Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/9pAGjJkg8kEE0k2-f7aHX4SzG7w.roa
File: 9pAGjJkg8kEE0k2-f7aHX4SzG7w.roa (raw, json)
Hash identifier: Zly/gBII29IA16CYMnihUYUBmtciq5oTbj0kWmQEwGk=
Subject key identifier: F6:90:06:8C:99:20:F2:41:04:D2:4D:BE:7F:B6:87:5F:84:B3:1B:BC
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A15DC217D700A155B1FB5F473E0CEC0567
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/9pAGjJkg8kEE0k2-f7aHX4SzG7w.roa
Signing time: Wed 21 Oct 2026 09:19:23 +0000
ROA not before: Wed 21 Oct 2026 09:19:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 45.155.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:c2:17:d7:00:a1:55:b1:fb:5f:47:3e:0c:ec:05:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Oct 21 09:19:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f690068c9920f24104d24dbe7fb6875f84b31bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:d3:82:71:7b:8c:42:a3:d4:70:37:cc:23:
13:6c:c0:57:ab:0d:74:e4:60:3d:a1:21:6f:1f:ed:
64:1c:2e:86:52:7d:77:a8:15:56:9d:a3:71:91:42:
d0:a6:0a:91:ce:d8:c9:a3:88:ff:d4:17:e3:62:04:
ec:83:45:0f:c5:7d:e5:6b:15:18:0f:df:3c:92:14:
26:a9:63:55:d6:cf:d0:2f:9a:c0:b5:af:14:55:fd:
7e:53:ab:44:9f:f3:1d:66:e6:9a:de:73:8c:74:68:
aa:d2:1a:b5:42:35:e4:95:d3:e3:c2:74:be:00:dd:
a6:20:67:15:3c:99:3d:ff:29:d0:7d:d7:8d:cb:e9:
f1:00:54:f0:c2:d9:23:07:eb:84:03:e9:1d:70:e7:
38:b4:a3:a7:93:07:b9:e3:dd:25:80:e1:a9:54:e7:
70:19:7d:11:85:12:d8:ea:d5:8d:29:dc:b8:b3:c9:
9c:31:35:fb:69:85:42:c4:71:da:e5:10:e8:05:c7:
b1:29:dd:b3:f0:d7:08:cc:82:c4:1c:52:70:37:b9:
77:00:8f:bd:18:66:c3:d5:db:56:87:e4:fa:d8:46:
0e:30:48:c6:0b:9f:b6:2a:aa:70:75:0c:91:68:72:
0f:02:ce:f6:5e:66:27:20:2b:a9:23:71:4d:05:ab:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:06:8C:99:20:F2:41:04:D2:4D:BE:7F:B6:87:5F:84:B3:1B:BC
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/9pAGjJkg8kEE0k2-f7aHX4SzG7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ea:07:e8:40:0c:5d:73:03:2d:f2:63:ea:3d:e7:52:52:8e:
85:fb:63:9e:35:03:d5:ab:a7:12:d8:1e:97:65:74:73:67:88:
40:c2:db:0e:de:10:5f:ab:cf:56:b7:d4:e7:96:a9:b3:00:91:
57:dd:ad:d9:a9:33:2b:74:35:ce:22:c7:e4:6c:23:82:43:8f:
05:09:d3:89:c0:7d:12:6c:e7:d4:e3:32:fa:a9:89:05:a2:2d:
88:d1:c3:84:7f:64:2f:e4:50:ff:fa:1d:7a:4a:e4:be:e2:1b:
76:3a:71:f7:15:9d:9c:03:25:28:db:9d:4b:5c:fb:63:a8:9b:
00:f5:c8:9e:c2:82:6b:13:c2:50:c0:68:5c:3d:42:c6:42:89:
72:0a:30:0a:9b:eb:b3:c0:31:50:7a:d2:69:b8:ca:63:11:63:
11:78:8a:92:05:98:88:4b:a5:f5:f5:15:05:71:5d:19:7b:55:
99:cf:87:72:e9:66:98:12:47:7c:15:bf:b4:91:3c:b9:14:1f:
8c:82:6c:c3:90:41:37:47:4a:21:74:b6:83:18:04:e8:0e:c1:
63:ab:93:cf:c0:e9:91:04:13:ca:a6:c2:4e:5a:b3:c2:38:87:
9b:99:cd:0a:ca:4b:d1:59:e2:0a:a8:3e:6c:9d:5d:60:a0:d0:
09:3f:d6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:39 2026 by rpki-client