Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/1-ana5CiQrlxgeZVaPOpCEh5Bnp8.roa
File: 1-ana5CiQrlxgeZVaPOpCEh5Bnp8.roa (raw, json)
Hash identifier: 1AqJwbwSaXAkBRRP9Cjas8dt7lszAZh0v41o5RR9U9w=
Subject key identifier: F9:A9:DA:E4:28:90:AE:5C:60:79:95:5A:3C:EA:42:12:1E:41:9E:9F
Certificate issuer: /CN=232b2baa219ee1bc4e8bfde212a3f3dbb62901d9
Certificate serial: 01A17D2344D1036D3CCBDEA401116A809461
Authority key identifier: 23:2B:2B:AA:21:9E:E1:BC:4E:8B:FD:E2:12:A3:F3:DB:B6:29:01:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysrqiGe4bxOi_3iEqPz27YpAdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/1-ana5CiQrlxgeZVaPOpCEh5Bnp8.roa
Signing time: Tue 27 Oct 2026 11:33:45 +0000
ROA not before: Tue 27 Oct 2026 11:33:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44743
IP address blocks: 148.160.64.0/18 maxlen: 18
148.160.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysrqiGe4bxOi_3iEqPz27YpAdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:23:44:d1:03:6d:3c:cb:de:a4:01:11:6a:80:94:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b2baa219ee1bc4e8bfde212a3f3dbb62901d9
Validity
Not Before: Oct 27 11:33:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9a9dae42890ae5c6079955a3cea42121e419e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:6c:3f:cd:87:d9:c2:ad:98:4e:87:a5:37:
85:3f:5c:e5:02:00:f7:46:06:95:71:9c:c6:f2:2e:
71:3e:d9:0a:21:d0:1d:ce:b4:c5:a3:81:94:e8:9c:
72:e2:2f:9b:5a:66:dc:ba:bf:62:34:5a:be:cf:f4:
d3:82:d3:41:e0:f8:0d:43:55:83:54:5f:bb:f6:fc:
21:8c:ab:60:27:3f:8f:d4:79:51:97:0a:4c:bd:d0:
7f:26:94:2a:5f:03:f3:cc:10:ec:2b:6c:7a:1d:d2:
31:cd:1c:59:70:3d:0d:6a:79:e0:0c:ed:09:9d:4f:
b7:20:44:a8:41:72:c1:7b:88:97:76:52:33:8e:22:
91:07:89:47:66:6b:7e:41:30:89:37:95:ef:2a:6e:
dd:c9:2f:f7:ae:8e:60:ea:a9:38:bd:05:be:92:a8:
33:af:d7:86:13:11:ff:49:93:ba:51:ba:41:6c:5e:
17:36:a2:3d:c1:84:88:39:0e:df:69:4f:8e:9c:83:
3e:1d:2f:70:44:b9:59:4e:3f:ab:1b:d0:40:f1:f6:
88:bc:61:a6:d5:dd:1c:e4:c0:66:85:2a:8f:7e:27:
ab:36:6b:f4:ea:ff:bf:96:0f:8d:74:8d:08:a4:e7:
b8:59:82:35:bf:28:7d:6f:09:e7:1b:35:67:50:50:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:DA:E4:28:90:AE:5C:60:79:95:5A:3C:EA:42:12:1E:41:9E:9F
X509v3 Authority Key Identifier:
keyid:23:2B:2B:AA:21:9E:E1:BC:4E:8B:FD:E2:12:A3:F3:DB:B6:29:01:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysrqiGe4bxOi_3iEqPz27YpAdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/1-ana5CiQrlxgeZVaPOpCEh5Bnp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.160.64.0-148.160.191.255
Signature Algorithm: sha256WithRSAEncryption
2c:b6:28:41:43:17:0d:9e:04:a9:6f:80:89:00:cc:20:20:7d:
be:92:ac:be:b2:4a:7e:ba:72:63:fa:25:50:76:91:1c:f7:99:
14:37:57:8b:3a:45:35:bc:69:31:50:01:9c:ea:c6:99:69:5d:
07:1c:2c:6a:19:21:da:75:09:79:36:0f:c2:f6:4d:e5:7f:bc:
79:3d:63:27:a7:b7:39:d8:05:47:31:91:9c:36:18:00:7f:ea:
d9:59:36:5a:1d:0e:f6:69:b3:40:55:72:64:05:af:1a:2e:8b:
cf:d7:c5:33:74:04:69:b1:a3:40:63:f4:0d:b4:18:ea:e7:f9:
d4:6d:c9:a2:02:e7:8b:f5:20:de:c6:b1:38:41:2d:fd:e6:39:
49:07:56:11:a7:18:c9:45:c2:75:52:a0:26:ec:8b:ad:5c:66:
62:3b:a3:be:02:2d:ad:4b:d3:9b:36:ff:1f:b1:7b:0f:b3:b1:
b2:1f:3b:2d:b5:c8:0c:dd:f8:3d:4e:a1:53:d1:c5:b8:69:db:
f3:7d:6b:67:5d:9f:a1:d5:52:3f:9b:1d:0f:0b:79:4f:7f:82:
5f:c7:65:00:bb:2d:51:f7:21:1f:70:af:21:33:8a:8f:f6:81:
cb:d6:37:d4:17:e1:fe:a1:76:b7:67:78:28:96:c3:dc:13:da:
46:15:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:41 2026 by rpki-client