Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/rnogMjxrPYrGbjwtwMxUfs2cDuQ.roa
File: rnogMjxrPYrGbjwtwMxUfs2cDuQ.roa (raw, json)
Hash identifier: 6Befh67oZYiWRiKfvgAdqrBYscWEf9Pl6kmii5LoPo8=
Subject key identifier: AE:7A:20:32:3C:6B:3D:8A:C6:6E:3C:2D:C0:CC:54:7E:CD:9C:0E:E4
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 01A18402D1938509EF9FDD026E3B62B463E2
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/rnogMjxrPYrGbjwtwMxUfs2cDuQ.roa
Signing time: Wed 28 Oct 2026 19:35:39 +0000
ROA not before: Wed 28 Oct 2026 19:35:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 188.212.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:02:d1:93:85:09:ef:9f:dd:02:6e:3b:62:b4:63:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Oct 28 19:35:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae7a20323c6b3d8ac66e3c2dc0cc547ecd9c0ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:c0:01:52:b4:72:82:7c:24:76:b8:99:bc:
ed:c6:a5:0f:8a:89:b0:f5:37:33:28:f6:97:0d:b4:
07:0d:53:34:c9:7a:ca:f5:5f:4e:de:c5:16:9c:56:
fb:a1:26:2b:88:61:71:aa:45:80:5b:e5:6c:43:50:
38:b0:84:d4:66:75:7e:50:ec:7e:6f:65:6e:46:56:
6d:9a:22:0a:b3:77:e2:3f:aa:0e:d7:7d:b7:d8:f3:
07:f8:6c:dc:45:a2:d9:90:f1:fc:b6:03:4b:a7:f6:
63:9d:9f:7a:a6:88:95:bc:f6:e5:aa:ba:59:1e:2d:
b3:a1:c9:f6:90:29:3c:f5:34:67:6f:15:a9:52:b7:
24:b6:ab:ac:1d:a3:bd:a3:9a:c3:6c:f6:68:da:c5:
0f:a2:64:e5:a0:2c:54:27:a0:89:1c:6c:19:66:99:
60:c9:46:eb:c0:df:a6:1c:26:be:ae:cf:67:9f:8b:
d9:d1:f3:80:7a:90:f6:4e:77:ca:00:af:15:28:e5:
87:8f:94:59:19:f2:40:3d:04:46:33:35:3b:c6:f5:
44:3d:e3:86:dc:3c:55:e7:d6:24:ae:f4:f4:b9:5b:
6b:4c:76:72:87:fb:5a:61:bf:d3:ae:d1:21:66:26:
ce:c0:dd:ce:b7:6d:9e:70:1f:f6:14:a5:89:19:d2:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7A:20:32:3C:6B:3D:8A:C6:6E:3C:2D:C0:CC:54:7E:CD:9C:0E:E4
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/rnogMjxrPYrGbjwtwMxUfs2cDuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.39.0/24
Signature Algorithm: sha256WithRSAEncryption
59:57:11:9d:7e:8b:64:6d:87:a6:bd:cb:1f:3e:f0:9d:9e:ac:
39:fb:0e:e3:ff:e6:e7:83:53:cb:85:fd:0d:3a:b9:79:af:8b:
ca:12:79:5d:1c:9b:c0:09:87:63:26:f4:36:d8:66:db:e2:73:
de:6c:b1:2f:f7:dc:96:d1:4c:84:55:0c:f9:49:76:d8:5c:07:
5b:59:ef:69:6e:99:8e:8f:d8:4c:97:41:7a:de:14:65:56:43:
58:7c:c3:61:39:1c:3a:e1:ba:fd:90:28:b7:3c:72:36:ba:f0:
d2:fe:6c:a1:81:c8:49:78:f9:3f:61:f5:f3:e7:6f:47:cc:1f:
4f:52:95:e5:96:b3:e6:d4:7a:63:b5:ef:27:23:72:54:63:23:
06:67:aa:22:a6:03:f8:b4:8e:f7:19:31:b7:66:ee:64:82:9f:
2c:72:0a:40:f3:82:25:5c:1d:6b:89:fb:25:dd:0a:3d:58:0a:
a3:3d:13:01:91:42:c5:02:7e:c4:34:d4:fa:af:c7:b9:49:f0:
63:81:dd:12:c4:11:fb:50:f8:3a:52:03:01:e9:85:05:3c:50:
be:ec:13:8c:b2:e8:55:6d:9e:2f:ab:ae:36:15:85:70:6d:d3:
d7:5a:ad:90:e7:a5:b7:a0:31:2c:b1:d3:86:9f:fc:72:58:89:
f9:79:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 03:12:05 2026 by rpki-client