Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/2sSeFgoeXeBnPC_ZpPZnrMNe_Yw.roa
File: 2sSeFgoeXeBnPC_ZpPZnrMNe_Yw.roa (raw, json)
Hash identifier: jh3bfylqCqw9M7hfFZ/h577WyCqH+ANDZeqpwYgqSgo=
Subject key identifier: DA:C4:9E:16:0A:1E:5D:E0:67:3C:2F:D9:A4:F6:67:AC:C3:5E:FD:8C
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A13C5E925AF3EADA1FC560FC1EC8238D82
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/2sSeFgoeXeBnPC_ZpPZnrMNe_Yw.roa
Signing time: Wed 14 Oct 2026 21:43:13 +0000
ROA not before: Wed 14 Oct 2026 21:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275069
IP address blocks: 91.244.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:5e:92:5a:f3:ea:da:1f:c5:60:fc:1e:c8:23:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Oct 14 21:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dac49e160a1e5de0673c2fd9a4f667acc35efd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:5d:2a:92:77:a8:ef:03:e2:dd:99:02:83:
cb:da:14:c1:21:35:4e:6c:d9:34:a1:1a:7d:8c:39:
be:50:c6:c4:72:f9:48:2c:ba:36:11:0d:fc:34:4e:
be:9e:9e:7a:e8:48:13:b4:5f:d3:50:5f:62:8c:2b:
2e:ea:af:68:24:d8:57:17:34:45:54:c3:7c:f4:95:
7a:e9:ed:ed:ce:5e:2e:c0:5f:be:81:18:d1:5b:b1:
32:f6:49:4f:00:56:86:49:fe:8e:0e:2a:0b:54:da:
37:72:29:2b:0e:29:3d:8a:b3:5c:06:8e:04:af:30:
b5:33:af:99:0d:71:04:73:17:ea:82:8d:ed:b6:10:
82:41:9b:04:8b:08:06:a4:17:5f:e1:d1:e9:bb:d8:
bf:4d:5c:14:da:ba:18:b3:dc:01:0b:2b:4c:42:e1:
13:e5:25:95:9b:8d:c5:9b:d1:5c:c8:ac:08:03:2f:
fb:ee:1c:6c:63:18:95:6e:6f:28:44:f6:68:ba:d7:
d8:20:ab:d5:0d:42:42:50:db:c2:85:c5:c0:4a:1e:
b6:c6:25:be:3e:e7:ad:63:7c:fd:2b:98:37:15:b4:
ec:36:88:bb:ee:fe:e8:0a:fb:f7:11:d3:08:c6:8e:
4d:e9:b1:f5:06:d3:4a:20:05:6e:d1:2b:e3:f9:e4:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C4:9E:16:0A:1E:5D:E0:67:3C:2F:D9:A4:F6:67:AC:C3:5E:FD:8C
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/2sSeFgoeXeBnPC_ZpPZnrMNe_Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.144.0/23
Signature Algorithm: sha256WithRSAEncryption
17:0e:dc:a4:b8:69:78:58:a1:3f:cf:33:ac:68:be:f0:96:5e:
bf:9e:77:f3:b9:8c:7b:43:b8:ef:02:6a:de:cb:5f:e9:d8:1f:
7c:dc:e6:e6:ea:e4:40:af:0c:7c:12:98:04:c5:4a:30:99:c1:
f6:be:6f:2b:c3:a2:af:c7:5e:90:b0:cb:d5:5b:77:5b:06:55:
e6:27:96:59:14:ee:de:7c:e5:20:ce:b0:af:2b:2b:6d:72:30:
1d:57:35:3a:5a:1c:ed:da:d7:b6:43:49:1f:3f:9e:b4:a8:83:
a3:62:65:aa:96:8f:e7:4e:56:ae:17:61:ff:84:c1:64:e5:05:
76:02:23:6e:da:7e:cb:41:94:ad:64:8f:82:c8:22:51:62:41:
2f:ce:b0:2c:8f:31:f9:74:71:45:e9:06:55:ed:16:d5:2d:2b:
12:58:d1:4c:b6:68:6e:1b:1c:ae:af:b6:a8:c6:1a:ac:e4:33:
47:9c:22:7a:89:0f:9a:c3:4e:fe:b4:cc:08:b2:02:b2:66:12:
87:9c:19:ea:7d:95:03:91:25:0c:62:ad:5c:a1:d1:a7:0b:37:
ae:18:67:5b:65:73:21:43:b5:cb:a7:69:2b:69:66:ee:67:07:
ad:ae:57:63:15:f1:f9:db:1e:0d:84:59:ad:5d:d8:d3:56:d1:
ea:74:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:40:00 2026 by rpki-client