Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/lozJVt5PTJgoxqIDrMsMqD459_s.roa
File: lozJVt5PTJgoxqIDrMsMqD459_s.roa (raw, json)
Hash identifier: 7HzUYIBhWv2/Wi7E4WC/t2CSKq5N2SC1HBKlz4UBQdI=
Subject key identifier: 96:8C:C9:56:DE:4F:4C:98:28:C6:A2:03:AC:CB:0C:A8:3E:39:F7:FB
Certificate issuer: /CN=889b73d4ce9453b7b431f92c46e429b8f6dc9a26
Certificate serial: 01A15A401F26EB6A65560CA37CD09006D8DB
Authority key identifier: 88:9B:73:D4:CE:94:53:B7:B4:31:F9:2C:46:E4:29:B8:F6:DC:9A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/lozJVt5PTJgoxqIDrMsMqD459_s.roa
Signing time: Tue 20 Oct 2026 16:58:34 +0000
ROA not before: Tue 20 Oct 2026 16:58:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19527
IP address blocks: 146.247.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:40:1f:26:eb:6a:65:56:0c:a3:7c:d0:90:06:d8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889b73d4ce9453b7b431f92c46e429b8f6dc9a26
Validity
Not Before: Oct 20 16:58:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=968cc956de4f4c9828c6a203accb0ca83e39f7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:6d:ec:77:c9:b2:57:d4:bf:74:c5:c9:43:
d7:36:41:78:fe:54:dc:e6:e4:14:f7:a2:b3:d3:63:
a0:38:36:f9:7c:af:32:ba:64:eb:7d:36:4d:8d:1f:
d5:aa:ab:d2:73:25:02:19:93:74:10:45:1a:94:95:
21:ed:69:d2:48:a9:66:8c:11:53:f6:8b:08:8b:6e:
60:92:97:42:b9:0f:17:4c:bc:4f:78:3b:91:76:64:
4f:15:63:ac:c3:82:79:97:ad:7b:a1:c5:c3:16:65:
c1:23:51:d7:10:0e:be:e6:48:e5:84:70:c3:19:c2:
22:88:2d:3d:a9:f1:e3:f7:ee:c8:f9:11:83:5d:f8:
2b:14:e3:45:1b:3f:4d:28:d9:b0:ea:c2:b7:9d:af:
76:10:38:5c:d6:b5:0d:2c:fc:06:4b:2a:b0:8f:8f:
f4:6b:fb:a5:7f:85:f6:c5:fe:5d:00:d8:3e:93:1d:
bc:4b:74:d9:a8:37:13:96:68:29:f7:73:14:e1:35:
b4:f8:ca:a8:59:32:f3:14:12:45:48:8a:27:d1:63:
9b:3b:bf:2f:42:ce:dd:e0:95:83:63:20:1c:11:05:
86:db:bf:8e:ca:1f:25:39:ae:9e:58:e8:82:25:92:
ba:0f:d6:67:37:1d:fb:36:16:ad:65:b0:5b:c6:57:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:C9:56:DE:4F:4C:98:28:C6:A2:03:AC:CB:0C:A8:3E:39:F7:FB
X509v3 Authority Key Identifier:
keyid:88:9B:73:D4:CE:94:53:B7:B4:31:F9:2C:46:E4:29:B8:F6:DC:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/lozJVt5PTJgoxqIDrMsMqD459_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.40.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:e3:31:45:49:6b:29:76:46:88:c2:c8:e4:f8:27:e8:b9:ed:
70:dc:0e:3b:63:17:ec:5d:5e:0d:e5:dc:fd:01:82:8b:6b:76:
89:9d:25:2c:89:3b:cf:a4:67:22:7d:91:a5:b0:f2:53:fa:b7:
31:f8:6f:0b:f2:ba:9c:d8:25:80:2e:5f:d3:53:dc:ab:22:ec:
57:b0:3f:6c:4b:ae:c7:57:bf:23:5d:d1:c1:1c:9a:e5:2e:0d:
2c:1f:18:94:92:12:fd:82:d3:8c:82:2d:aa:ea:75:70:78:c5:
4b:e3:db:93:ad:b5:0f:17:f7:f8:d0:bb:e1:c2:2c:11:84:3e:
45:cc:58:f4:65:f7:82:07:96:f1:54:bf:77:f2:73:2d:48:14:
77:69:c9:cd:b2:67:3a:6f:28:bd:8b:0e:f7:6d:ff:9f:d8:fd:
1f:ea:6a:56:a7:74:dd:f9:5e:00:50:86:a8:ba:0a:ff:da:55:
0f:8d:f2:f0:37:36:2d:c8:43:47:f3:2f:86:f6:15:58:50:93:
32:b1:97:29:64:06:ba:eb:93:e2:ec:e9:a7:dc:17:ab:2a:44:
b4:03:b5:ac:e9:3b:e7:5e:d0:86:a1:84:5e:62:a4:b0:7e:c4:
e4:81:a2:9f:ee:0c:18:54:8d:d5:63:ee:69:0a:76:9d:65:34:
9f:4c:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:54:53 2026 by rpki-client