Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa
File: 0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa (raw, json)
Hash identifier: BeQPwwhAk0wYxfBBr2kzYrvOfYh+U9/Tjif4YIzJ0F8=
Subject key identifier: D1:5F:BA:39:C7:FA:72:42:4F:D0:E9:A2:1B:16:ED:20:11:81:66:65
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A0B473DD4597E3726CD96DB631BA93760F
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa
Signing time: Fri 18 Sep 2026 12:18:07 +0000
ROA not before: Fri 18 Sep 2026 12:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2.59.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:73:dd:45:97:e3:72:6c:d9:6d:b6:31:ba:93:76:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Sep 18 12:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d15fba39c7fa72424fd0e9a21b16ed2011816665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b0:c9:f1:d4:5a:d0:f7:84:3f:18:bf:86:22:
61:59:51:4d:52:0d:79:ea:f8:d2:e7:8b:bb:05:03:
24:55:f6:07:0c:25:5d:84:7f:b2:ac:ff:93:8f:17:
08:8b:9d:0f:a3:7a:b3:46:4f:e2:42:80:df:68:ad:
48:85:6a:8b:69:76:4e:6c:a2:fa:ed:80:e4:1e:5e:
52:2d:d8:6e:46:e3:7f:3c:47:7e:b5:7d:c3:35:a0:
9d:67:3f:5d:ea:82:76:ba:a2:a1:a7:b9:0a:e5:d5:
76:f8:85:34:27:5b:a5:b0:ad:a8:b2:66:4d:6b:89:
e7:25:15:51:32:32:45:6e:6b:2f:12:c2:22:30:06:
17:71:2e:6a:94:24:bb:dd:c9:76:d2:33:bd:54:79:
49:68:5a:50:c2:73:cf:09:b6:af:a8:df:91:05:da:
16:6c:31:2e:3c:b9:25:95:72:8c:33:7f:90:21:e5:
32:a4:06:12:72:2c:e4:ae:dd:58:9d:5c:72:7d:b4:
e5:92:c9:59:bb:9b:98:c6:4d:a2:9a:79:29:27:96:
59:53:34:85:13:fd:d6:df:19:5e:07:0b:e2:d6:29:
60:05:63:fb:1c:c0:98:6c:e3:48:5d:f2:c3:b4:46:
77:81:cf:62:5b:b0:03:f8:4d:75:3b:b9:1d:ac:61:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:BA:39:C7:FA:72:42:4F:D0:E9:A2:1B:16:ED:20:11:81:66:65
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ad:48:80:c9:08:60:74:6c:b6:e3:8b:54:15:b9:f4:12:a6:
ef:ed:5a:bc:9c:be:a5:5c:ab:3b:70:6a:4c:53:ff:59:ca:3c:
18:3e:25:bb:2b:79:0a:32:8f:24:2f:c0:15:f9:e3:40:62:02:
12:58:f9:67:4e:41:11:33:46:72:b8:9b:5e:a9:c4:bd:d8:28:
49:bb:01:b0:76:f3:55:7f:d1:9a:3e:80:14:fc:74:d5:38:1c:
0c:14:0d:cc:5c:22:88:e5:58:49:e2:65:88:23:38:a1:9e:1a:
a8:4a:0e:b2:71:db:76:e5:c0:9b:53:36:ee:ee:60:cd:01:5a:
be:4a:8d:c9:1e:4b:51:bd:7a:ac:1c:62:19:c3:3c:d8:c6:20:
7d:db:02:55:e8:94:00:e2:ba:5a:91:1f:ef:fc:b5:60:4a:5f:
62:44:dc:68:85:3f:31:c7:36:27:16:ca:f8:d4:53:da:05:2a:
67:df:2e:f5:d9:e2:d1:95:39:f6:d4:1c:a0:2a:6f:98:50:92:
04:0c:f7:dc:60:74:f1:4f:d1:b8:a9:57:f7:87:49:06:f5:1a:
3b:1f:b4:a9:76:e5:0a:ec:af:2c:83:44:8f:13:63:93:b8:08:
62:13:aa:43:74:41:e3:74:9f:08:7b:3d:cf:5f:5c:22:27:8d:
08:8b:dc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 08:37:15 2026 by rpki-client