Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/A7eJFieYsUw0wv_2kYg3YGQqsyI.roa
File: A7eJFieYsUw0wv_2kYg3YGQqsyI.roa (raw, json)
Hash identifier: riGWvwUwQdd+jQVtM7WTOOMYdIojAULjGCGTE3vnSYg=
Subject key identifier: 03:B7:89:16:27:98:B1:4C:34:C2:FF:F6:91:88:37:60:64:2A:B3:22
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 01A114E83A3427EFF85A9A95482DE1A9C056
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/A7eJFieYsUw0wv_2kYg3YGQqsyI.roa
Signing time: Wed 07 Oct 2026 05:48:45 +0000
ROA not before: Wed 07 Oct 2026 05:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218856
IP address blocks: 64.17.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:e8:3a:34:27:ef:f8:5a:9a:95:48:2d:e1:a9:c0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Oct 7 05:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03b789162798b14c34c2fff691883760642ab322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:d1:16:ae:78:65:48:a5:b4:2a:03:78:54:
76:86:33:65:08:d5:47:83:b9:4c:e4:bd:2c:f9:59:
5d:6a:6a:90:b1:4c:53:3e:30:27:1b:f8:ae:5e:5e:
7f:46:fd:ee:d4:fa:61:eb:be:2b:df:37:e5:eb:08:
25:a2:66:97:26:ef:42:bc:a3:42:5b:86:b1:fd:42:
5e:c4:1b:d4:c5:8c:32:91:27:3c:f2:16:05:4c:98:
d7:e6:53:17:57:ea:fd:06:75:7e:71:4c:ea:a4:0e:
c4:7f:49:91:d0:78:63:e0:df:fd:71:87:85:9f:c3:
e8:42:32:67:1f:65:0a:46:8a:86:53:88:ca:f0:90:
6d:3b:a4:02:3a:26:6c:8a:51:10:e6:7f:59:bf:de:
45:88:0a:1e:96:68:75:c9:36:2f:e3:b6:4b:98:b5:
45:8e:83:b8:06:3c:7c:70:a5:bf:70:96:47:60:40:
1e:2e:e5:f3:fc:31:d9:0d:6e:95:2a:4d:25:e9:79:
38:6c:c3:88:74:6f:86:26:0b:fc:53:8b:b5:92:93:
8a:a5:03:d9:e5:c9:d5:a3:6d:5e:e4:13:1a:26:60:
61:04:f5:6f:28:df:16:83:5b:a4:4c:59:fe:8c:de:
92:68:b5:73:7a:71:ea:69:b2:c5:b1:ae:34:1d:53:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B7:89:16:27:98:B1:4C:34:C2:FF:F6:91:88:37:60:64:2A:B3:22
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/A7eJFieYsUw0wv_2kYg3YGQqsyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.17.245.0/24
Signature Algorithm: sha256WithRSAEncryption
72:30:21:ad:a6:b8:a1:d9:69:e1:99:72:6f:c5:14:01:f7:e7:
57:66:05:3d:c9:8c:e7:6c:ce:eb:ac:89:36:e4:0e:ad:82:b2:
08:31:63:2c:36:8f:9a:85:1e:46:2b:90:ba:c2:9d:d9:32:a8:
5e:7e:d7:e5:74:9c:6a:73:95:ae:46:4f:4d:aa:7b:00:03:44:
b2:f2:6e:ff:77:ad:c0:6a:32:27:02:11:cb:5b:b3:ea:ab:2e:
3e:64:fd:a7:ac:06:23:ce:cd:2b:5c:fc:9d:b6:cd:2e:50:a3:
4b:f7:fc:76:74:ec:03:de:ba:d2:f7:a7:2d:b9:5a:af:1a:d2:
d7:c5:4e:61:42:de:3a:52:46:d6:11:0a:d6:15:55:40:8c:40:
30:2d:27:ff:6f:5c:a0:ee:b5:e6:3d:62:0e:63:9b:be:1f:ff:
75:13:a7:30:53:c1:a3:9a:28:6b:f2:9f:06:eb:a3:6a:60:d2:
d4:14:d1:21:3e:c9:3d:7b:1d:36:14:29:8f:02:d5:e4:2f:29:
c4:49:f4:b5:0c:8c:c4:fb:bb:96:b5:51:15:a6:6e:3c:1e:e1:
73:ec:c4:f7:3b:07:4f:5a:43:97:fc:bf:8c:80:ab:2e:72:ba:
03:34:68:a1:f9:90:bb:08:e8:13:32:27:fe:7d:34:fc:4e:60:
f7:a0:c8:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEU6Do0J+/4WpqVSC3hqcBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTYwNmM3ZTkzZmVkMzZlZjkwZDQyY2U0YTk3MjYwYmI4
YWE5YzEwHhcNMjYxMDA3MDU0ODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2I3ODkxNjI3OThiMTRjMzRjMmZmZjY5MTg4Mzc2MDY0MmFiMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1/RFq54ZUiltCoDeFR2hjNlCNVH
g7lM5L0s+VldamqQsUxTPjAnG/iuXl5/Rv3u1Pph674r3zfl6wglomaXJu9CvKNC
W4ax/UJexBvUxYwykSc88hYFTJjX5lMXV+r9BnV+cUzqpA7Ef0mR0Hhj4N/9cYeF
n8PoQjJnH2UKRoqGU4jK8JBtO6QCOiZsilEQ5n9Zv95FiAoelmh1yTYv47ZLmLVF
joO4Bjx8cKW/cJZHYEAeLuXz/DHZDW6VKk0l6Xk4bMOIdG+GJgv8U4u1kpOKpQPZ
5cnVo21e5BMaJmBhBPVvKN8Wg1ukTFn+jN6SaLVzenHqabLFsa40HVMs3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAO3iRYnmLFMNML/9pGIN2BkKrMiMB8GA1UdIwQY
MBaAFKLmBsfpP+0275DULOSpcmC7iqnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYt
YTllYTIwNTcwNDJiLzEvQTdlSkZpZVlzVXcwd3ZfMmtZZzNZR1Fxc3lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYtYTllYTIwNTcwNDJi
LzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBH1MA0G
CSqGSIb3DQEBCwUAA4IBAQByMCGtprih2WnhmXJvxRQB9+dXZgU9yYznbM7rrIk2
5A6tgrIIMWMsNo+ahR5GK5C6wp3ZMqheftfldJxqc5WuRk9NqnsAA0Sy8m7/d63A
ajInAhHLW7Pqqy4+ZP2nrAYjzs0rXPydts0uUKNL9/x2dOwD3rrS96ctuVqvGtLX
xU5hQt46UkbWEQrWFVVAjEAwLSf/b1yg7rXmPWIOY5u+H/91E6cwU8Gjmihr8p8G
66NqYNLUFNEhPsk9ex02FCmPAtXkLynESfS1DIzE+7uWtVEVpm48HuFz7MT3OwdP
WkOX/L+MgKsucroDNGih+ZC7COgTMif+fTT8TmD3oMjn
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:08:07 2026 by rpki-client