Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/aAk0W1JZdu-pSXtB24UQsKa894E.roa
File: aAk0W1JZdu-pSXtB24UQsKa894E.roa (raw, json)
Hash identifier: 4HKFjy30UlWM45M8o5ZyKGJnhEjFtDRcAFZMCQ5Qv9o=
Subject key identifier: 68:09:34:5B:52:59:76:EF:A9:49:7B:41:DB:85:10:B0:A6:BC:F7:81
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A10B228EC3E1126AA30BA0A72B7FACF1D8
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/aAk0W1JZdu-pSXtB24UQsKa894E.roa
Signing time: Mon 05 Oct 2026 08:16:16 +0000
ROA not before: Mon 05 Oct 2026 08:16:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 176.126.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:22:8e:c3:e1:12:6a:a3:0b:a0:a7:2b:7f:ac:f1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 5 08:16:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6809345b525976efa9497b41db8510b0a6bcf781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:a8:e5:48:56:f1:1b:4e:44:66:10:e0:7d:
0e:81:f7:d8:5e:6a:39:e3:12:3c:96:89:ed:4f:59:
e3:58:31:93:fc:8f:4a:3f:91:50:49:a2:1d:70:ab:
2b:bb:4c:ee:9d:78:60:0d:8c:9e:11:b5:90:f6:30:
3f:c6:50:71:9b:66:99:54:ff:bc:b0:ab:42:06:c8:
01:c6:12:4b:91:dd:72:17:a1:81:21:c4:24:46:96:
00:9f:3e:be:48:ac:10:b8:be:71:2c:04:c1:be:2c:
59:f1:3a:8c:71:0c:ad:35:f7:dd:93:37:3c:38:53:
d2:fb:ee:55:c6:fd:d4:84:4e:62:d2:e7:1c:d4:e7:
c4:ff:c6:95:38:8f:7f:30:b8:52:88:8f:f1:b5:23:
2d:e5:be:11:80:a2:58:66:42:41:34:14:49:55:d7:
08:51:04:35:c2:c1:69:ef:6e:3a:32:96:c6:79:16:
3c:d0:7b:c2:14:2d:94:00:88:37:3f:17:76:9f:dc:
ed:44:00:9b:86:1f:18:19:f8:9c:84:58:c7:98:3c:
92:90:c6:2c:91:b8:85:a4:44:db:10:a5:ff:af:c5:
fa:f0:bc:13:76:dd:1c:22:db:e5:27:cc:b0:b4:2e:
b0:1b:e3:be:7e:c5:00:90:ef:99:0b:48:95:23:31:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:09:34:5B:52:59:76:EF:A9:49:7B:41:DB:85:10:B0:A6:BC:F7:81
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/aAk0W1JZdu-pSXtB24UQsKa894E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
Signature Algorithm: sha256WithRSAEncryption
70:48:47:18:17:19:34:7c:6f:6c:50:8a:bb:39:b0:69:04:8f:
7b:7d:96:8f:5e:f1:b5:e4:80:bf:3b:84:75:19:b7:2b:21:6a:
c2:c8:fa:a8:a1:97:05:12:9b:00:f2:a9:38:eb:b5:3f:37:12:
cc:f9:3d:d7:78:c8:0d:8f:2b:37:fd:3b:65:b6:f5:94:a7:c8:
1f:0c:49:4c:d3:fb:6c:fc:71:c9:02:28:79:35:e6:83:82:5f:
7d:a4:5d:73:35:00:9d:3e:33:99:b1:c1:81:b3:01:ba:fb:6d:
12:8a:53:9b:b3:e2:d5:89:8a:13:62:f4:c9:be:84:31:73:cf:
86:52:cd:8d:f5:80:7f:99:17:f1:40:47:a6:8c:2a:f2:b9:8a:
a3:e9:db:f0:77:6e:0b:7e:d9:83:66:61:ce:82:46:90:64:7f:
ba:71:86:24:17:de:17:52:44:fb:dd:2b:13:a3:61:60:f2:69:
cc:8a:aa:8f:7d:9b:2f:af:d2:7c:6d:b3:24:84:65:4e:7b:c5:
9b:1a:d4:d8:5c:93:38:2b:9c:39:4c:4c:79:c8:17:51:0b:da:
94:f7:8a:8f:08:e4:2f:89:57:10:ec:28:50:7b:83:e3:20:44:
87:67:50:d3:15:d5:37:d7:5b:59:a2:94:af:3f:43:fc:98:02:
0e:2c:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:26:24 2026 by rpki-client