Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/0MThwc4dXYxn4L8jsKgRgHG69GU.roa
File: 0MThwc4dXYxn4L8jsKgRgHG69GU.roa (raw, json)
Hash identifier: MKgBpJ/UU/ZtKigtHysf59U625q1r0cBUzNiuUSy1qM=
Subject key identifier: D0:C4:E1:C1:CE:1D:5D:8C:67:E0:BF:23:B0:A8:11:80:71:BA:F4:65
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019FFAF41D89F4823E362CB4CC6EB580485A
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/0MThwc4dXYxn4L8jsKgRgHG69GU.roa
Signing time: Thu 13 Aug 2026 11:48:50 +0000
ROA not before: Thu 13 Aug 2026 11:48:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44400
IP address blocks: 87.248.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:f4:1d:89:f4:82:3e:36:2c:b4:cc:6e:b5:80:48:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Aug 13 11:48:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0c4e1c1ce1d5d8c67e0bf23b0a8118071baf465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:d9:39:32:88:cc:25:c7:60:1e:8b:00:6f:
f6:c1:65:71:fd:4d:1c:18:57:08:0e:61:6a:57:e6:
c0:5e:5c:40:b7:98:8c:c0:ea:d6:0f:c5:d3:23:d2:
db:ec:c9:67:ca:b2:19:92:89:26:55:b3:da:62:63:
23:95:7e:1d:ee:f7:97:7a:eb:3b:d5:e9:cf:6d:83:
d2:63:2c:a1:cf:a1:4f:95:e7:80:f0:94:93:38:a4:
45:68:36:dc:6f:7f:48:1f:e9:8e:17:27:86:14:18:
26:93:12:2b:a3:ca:cd:3b:95:98:8c:e2:f4:60:29:
8d:20:77:50:90:3e:f2:c8:43:c8:1d:fe:39:f2:8b:
6d:ba:05:df:8a:76:21:cc:e3:c5:d8:f8:23:f3:fb:
db:f0:b4:75:39:dd:4c:36:77:6a:1c:fc:8b:02:5b:
0c:69:db:72:90:2c:4b:cc:ec:b0:37:ee:4d:fa:45:
01:d2:62:71:e9:45:0b:47:48:f3:97:5b:cd:02:e0:
84:4b:0a:18:1d:49:33:a6:b8:7f:bc:10:53:27:98:
93:3a:0d:f4:b6:4f:05:8a:22:1f:ec:da:74:60:97:
b8:f4:92:14:36:f7:da:b0:79:66:69:90:96:4e:ff:
04:7f:7f:01:8f:4d:5a:5b:c5:c5:97:9c:f3:49:95:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C4:E1:C1:CE:1D:5D:8C:67:E0:BF:23:B0:A8:11:80:71:BA:F4:65
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/0MThwc4dXYxn4L8jsKgRgHG69GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.143.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9b:cd:84:8a:50:8b:f4:3f:ff:43:90:2b:ee:de:b7:a4:09:
b6:77:3f:8d:00:82:5c:00:ed:69:16:35:35:d8:ca:b0:5f:a6:
1c:e3:34:08:7d:e3:61:b9:75:03:87:1a:aa:b6:e4:e4:27:5f:
c9:51:17:15:62:37:ec:86:24:8f:78:83:a3:cf:eb:cb:7d:52:
ce:9c:43:f0:9a:7a:3e:04:69:70:ca:7b:ed:49:e0:70:52:2a:
3c:bd:11:9f:9d:1e:06:7f:d2:99:d5:73:13:3c:42:29:ec:40:
f7:78:20:71:44:47:9e:e4:1a:4d:7a:3c:f4:45:9c:57:cd:28:
c0:b6:3d:7f:59:6b:c1:af:e0:73:2d:4b:bb:e1:0f:a3:09:ec:
7f:ce:dc:c5:03:ce:0e:15:a0:1f:b1:a0:c0:e7:da:f6:a5:28:
53:c5:14:ce:22:30:52:fb:06:dd:38:aa:ec:b4:5c:bf:f2:28:
36:86:37:3d:2a:f0:cc:19:fb:76:ac:8b:f9:b9:c6:2e:d4:80:
0d:13:ca:92:a4:40:6f:9a:65:71:9c:d2:f8:c3:23:03:11:6f:
17:eb:05:ca:c8:65:04:4d:d5:d3:82:e6:07:ab:a0:3a:38:b6:
7a:83:4c:e2:d3:e4:b2:1a:b4:50:4d:b8:4b:a1:e8:5d:e7:22:
5b:2d:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:27 2026 by rpki-client