Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa
File: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (raw, json)
Hash identifier: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=
Subject key identifier: BE:8F:65:F0:09:79:F8:5D:F1:C4:8F:C4:ED:EA:12:A1:D2:A7:CE:64
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0618E0DC9E9247F9E2ACB53C4EC5BB986
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa
Signing time: Wed 02 Sep 2026 09:58:14 +0000
ROA not before: Wed 02 Sep 2026 09:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 192.145.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 09:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:8e:0d:c9:e9:24:7f:9e:2a:cb:53:c4:ec:5b:b9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 2 09:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be8f65f00979f85df1c48fc4edea12a1d2a7ce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:bc:06:ed:af:65:53:4c:80:db:e8:ed:7e:
4b:04:c0:3f:7b:5a:f5:46:1a:4a:f7:0d:33:25:47:
9c:32:f3:18:fe:41:47:7c:09:bd:0e:b1:72:d7:f9:
77:93:63:23:c7:80:c2:9c:df:15:80:72:c5:1e:42:
e6:a2:2a:23:94:c2:0b:08:1e:80:a8:52:fd:ac:3b:
0a:05:68:6f:9d:55:80:ca:6d:57:d5:d8:3b:2c:0e:
25:c5:83:ff:87:38:7d:4f:c8:92:31:46:0c:97:e6:
9f:79:3a:0b:ef:fd:59:44:60:1a:ce:89:b5:c6:c2:
5e:01:15:4a:dd:88:df:e1:64:44:91:15:7f:36:6c:
f9:b4:5e:b8:0f:2a:55:ce:e1:f0:09:e4:2e:a3:d9:
6c:aa:ab:ce:53:e9:cd:9a:47:e9:ac:80:bb:41:78:
ef:ba:3e:97:79:d8:6e:67:22:8d:1e:55:99:4b:e5:
c5:fd:a9:77:c0:c5:c9:f9:3b:44:0b:0f:a2:81:6f:
e9:ef:8a:f9:9c:61:4e:4f:f8:98:d1:61:95:ff:4a:
98:df:f9:6a:2b:83:38:ce:85:78:56:f7:ab:50:90:
31:76:21:47:f6:98:ac:e1:49:03:95:64:0f:d3:a5:
bd:bb:fa:f1:c9:6c:a2:d5:51:66:14:a2:0d:d9:98:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:65:F0:09:79:F8:5D:F1:C4:8F:C4:ED:EA:12:A1:D2:A7:CE:64
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.55.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4b:19:d4:77:59:95:92:c1:55:22:d2:35:52:e2:73:3e:1a:
60:5a:7e:e8:9a:c6:a9:4d:9c:64:f9:2b:ae:a5:21:cc:be:fc:
53:63:ae:d8:b4:4b:10:99:82:20:72:90:41:58:29:e3:ec:a6:
49:4c:92:ef:6e:a8:ec:90:0d:b7:ea:e1:89:0e:a4:86:55:4d:
19:83:7d:74:ff:27:0e:e6:71:6a:89:da:fd:67:80:4e:da:d8:
8e:7b:4a:5a:eb:b3:f4:3e:31:31:1d:80:ec:80:03:4d:f8:55:
03:61:d2:67:c6:df:8e:5a:02:42:b2:f3:27:da:65:32:9e:1f:
79:2c:00:61:e5:4e:d3:7d:31:cf:e7:71:fc:7d:62:94:69:51:
7d:60:5d:9a:24:f1:0b:f7:66:ce:80:2f:24:ec:36:0a:72:da:
44:d5:9d:47:cd:38:67:b6:10:f4:0f:fc:96:eb:4b:b6:13:d6:
26:f8:e2:7b:ce:71:df:c2:98:ae:81:ca:ff:7d:3a:a1:62:04:
2d:fc:8a:3b:2b:6b:e2:3a:31:b5:51:c0:8c:38:5c:6e:05:3a:
7d:e4:6e:b3:9b:c0:ac:2e:ef:82:f9:43:5f:8f:0b:dd:40:96:
96:ab:db:26:2b:d1:25:a7:13:d4:e2:5c:2b:a1:b3:44:4a:13:
cf:c3:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 13:15:55 2026 by rpki-client