Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/I0U-n6ij_E870CQBDOaGeOhej2Y.roa
File: I0U-n6ij_E870CQBDOaGeOhej2Y.roa (raw, json)
Hash identifier: hZRjWG1Kxq1kukSnPcqLljrO3mt49DdsqA94QvEP7x0=
Subject key identifier: 23:45:3E:9F:A8:A3:FC:4F:3B:D0:24:01:0C:E6:86:78:E8:5E:8F:66
Certificate issuer: /CN=d063f776b70815208e4c62dc734db3d4aa90aa8c
Certificate serial: 01A11C65E06962CD53F0CC6591548723110F
Authority key identifier: D0:63:F7:76:B7:08:15:20:8E:4C:62:DC:73:4D:B3:D4:AA:90:AA:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GP3drcIFSCOTGLcc02z1KqQqow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/I0U-n6ij_E870CQBDOaGeOhej2Y.roa
Signing time: Thu 08 Oct 2026 16:43:20 +0000
ROA not before: Thu 08 Oct 2026 16:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 130.159.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/0GP3drcIFSCOTGLcc02z1KqQqow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/0GP3drcIFSCOTGLcc02z1KqQqow.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GP3drcIFSCOTGLcc02z1KqQqow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:65:e0:69:62:cd:53:f0:cc:65:91:54:87:23:11:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d063f776b70815208e4c62dc734db3d4aa90aa8c
Validity
Not Before: Oct 8 16:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23453e9fa8a3fc4f3bd024010ce68678e85e8f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:39:ce:40:91:ff:1e:12:49:9e:7a:d9:bb:
b6:4d:24:d6:dc:c3:5f:c7:a0:5d:7e:0e:b7:8a:b6:
0f:1e:f7:1b:3f:f5:f5:4e:22:8c:6d:c9:d3:fe:61:
1e:36:51:04:61:94:c8:45:b6:30:31:1c:8e:88:52:
e1:3b:d9:5a:f3:bc:68:00:e6:f8:9b:b6:ed:17:33:
9d:f8:e8:9c:f0:e5:c1:1c:c2:bd:cc:6d:43:d0:23:
c6:8e:48:c6:e9:6c:8c:46:09:3d:e5:fc:5a:6b:87:
13:e1:97:0c:29:3c:25:28:14:30:fb:8a:c1:01:de:
ed:b9:a1:21:48:a7:d3:3d:25:bc:b7:2a:62:45:31:
c9:ca:a1:1d:5d:64:68:39:fb:dd:70:2f:ef:bb:81:
cf:92:b9:61:14:fa:48:4f:71:d0:61:dd:4f:53:99:
b0:9c:98:f9:07:82:48:2a:0b:d5:4f:1f:c6:31:95:
5b:ce:4f:f3:cd:1e:c8:19:b8:72:1c:50:b1:f6:67:
54:89:b1:19:bb:22:1a:b4:ab:69:18:0d:81:ee:46:
1c:41:15:4b:14:00:80:7e:b4:16:d8:ee:29:17:22:
76:a7:dd:f4:3e:c1:dd:96:81:15:64:4e:42:47:41:
10:a5:8a:21:08:74:da:b0:a1:e8:dd:8e:62:4f:7e:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:3E:9F:A8:A3:FC:4F:3B:D0:24:01:0C:E6:86:78:E8:5E:8F:66
X509v3 Authority Key Identifier:
keyid:D0:63:F7:76:B7:08:15:20:8E:4C:62:DC:73:4D:B3:D4:AA:90:AA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GP3drcIFSCOTGLcc02z1KqQqow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/I0U-n6ij_E870CQBDOaGeOhej2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/0GP3drcIFSCOTGLcc02z1KqQqow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.159.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:42:aa:52:40:03:9b:06:f6:bd:7b:07:ab:2a:df:07:95:12:
f3:d1:db:4c:57:6d:75:31:5a:d6:99:db:c0:6e:40:11:8e:92:
67:55:50:78:82:73:34:a0:51:d0:f8:77:8c:21:41:cd:98:7e:
f4:9b:e4:3d:65:85:2f:87:24:f1:a1:07:5e:d1:cc:aa:4f:cb:
d3:a6:66:b7:a1:2a:9d:4d:ea:c6:33:7a:42:9d:0c:10:c5:d7:
d1:3d:7b:22:b9:75:23:c8:d4:7d:46:b0:e7:57:5f:dc:4b:98:
cb:c6:5e:3f:11:80:e7:a1:79:c1:44:3e:ab:5c:d5:e5:f9:45:
28:86:c1:30:4d:78:7c:82:3a:fc:f5:34:76:fe:d1:1c:09:0f:
84:55:49:86:e2:e3:29:25:27:1e:8e:cb:cb:96:70:c4:7f:f7:
c0:22:c4:f3:b2:29:8d:87:d0:63:31:eb:91:c1:31:e6:bd:dc:
66:1b:ab:02:27:c5:7d:e8:92:b9:ae:3c:91:03:ff:47:d2:85:
69:0e:53:d3:3d:9d:e5:17:a8:f1:b9:c1:f1:e4:43:32:bd:4a:
1d:20:13:a0:1b:79:c9:2a:30:06:20:61:f0:76:5e:ea:23:8d:
e6:7c:e3:dc:b0:ad:2d:80:00:9b:7a:af:bb:1f:93:29:47:20:
98:cc:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:43 2026 by rpki-client