Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/mABdC4sifQqhRdxMOFa-Ctsas2o.roa
File: mABdC4sifQqhRdxMOFa-Ctsas2o.roa (raw, json)
Hash identifier: sCV3vtRpfWJ0sLSwFp/AwXiPFmfCb0hYphniy0WXGSE=
Subject key identifier: 98:00:5D:0B:8B:22:7D:0A:A1:45:DC:4C:38:56:BE:0A:DB:1A:B3:6A
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A18662BB2B3BE964CD1D7C3184B3990C14
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/mABdC4sifQqhRdxMOFa-Ctsas2o.roa
Signing time: Thu 29 Oct 2026 06:39:39 +0000
ROA not before: Thu 29 Oct 2026 06:39:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 168.199.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:62:bb:2b:3b:e9:64:cd:1d:7c:31:84:b3:99:0c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 29 06:39:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98005d0b8b227d0aa145dc4c3856be0adb1ab36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:40:36:de:01:6a:19:97:23:52:3d:28:72:
02:95:c2:bc:d8:b0:d5:12:a3:d9:c7:4c:9a:64:69:
b6:9f:7b:5b:a1:06:f5:d6:59:1b:13:b6:91:bb:2d:
e3:85:36:73:87:66:0b:82:bc:d7:ce:68:af:d3:70:
58:46:d9:3a:8a:e9:4d:42:13:3f:31:57:f0:0e:27:
eb:96:96:d2:5d:7f:41:18:54:32:02:84:5d:e1:0b:
dd:e8:c7:40:e1:35:d7:c4:2e:d1:03:4d:87:52:27:
57:e3:6f:4a:63:1e:85:f9:f6:28:ad:d7:a4:ce:43:
78:31:c0:62:71:31:a9:3b:fb:1f:f4:96:8d:97:8d:
6f:54:7d:25:93:dc:84:01:3a:44:cb:41:b9:35:6b:
ee:b8:0d:cf:3a:ed:57:d2:af:bc:e1:a5:2d:af:44:
63:49:42:d3:c4:a0:93:08:e6:04:a0:d2:7a:b6:fb:
4f:49:e7:17:40:41:44:86:3c:34:b7:3b:fb:4b:69:
36:1d:66:f4:51:10:79:20:fc:db:08:65:26:aa:54:
e0:2c:9f:30:40:fa:e0:be:7d:b5:79:9c:a0:ef:d3:
45:4c:89:ca:54:5d:0a:d5:98:19:97:61:6c:74:42:
4c:3a:ec:b6:c8:9d:ab:42:a0:fb:56:8c:94:e0:03:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:5D:0B:8B:22:7D:0A:A1:45:DC:4C:38:56:BE:0A:DB:1A:B3:6A
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/mABdC4sifQqhRdxMOFa-Ctsas2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.137.0/24
Signature Algorithm: sha256WithRSAEncryption
94:39:eb:10:8e:b3:56:e2:9a:dc:ae:24:cb:36:9a:c0:45:4d:
f4:de:cc:88:04:10:17:76:53:ed:40:49:1c:5c:ed:98:9e:7c:
ba:39:26:89:11:54:8c:4c:30:cc:be:8c:2f:82:9c:54:76:c9:
f6:9a:84:cd:e2:46:2f:f8:c4:fb:f3:37:8b:44:d5:41:1c:65:
89:e9:36:3b:16:a9:a2:44:67:63:02:13:59:20:04:49:65:a4:
33:71:2a:90:36:30:73:89:ea:6d:3d:62:7e:bf:57:56:c5:1e:
39:00:06:0b:92:44:59:10:65:be:1a:76:60:08:a9:7e:cf:45:
be:f3:99:29:e5:2a:d8:ab:17:3f:31:e3:52:49:1e:f5:4c:c7:
c0:cd:8c:af:aa:82:ac:6b:f3:d9:bd:e7:3a:ea:d2:b2:7f:50:
80:77:50:9d:9e:e1:6f:13:03:fd:2d:00:50:0c:96:05:c4:5c:
86:64:66:69:4a:b6:1d:d3:fa:f6:f2:f6:f8:52:20:0e:80:d8:
c4:27:ce:77:e1:66:1c:09:b8:42:e9:97:58:46:70:b9:a1:21:
73:20:97:c8:ea:d5:b3:04:5f:f7:ec:69:76:48:fc:8b:a7:06:
10:b4:4b:3e:a7:66:9f:a5:39:7a:5c:a2:91:a1:f5:51:97:fc:
49:ba:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:34 2026 by rpki-client