9e:1d:00:e3:90:0c:d2:a4:
1f:d7:db:0e:f4:6e:52:e8:f7:f2:de:b1:bb:e8:3d:
3d:fa:fc:93:5d:c6:ac:db:87:36:6f:03:37:52:39:
59:cb:02:2d:ac:54:fa:c3:0f:f3:82:ab:1b:4b:bb:
7e:46:38:c9:1d:2a:1e:49:83:3f:ed:2c:2b:9b:ab:
82:09:e0:73:31:76:f9:27:dc:36:d2:a3:5e:c0:fa:
25:06:0d:72:0d:9b:e7:40:13:71:7c:d2:ff:fe:97:
45:31:b8:b8:f6:46:05:5c:0e:d2:0b:bd:00:22:5e:
83:24:02:bd:d5:29:69:f9:b1:bb:ff:75:87:02:38:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:0C:02:C9:FB:2D:9E:1B:46:D8:F0:8B:66:E8:52:B1:75:49:0C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/at0MAsn7LZ4bRtjwi2boUrF1SQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.0.0/23
170.168.113.0/24
Signature Algorithm: sha256WithRSAEncryption
75:cc:39:22:59:e7:b1:c9:87:9d:50:ae:9d:94:f5:7c:44:d1:
92:7f:e7:2b:5d:19:2e:4b:b0:f8:24:3a:53:dc:a7:b6:59:d4:
dc:fb:61:b7:5d:c8:48:60:4c:56:71:5b:fa:06:95:75:19:dd:
54:a5:69:0f:34:cb:40:2a:89:ae:67:87:a6:24:da:33:7c:96:
93:22:e0:51:19:5e:a1:13:a3:e4:38:1b:a6:1f:38:7e:1e:95:
da:27:8a:c7:8f:f7:fe:4e:47:aa:7c:73:91:2f:8b:c4:2e:cb:
82:90:9c:f7:0d:fc:cd:a5:b2:07:98:37:da:b1:68:a8:7d:d3:
e8:fc:66:97:43:ee:62:ce:9c:59:31:fb:a2:3c:31:7d:88:47:
dd:8e:55:05:5a:e2:9a:20:9e:73:f2:a8:7c:2e:e6:e1:3f:79:
78:85:56:c2:ed:07:c0:db:3c:0d:ec:1e:d7:f7:af:78:4e:61:
f7:40:62:e0:8e:18:69:b8:ca:29:83:bf:33:6b:f8:90:11:6d:
78:7b:f8:99:3b:18:df:a5:fa:6f:36:2e:9c:01:d2:76:08:41:
f2:ab:0f:b8:69:48:c5:2c:60:11:a0:57:ad:81:6d:7d:97:0a:
c4:67:f4:2d:9c:9e:71:e9:4a:24:0d:c6:4c:8d:ef:a7:41:b5:
56:33:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:24:12 2026 by rpki-client