Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/alC0M2rqewLujbKVMB7LiOktrg8.roa
File: alC0M2rqewLujbKVMB7LiOktrg8.roa (raw, json)
Hash identifier: sZNgZ8Tha9mdir4YfVv4bJ4R5xcMRPEjbL+NMqh9Cl0=
Subject key identifier: 6A:50:B4:33:6A:EA:7B:02:EE:8D:B2:95:30:1E:CB:88:E9:2D:AE:0F
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A0E4904327975202E076C9A866A0B0DE51
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/alC0M2rqewLujbKVMB7LiOktrg8.roa
Signing time: Sun 27 Sep 2026 20:30:54 +0000
ROA not before: Sun 27 Sep 2026 20:30:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 130.78.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:90:43:27:97:52:02:e0:76:c9:a8:66:a0:b0:de:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Sep 27 20:30:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a50b4336aea7b02ee8db295301ecb88e92dae0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:1c:7a:40:7f:f4:ac:0a:53:10:e9:0c:ed:
3d:29:2b:1d:01:de:2f:ce:18:1a:71:f3:4c:f6:88:
ea:8a:8e:9f:ee:95:b0:92:fb:a7:90:47:34:dd:6b:
bb:7b:b6:f6:91:e6:18:2a:a6:a6:e5:cb:f7:61:2b:
64:24:c0:68:1a:a6:aa:f4:b9:f1:78:d6:f0:4a:6a:
e8:66:fe:33:36:16:34:8a:93:9d:24:6e:c6:f9:59:
00:82:82:b4:8b:67:a6:15:64:e5:41:5e:0e:d7:cc:
aa:45:9d:bc:98:7b:ec:e9:ef:c7:43:3a:66:2c:f3:
d4:eb:d5:65:36:fc:a9:b7:0c:b9:e4:b4:77:e5:d8:
fc:b9:69:b0:d5:21:e1:9f:2b:ef:e4:d0:4e:f0:c4:
56:bf:ae:32:e5:b2:1e:27:a6:5f:ac:ff:3e:91:be:
ef:90:9d:e6:48:c7:9d:3d:48:f8:21:97:bb:69:b8:
24:34:39:b2:4d:a2:0d:de:f3:da:7f:fe:0a:97:96:
ec:de:94:6a:ba:43:9d:1e:3f:e0:d9:4b:fc:1a:8c:
62:a4:55:9f:47:89:5b:02:89:d9:47:37:c0:b5:b2:
5b:5b:6a:d7:56:ca:5a:6a:37:80:91:2e:63:0a:8e:
bb:2c:2f:6e:4d:d8:06:99:66:77:59:ab:e3:90:86:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:50:B4:33:6A:EA:7B:02:EE:8D:B2:95:30:1E:CB:88:E9:2D:AE:0F
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/alC0M2rqewLujbKVMB7LiOktrg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c0:61:ec:54:57:cc:5d:88:7a:aa:2a:c9:86:de:a1:4c:88:
28:1c:37:b1:b2:25:2f:1d:bf:ea:43:99:a1:2b:e8:09:f1:80:
e8:95:33:de:8a:43:44:45:c8:ec:e2:34:c2:5c:df:88:60:96:
16:44:d0:4d:50:42:f7:9d:98:01:dc:1d:34:4c:07:93:56:cc:
a4:0a:eb:af:bf:96:bb:3c:b3:dd:31:94:b6:ec:48:7b:d8:e1:
28:4f:0e:98:b7:3e:6a:c2:ff:71:65:12:d9:95:46:f8:51:8b:
d1:bf:9a:20:90:1e:68:a5:db:57:ca:ce:ec:eb:7c:24:cb:61:
be:78:01:bc:e6:f6:0e:c0:3f:90:5c:22:ee:c7:4f:d0:24:40:
73:6c:99:4f:14:58:e5:75:e8:fc:bf:c2:e6:74:65:de:db:2d:
08:ba:d7:87:39:83:bf:10:05:52:bd:2f:d0:ba:41:4a:b6:37:
0f:e7:10:d5:20:5c:f0:5d:95:93:72:f5:9a:86:4e:6b:b3:0e:
c3:75:56:23:ba:5a:5d:1c:8f:55:6a:b0:21:54:22:3d:0d:99:
0f:b2:13:c3:be:cd:a9:d3:30:ab:a2:f3:73:ce:22:ad:4e:c2:
4e:3a:2e:4c:f9:70:e5:c3:5a:72:22:d2:36:1c:04:22:c4:88:
4c:3d:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:07:16 2026 by rpki-client