Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/cLCOpcLrqVmnHaehh3BbAtK5rOk.roa
File: cLCOpcLrqVmnHaehh3BbAtK5rOk.roa (raw, json)
Hash identifier: T6yPB+/t7EgMH74tSHW5oIh/RYoGSt5W88BuCuRfuIE=
Subject key identifier: 70:B0:8E:A5:C2:EB:A9:59:A7:1D:A7:A1:87:70:5B:02:D2:B9:AC:E9
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01A1364E1C12E8B4ACAF66CF34ED6B8C8D79
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/cLCOpcLrqVmnHaehh3BbAtK5rOk.roa
Signing time: Tue 13 Oct 2026 17:27:30 +0000
ROA not before: Tue 13 Oct 2026 17:27:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 45.120.176.0/24 maxlen: 24
185.235.240.0/24 maxlen: 24
2a0b:cf47::/32 maxlen: 32
2a11:4c02::/32 maxlen: 32
2a14:3883:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:4e:1c:12:e8:b4:ac:af:66:cf:34:ed:6b:8c:8d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Oct 13 17:27:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70b08ea5c2eba959a71da7a187705b02d2b9ace9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:4c:86:d3:b6:25:c9:6d:b3:ee:3c:f1:20:
45:7a:ad:76:31:e9:cb:a1:a7:55:d2:4e:0e:49:37:
c1:95:69:42:5f:8d:93:87:d3:29:22:d0:b0:10:ba:
62:c8:6c:0f:29:09:9b:f2:5e:70:71:12:1b:71:a5:
cd:fd:ba:86:a9:60:13:9c:e0:71:63:b7:44:28:2d:
16:68:74:51:1d:1a:01:e4:dd:87:b3:f7:83:54:da:
15:76:1e:2d:6a:40:0c:9b:7f:69:34:b8:b3:6a:da:
9a:e6:2e:41:2a:bf:4f:63:29:05:55:f6:89:66:46:
38:0b:25:25:16:08:5a:16:53:c6:91:8c:e1:dd:e6:
49:e6:80:7c:98:7a:2f:54:2b:a7:07:c0:ad:85:c5:
c3:9f:44:03:ba:ff:3c:83:ab:8d:1b:6e:db:16:4f:
69:57:50:9f:73:50:27:53:31:22:07:92:4e:6f:69:
46:a3:1b:27:9d:aa:f3:39:fc:56:6e:4a:ad:f6:62:
7f:9b:5b:8c:a6:de:68:66:70:1e:dc:6c:ed:6c:9c:
a0:5a:d9:e6:b1:d4:9f:a7:3c:e1:91:85:b8:fc:ce:
7d:87:e7:6a:a9:76:31:5f:3e:da:9e:87:17:60:ee:
63:88:bd:65:4c:a0:d0:8e:b0:c2:ab:25:6b:47:7f:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:8E:A5:C2:EB:A9:59:A7:1D:A7:A1:87:70:5B:02:D2:B9:AC:E9
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/cLCOpcLrqVmnHaehh3BbAtK5rOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.120.176.0/24
185.235.240.0/24
IPv6:
2a0b:cf47::/32
2a11:4c02::/32
2a14:3883:1::/48
Signature Algorithm: sha256WithRSAEncryption
87:ed:36:37:4d:0d:a7:ec:4e:6b:c6:d7:4c:41:b1:bf:83:43:
a1:08:2e:0b:28:14:71:c4:58:8e:12:87:47:66:d0:77:b7:c5:
0b:43:1b:c5:15:33:ea:ac:af:6a:f7:13:a7:56:3e:30:90:11:
36:ea:e4:bd:de:99:34:0a:32:1a:c8:7b:00:36:0f:3e:f9:fe:
4e:34:36:68:b8:cc:31:84:ab:62:be:91:03:b7:73:5c:a7:4b:
3c:78:63:42:16:65:e4:b9:2f:ee:27:3b:b4:19:00:72:30:19:
21:a1:c8:ad:ba:fc:a7:af:e2:6f:cb:f9:9b:0d:a6:bf:fe:21:
88:cf:05:a1:0a:20:d4:fd:c7:0e:12:da:96:cd:67:3b:e1:da:
0f:6d:b5:b0:be:2c:9c:d6:8d:d4:d5:67:cc:dc:c0:a3:30:51:
0c:d8:a5:61:7d:a2:42:01:7a:f4:76:d1:82:9d:63:18:83:20:
e2:86:fb:95:61:4a:76:12:15:e9:95:7f:cd:e3:33:98:eb:c6:
d8:88:12:93:ba:59:48:c2:c6:12:4e:63:73:99:66:73:41:bd:
39:9e:55:c3:21:81:3d:2a:8b:07:e3:6e:9d:2a:13:55:d3:f5:
a9:fe:5c:74:1a:dc:68:44:1d:de:60:5f:ad:92:eb:df:f9:a8:
e2:ca:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:52 2026 by rpki-client