Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/shTr56pr7oE1y9_RVTk45Ytfsow.roa
File: shTr56pr7oE1y9_RVTk45Ytfsow.roa (raw, json)
Hash identifier: DRENvU8VxcjVHygVtXOUq+WBhLv7gtzTTAHSYS65qds=
Subject key identifier: B2:14:EB:E7:AA:6B:EE:81:35:CB:DF:D1:55:39:38:E5:8B:5F:B2:8C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01A1205E54664529BCFEC65A8FC43E200F4C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/shTr56pr7oE1y9_RVTk45Ytfsow.roa
Signing time: Fri 09 Oct 2026 11:13:35 +0000
ROA not before: Fri 09 Oct 2026 11:13:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199260
IP address blocks: 82.177.30.0/23 maxlen: 23
195.136.12.0/23 maxlen: 23
195.136.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:5e:54:66:45:29:bc:fe:c6:5a:8f:c4:3e:20:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Oct 9 11:13:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b214ebe7aa6bee8135cbdfd1553938e58b5fb28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:6d:90:cb:f4:4c:0e:21:4e:cc:f0:18:83:
c7:c9:34:35:52:75:5d:8a:56:83:5c:3f:10:ee:dc:
11:aa:f5:58:60:40:80:42:ab:36:42:ac:58:de:20:
f3:59:b4:d8:71:01:7d:14:12:49:72:a6:76:aa:eb:
f2:be:c5:07:75:55:45:14:6e:9b:df:6c:e7:63:45:
55:3f:2e:e8:bd:40:fd:1d:7e:2d:13:08:ae:72:5a:
cb:d3:90:e5:ec:57:c9:59:30:cb:de:be:69:fc:3b:
66:bd:9e:6f:ef:64:b7:c7:5e:67:bc:26:f0:1f:89:
ff:46:6e:b8:50:af:3d:f3:d2:3d:04:08:09:c5:37:
7d:7b:dc:ad:d7:f5:34:aa:8e:6f:70:e3:74:d2:d3:
ee:24:b5:17:bb:4b:a6:92:f5:ea:ba:20:0b:00:01:
e0:a7:f8:e1:6d:5f:e4:56:65:f9:94:f5:03:e1:33:
fe:65:cb:af:e5:8c:6d:c5:5f:9a:3e:73:fa:ae:15:
56:6d:99:7e:db:b4:5b:74:76:a9:6a:40:c8:1c:c5:
1c:9e:c0:ff:2a:18:a9:67:86:ca:02:cc:e2:cc:e1:
b9:a2:3d:b7:07:28:17:c4:d9:a3:f8:5d:ff:51:6c:
20:42:b3:cd:7b:dc:cd:93:b0:99:b6:d2:95:1c:79:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:14:EB:E7:AA:6B:EE:81:35:CB:DF:D1:55:39:38:E5:8B:5F:B2:8C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/shTr56pr7oE1y9_RVTk45Ytfsow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.30.0/23
195.136.12.0/23
195.136.78.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:03:bc:39:38:c3:c6:14:ee:2d:9f:7a:69:b6:fd:70:1e:85:
4f:0b:d6:33:38:e1:c9:49:2a:f9:8c:29:42:2f:6d:1e:86:e8:
6d:eb:11:2d:ac:f0:24:14:4f:25:65:f9:46:bf:1e:64:d8:0d:
4c:37:49:8e:ae:3f:72:38:0e:5e:2a:2b:50:3c:b0:d2:69:5c:
cc:1a:38:6f:6e:9e:63:4c:57:93:bc:be:a6:d0:6f:0b:23:ee:
88:54:bf:d3:c2:4e:81:47:aa:38:00:7f:ff:d3:1e:a8:34:2f:
84:06:84:44:0e:59:fe:78:42:b8:96:6d:ab:8c:ce:22:8f:f9:
09:87:72:92:8b:dc:91:ca:6c:07:fc:8d:06:64:f4:0e:91:b8:
e4:5c:bf:b1:bd:9f:19:23:69:fb:fe:7c:5b:1e:45:23:7a:99:
17:38:b1:80:6f:75:1f:be:af:49:c1:fe:45:35:8b:3f:11:43:
59:9f:47:00:5a:f2:c1:38:c6:16:f6:cd:2f:2e:a9:ec:e5:07:
84:b2:f9:ee:e9:cc:75:74:e0:82:a3:e7:8c:8b:f8:e8:09:b1:
22:60:44:c8:a2:37:be:ce:9e:50:25:0b:db:17:bc:3c:5b:c2:
62:3f:aa:75:32:13:d3:58:41:1b:3e:0a:20:c9:c0:f5:44:d1:
a4:cc:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:12:08 2026 by rpki-client