Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/1-_jpSCMph4YEFnDVZXKeinAa4rs.roa
File: 1-_jpSCMph4YEFnDVZXKeinAa4rs.roa (raw, json)
Hash identifier: koPlDtTY0MG8fOQfuLdRSQ8TOcKCr1znZMqSXkyLo5c=
Subject key identifier: FB:F8:E9:48:23:29:87:86:04:16:70:D5:65:72:9E:8A:70:1A:E2:BB
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 01A04373ADB3051BF9CDF14F18DC96BC8958
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/1-_jpSCMph4YEFnDVZXKeinAa4rs.roa
Signing time: Thu 27 Aug 2026 13:40:49 +0000
ROA not before: Thu 27 Aug 2026 13:40:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214123
IP address blocks: 81.172.68.0/24 maxlen: 24
81.172.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:73:ad:b3:05:1b:f9:cd:f1:4f:18:dc:96:bc:89:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Aug 27 13:40:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbf8e94823298786041670d565729e8a701ae2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:04:08:3a:56:ef:73:81:9e:54:a1:e3:1c:
05:17:bb:69:9f:19:3a:dd:c9:33:3c:be:18:59:fb:
b1:c0:1b:07:48:f6:61:50:ad:da:60:45:ce:fe:66:
f5:7c:01:7a:f8:ad:1e:38:e6:8f:f1:c9:94:52:18:
a4:a0:af:b4:41:1a:14:52:45:dc:59:6f:a9:27:44:
0a:34:60:7d:d9:83:6f:a8:b9:51:42:74:1f:d8:42:
7a:38:f7:f1:56:60:98:0c:9d:56:a1:71:dc:32:4c:
d4:e1:2c:24:4f:9f:12:fb:a2:87:06:7b:35:4f:7f:
79:4d:cb:bf:93:c6:e8:56:99:00:a3:88:12:0d:fe:
45:6e:88:5e:37:6e:96:ab:ee:a0:e5:56:15:71:67:
89:54:9a:b9:be:c9:ce:a3:4a:cf:f2:42:02:17:05:
1c:a2:09:f0:28:a8:4e:e8:01:5f:11:35:51:fe:b9:
f4:1a:dc:d0:e8:b0:8d:be:fa:4c:27:c0:68:3b:47:
ea:f6:af:9b:66:7e:c5:11:3b:a9:9f:73:36:f3:83:
51:25:d2:6e:4d:b3:c0:d2:a4:3b:25:60:e1:ce:5d:
9a:c5:1e:06:51:21:26:44:9a:eb:a2:09:01:3f:60:
d0:b2:df:93:f5:2a:ed:25:b3:55:51:67:6d:fe:ae:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F8:E9:48:23:29:87:86:04:16:70:D5:65:72:9E:8A:70:1A:E2:BB
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/1-_jpSCMph4YEFnDVZXKeinAa4rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.172.68.0/23
Signature Algorithm: sha256WithRSAEncryption
e3:bb:de:08:fa:31:59:02:06:00:55:9c:1d:55:34:25:91:a4:
3b:98:18:51:90:d2:f7:c0:03:1b:81:62:b0:ed:9d:9d:8a:17:
13:33:fb:bb:74:1d:72:2f:6e:1f:62:63:90:d8:7f:82:69:fc:
91:db:81:7b:c5:77:17:dd:89:74:23:b4:2d:52:e8:a0:05:8f:
62:01:c3:1b:e1:66:ae:54:0f:67:0d:36:2e:a7:76:46:00:10:
12:2b:77:26:d6:be:09:9b:39:d5:aa:f7:0e:c7:a7:04:ac:8a:
29:b8:39:5f:fc:fb:31:99:76:b7:a6:76:ec:d8:54:e5:7c:da:
29:81:62:34:a7:ba:38:1d:2c:a6:87:40:86:35:58:06:71:60:
da:36:44:2f:15:81:d0:15:6d:27:60:5c:b5:1a:bc:2b:de:8d:
a0:6e:fb:80:e4:79:c8:6d:8d:97:0a:53:f6:d5:5f:2a:78:6e:
bf:e9:1c:fe:3e:3c:75:ce:76:00:62:1e:b0:fd:ef:f0:38:f6:
bd:fc:39:f8:40:e0:8e:56:37:66:08:ef:0b:c4:cf:e1:da:49:
07:98:67:30:d4:63:94:70:4e:88:e5:49:84:4d:5a:c6:73:9e:
ef:5c:2e:bf:4d:3a:95:b3:e6:44:ab:3f:bb:48:c6:e5:fa:1a:
73:0c:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:52 2026 by rpki-client