Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/1-2JjIT0BwXXkcTzYPbr5zBDkfow.roa
File: 1-2JjIT0BwXXkcTzYPbr5zBDkfow.roa (raw, json)
Hash identifier: ncYR/OKiwuyY7imRGcoS/IlBlOuZd2foTSLpO4T1c/Y=
Subject key identifier: FB:62:63:21:3D:01:C1:75:E4:71:3C:D8:3D:BA:F9:CC:10:E4:7E:8C
Certificate issuer: /CN=232b2baa219ee1bc4e8bfde212a3f3dbb62901d9
Certificate serial: 01A15908D7861CEF5D0229E394BFEB0BB813
Authority key identifier: 23:2B:2B:AA:21:9E:E1:BC:4E:8B:FD:E2:12:A3:F3:DB:B6:29:01:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysrqiGe4bxOi_3iEqPz27YpAdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/1-2JjIT0BwXXkcTzYPbr5zBDkfow.roa
Signing time: Tue 20 Oct 2026 11:18:33 +0000
ROA not before: Tue 20 Oct 2026 11:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205574
IP address blocks: 148.160.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysrqiGe4bxOi_3iEqPz27YpAdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:08:d7:86:1c:ef:5d:02:29:e3:94:bf:eb:0b:b8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b2baa219ee1bc4e8bfde212a3f3dbb62901d9
Validity
Not Before: Oct 20 11:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb6263213d01c175e4713cd83dbaf9cc10e47e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:ed:fa:a2:0c:5f:2d:2b:04:b8:29:cd:e2:
4a:37:ac:f6:02:11:4f:8f:f7:be:c0:53:d1:18:47:
76:f4:5a:97:1a:fe:85:79:87:ea:3c:d5:3a:1f:62:
43:d5:67:f3:f3:0d:c6:0d:f0:f0:54:59:c9:88:eb:
f6:1e:18:9b:63:ce:c3:ef:dd:a6:7d:94:59:b9:78:
de:d6:13:fc:89:75:b0:9f:b2:89:b4:7a:cd:09:1e:
5e:73:35:78:d2:43:b3:c6:cc:7f:dc:20:b7:15:e3:
7a:6f:3e:86:08:36:32:a7:b3:19:f3:f7:5e:1a:c8:
ec:0d:2a:a3:4f:47:fb:c5:f6:16:51:a2:aa:e0:73:
99:fe:40:e3:3b:9c:d8:4b:ef:62:94:46:56:6e:a5:
92:c0:1c:8f:49:ff:1d:b1:31:60:3d:a9:db:76:7e:
59:ec:54:ce:f5:7a:72:9c:7c:66:a0:d9:e7:14:e3:
86:c5:e1:55:68:d6:c6:4e:a4:d3:c3:ea:b3:96:3c:
44:e3:5e:f8:62:22:d8:33:9b:28:96:94:69:b0:a6:
63:53:7e:7c:95:b1:f8:d6:72:30:0b:40:63:b0:a8:
c8:9a:9f:40:93:2c:41:2b:84:a8:91:a0:98:ab:48:
61:2f:b7:c6:42:32:87:17:05:a1:e2:e1:98:1a:c8:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:62:63:21:3D:01:C1:75:E4:71:3C:D8:3D:BA:F9:CC:10:E4:7E:8C
X509v3 Authority Key Identifier:
keyid:23:2B:2B:AA:21:9E:E1:BC:4E:8B:FD:E2:12:A3:F3:DB:B6:29:01:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysrqiGe4bxOi_3iEqPz27YpAdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/1-2JjIT0BwXXkcTzYPbr5zBDkfow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.160.240.0/20
Signature Algorithm: sha256WithRSAEncryption
76:15:86:1a:af:e7:b4:a7:48:be:bd:e2:5f:1a:6f:dc:79:bc:
9e:64:61:3b:ee:88:aa:b5:09:7b:5e:f9:f5:d3:c6:da:02:cf:
5e:a2:07:0e:e6:bc:8d:1a:33:d5:f2:4c:7c:cd:8a:3b:d8:78:
d4:e4:81:85:35:e7:7f:93:66:53:2d:8a:b9:c2:db:b2:e5:26:
ac:34:98:44:c5:5c:26:ec:5d:e9:b4:42:d3:18:87:34:ad:87:
e6:85:ca:f5:24:85:98:e4:0b:d3:71:06:dd:3a:26:ef:2c:86:
21:fd:ec:72:33:b5:e7:60:54:87:e5:33:85:5e:4b:4b:51:5c:
ee:35:a5:f1:d0:e5:6b:61:b7:3d:cc:98:3c:a3:60:99:4b:38:
27:91:5f:fb:e3:68:f9:38:7b:f7:f8:d4:94:7d:45:9c:ca:dc:
be:12:52:06:17:14:ae:23:d7:91:d7:1a:b0:7f:1a:4d:80:ed:
84:b9:3d:98:10:8f:be:ac:dd:2e:d3:70:12:35:ef:cc:f9:71:
d4:a3:dc:c2:3f:99:29:bb:87:b5:41:0a:3b:46:52:0d:2a:95:
2e:48:64:95:05:ab:78:79:0a:06:cb:78:ef:cd:a9:87:f3:3e:
c5:ca:5c:02:7e:da:9e:aa:f0:c4:9d:de:72:23:17:13:16:4d:
20:72:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:50:21 2026 by rpki-client