Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/CrW9ZFEu_ubyCIwDNHfbMmEm8_4.roa
File: CrW9ZFEu_ubyCIwDNHfbMmEm8_4.roa (raw, json)
Hash identifier: CoIfQY/dERGkEZqUC7VJDG45PPQ2aitZM1yEhEK7rw4=
Subject key identifier: 0A:B5:BD:64:51:2E:FE:E6:F2:08:8C:03:34:77:DB:32:61:26:F3:FE
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A18E7970917FFAE251A9E2902B5C8DB261
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/CrW9ZFEu_ubyCIwDNHfbMmEm8_4.roa
Signing time: Fri 30 Oct 2026 20:21:25 +0000
ROA not before: Fri 30 Oct 2026 20:21:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218239
IP address blocks: 132.243.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:79:70:91:7f:fa:e2:51:a9:e2:90:2b:5c:8d:b2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Oct 30 20:21:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ab5bd64512efee6f2088c033477db326126f3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:c7:ed:e9:be:ff:6d:14:41:8c:8a:e9:1c:
95:eb:99:4a:35:fc:f6:71:a1:91:03:91:b2:26:4a:
c8:e1:25:e5:3b:e6:11:54:a2:5a:1d:45:a4:fc:bf:
3a:49:20:e5:3f:5e:70:d9:16:9e:1e:7a:f6:49:13:
8c:71:ed:f0:7e:a3:e4:18:f9:e1:64:c3:60:f3:e4:
30:74:45:0b:8d:71:e7:fa:42:95:cb:8b:37:db:2a:
8f:93:47:ff:fc:10:a0:53:0a:b7:ab:b3:6d:b1:cb:
af:2f:a3:6a:3c:8d:76:10:41:f0:15:08:93:03:13:
92:3e:b7:63:5d:10:cf:54:e8:08:51:a9:76:a2:e1:
68:02:d3:e7:4e:32:30:e5:52:89:0c:be:f6:25:91:
2f:a4:a2:a0:5f:4e:ac:21:2b:ae:5e:c5:6b:7b:7b:
4e:99:4b:3e:e1:94:de:29:f7:a1:06:57:23:1a:61:
35:e3:da:f2:0c:da:97:6e:74:ab:c9:f7:f5:ff:c2:
b4:3a:13:cd:75:8c:92:e6:5a:6f:7c:81:e9:7d:cf:
04:c1:6c:18:65:95:0b:07:14:2f:a9:0f:57:ee:66:
c1:5a:d3:5f:f4:02:67:56:65:75:5c:68:0e:98:cb:
a8:e4:de:71:2f:e0:d5:69:37:ab:82:09:b4:bb:af:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B5:BD:64:51:2E:FE:E6:F2:08:8C:03:34:77:DB:32:61:26:F3:FE
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/CrW9ZFEu_ubyCIwDNHfbMmEm8_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.222.0/24
Signature Algorithm: sha256WithRSAEncryption
10:31:19:5d:a4:16:bb:fa:b4:50:c5:5b:63:f5:7d:42:53:f5:
d6:1d:db:58:e9:91:09:0e:39:71:46:40:ed:36:44:1f:32:31:
80:5f:14:51:bf:4f:95:ee:cd:30:56:48:78:4a:07:2f:1b:00:
64:d1:97:28:25:df:2a:a9:a2:19:dc:a3:3d:c8:22:87:61:fd:
2f:38:db:b1:4e:53:6a:fe:04:06:7b:2c:46:34:89:85:67:13:
47:4d:7a:f3:83:53:64:ad:10:4e:a0:bb:ae:a0:7d:b7:43:0f:
5c:ee:15:56:ad:73:a4:13:f4:66:aa:51:67:a0:d4:8e:2c:b0:
9e:b8:2c:49:21:91:a5:0e:ba:46:c2:f1:ff:03:40:7c:24:c8:
d3:d3:8b:b0:70:06:fc:79:9d:3a:31:87:0d:e2:33:df:77:51:
38:d1:4a:76:e2:d2:8d:fd:f0:eb:e8:c9:fa:fa:6b:46:2c:b8:
04:05:5d:16:75:82:7f:4e:79:81:a9:9e:41:09:26:be:1b:8b:
2d:89:3b:3c:db:20:7d:51:05:f7:ff:77:db:22:1a:53:84:1b:
94:2e:6e:90:7f:12:cb:10:99:0f:80:18:3e:3a:26:a7:1d:9c:
5e:3b:0b:b7:99:6e:6d:47:4c:d0:2e:2a:48:26:ea:6f:b9:40:
89:9b:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:53 2026 by rpki-client