Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/aWVkUEp4lm12y5qwWv2adJ66-rs.roa
File: aWVkUEp4lm12y5qwWv2adJ66-rs.roa (raw, json)
Hash identifier: Hq+MYEUAwJVfh/YoUoYayEoIk7iU3N4ROU0WjO5xyMA=
Subject key identifier: 69:65:64:50:4A:78:96:6D:76:CB:9A:B0:5A:FD:9A:74:9E:BA:FA:BB
Certificate issuer: /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial: 019F23691050DB4B1C8F90BD939612E4AB9C
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/aWVkUEp4lm12y5qwWv2adJ66-rs.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8893
IP address blocks: 80.252.96.0/20 maxlen: 24
212.48.96.0/19 maxlen: 24
212.53.128.0/17 maxlen: 24
212.72.160.0/19 maxlen: 24
2a00:1f78::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:10:50:db:4b:1c:8f:90:bd:93:96:12:e4:ab:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=696564504a78966d76cb9ab05afd9a749ebafabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:8a:2f:f5:93:10:0e:06:ea:9a:4e:5f:f5:
fe:8b:f5:df:5d:65:de:39:df:5e:f9:f8:7a:de:bb:
e5:36:09:65:c9:6b:22:6c:34:06:76:f1:4d:7c:c8:
54:8f:34:70:d2:59:34:b1:2a:ba:f7:70:0c:87:54:
8e:0c:ee:e2:23:e5:98:57:65:11:11:8d:e2:fe:16:
35:23:85:a2:f0:6a:cb:a6:09:67:8a:67:5f:2a:93:
91:7b:91:a8:81:51:0c:40:c7:0b:56:3d:eb:7a:02:
99:5f:f7:3b:31:0b:4d:e5:f5:2f:86:ef:0e:c8:10:
99:ff:30:c7:97:72:28:cf:6b:d1:d0:b9:ce:d7:0f:
69:0e:bf:c3:32:b7:11:2f:8c:28:e2:04:34:ef:c9:
94:48:e0:66:ba:0c:7d:f1:bf:9d:5b:53:2f:d3:f7:
f7:8c:7c:23:aa:33:16:1c:d3:eb:42:54:68:48:39:
a5:22:e0:e9:3d:15:eb:f4:13:31:8a:64:f6:f7:2b:
03:d3:09:de:0f:f9:61:7a:f6:df:2f:2a:6f:a8:b2:
ba:5d:51:c3:b6:43:5e:12:41:16:6e:16:36:fe:f1:
3d:b7:ac:a2:42:31:1a:79:92:df:ac:a0:bb:68:8d:
e4:d9:1b:80:54:cc:3d:3c:9d:f9:8d:25:4e:b6:01:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:64:50:4A:78:96:6D:76:CB:9A:B0:5A:FD:9A:74:9E:BA:FA:BB
X509v3 Authority Key Identifier:
keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/aWVkUEp4lm12y5qwWv2adJ66-rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.96.0/20
212.48.96.0/19
212.53.128.0/17
212.72.160.0/19
IPv6:
2a00:1f78::/29
Signature Algorithm: sha256WithRSAEncryption
47:2b:2e:7a:f9:64:ce:6b:40:3e:a4:9e:de:4e:be:de:c2:ec:
2a:7b:0e:af:1c:c2:f5:aa:5c:3d:75:e3:72:73:bd:9c:73:2d:
5a:d6:26:92:bf:22:16:b3:51:53:3b:e0:37:67:bd:45:36:13:
25:97:e2:e7:49:5e:1d:da:97:57:66:7b:1d:ce:9a:65:79:e9:
7e:37:2d:e1:36:5d:bc:57:c1:a8:5f:92:71:42:0c:f3:5d:3a:
7f:60:14:03:04:23:c4:36:da:b4:e1:38:95:4f:63:0b:c1:b7:
9b:25:bd:1c:83:57:b6:b2:28:c4:75:41:eb:79:2a:53:7b:62:
77:29:41:37:86:07:71:ae:64:71:4b:2e:26:73:7c:5f:f5:69:
3e:8c:21:28:d7:42:4c:2e:e4:04:4d:fb:4d:58:9e:d3:a8:98:
0d:3e:2b:60:db:41:c9:bd:24:44:a6:64:1d:b6:d1:af:68:24:
b3:28:b1:30:e0:d9:82:80:3f:db:a4:f8:24:36:9c:3e:e6:e2:
ec:ac:7f:53:af:67:98:a2:9e:c1:de:71:ed:a0:5b:f0:97:e0:
79:0b:48:39:f8:56:5b:84:f7:6e:d4:0c:2f:e6:28:59:5f:68:
ad:f4:cc:31:b1:e9:65:83:18:1d:18:d6:b0:7c:25:4a:f7:85:
26:f0:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:59:09 2026 by rpki-client