Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/B0aX47W6kux6EP5PxGcHbpo8GWc.roa
File: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (raw, json)
Hash identifier: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=
Subject key identifier: 07:46:97:E3:B5:BA:92:EC:7A:10:FE:4F:C4:67:07:6E:9A:3C:19:67
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A09EA63383102F814C8FFD58DC7C13307F
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/B0aX47W6kux6EP5PxGcHbpo8GWc.roa
Signing time: Mon 14 Sep 2026 06:41:27 +0000
ROA not before: Mon 14 Sep 2026 06:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142111
IP address blocks: 2.59.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:a6:33:83:10:2f:81:4c:8f:fd:58:dc:7c:13:30:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Sep 14 06:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=074697e3b5ba92ec7a10fe4fc467076e9a3c1967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:95:b9:d8:92:2c:4a:6a:71:a7:04:e0:bc:
06:7e:4c:33:10:42:08:40:7a:83:46:73:01:79:67:
71:79:f7:05:87:c8:28:45:49:cd:ec:28:cf:bf:9d:
7f:9d:ad:08:11:ff:6b:c3:64:46:a7:c2:a7:32:c6:
d2:3c:0e:15:cb:3a:75:0d:44:24:bf:0f:92:7c:c0:
5a:dd:b3:e7:39:28:36:eb:0b:c8:7a:2a:e2:b7:b4:
90:e6:a5:77:3b:b7:13:68:f5:73:75:2e:03:11:75:
26:be:00:a7:25:89:97:9b:58:ca:96:36:02:42:73:
59:6d:3a:74:3b:02:8b:23:40:a2:94:a0:8f:74:49:
16:79:ff:ae:1a:8b:d3:be:f8:e0:d7:86:b5:73:5d:
35:8c:02:f8:22:17:1e:ef:87:00:bd:d3:e9:c7:bf:
79:87:64:67:2f:ef:24:db:f1:13:8d:29:57:6a:d0:
09:b2:15:e7:25:33:7e:fb:52:c3:6c:30:09:0c:a5:
3c:9d:b0:68:d2:40:90:5a:7f:aa:88:1a:c2:4f:e7:
61:c7:55:a7:1d:d0:81:7d:5c:89:25:9b:d9:fe:eb:
84:87:e8:06:e4:86:a9:84:42:58:90:b7:0e:11:e0:
92:58:4a:f0:4b:c5:10:f4:c1:0b:df:d0:9e:7f:89:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:46:97:E3:B5:BA:92:EC:7A:10:FE:4F:C4:67:07:6E:9A:3C:19:67
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/B0aX47W6kux6EP5PxGcHbpo8GWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.182.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e1:6f:d0:a6:b0:9b:b2:e9:e6:d5:12:be:1d:43:a7:57:b1:
8b:33:dc:1c:c4:d0:33:8e:ad:19:db:6b:3d:9b:ae:f3:7b:91:
6c:66:30:9a:87:d6:fa:59:c7:80:47:dd:1d:97:df:e4:3a:70:
63:37:dc:13:33:fe:f1:55:9a:d0:49:20:b9:06:79:60:de:a2:
f3:49:3f:7f:7f:f9:a1:a3:e5:6e:e7:0b:f4:ed:a7:b4:68:3c:
6e:26:9c:a3:7c:8b:14:4b:9c:27:f7:23:35:84:24:dd:e8:36:
91:1f:6d:59:05:5e:23:38:3f:cb:c4:75:0c:73:5d:db:8d:24:
3a:77:99:b9:cd:bb:ae:35:e9:6d:01:d7:2b:f7:f6:98:35:c0:
23:ab:eb:01:e2:c2:97:af:c5:3d:2c:7f:c5:3a:ad:19:b3:cd:
53:7e:fa:3d:37:d9:4e:63:18:22:41:1a:02:f1:cc:21:a8:68:
b7:4e:99:35:57:94:63:00:f3:eb:22:40:4e:a0:94:dd:0b:81:
17:18:da:ee:b3:72:81:27:95:4f:4f:19:69:e6:f7:10:ef:6f:
36:ad:5c:1c:3e:f7:65:cd:86:0e:7b:5b:c2:3a:3c:96:1c:48:
c6:f5:37:03:bf:db:a5:29:36:a1:e0:42:9b:27:ef:58:70:5e:
a0:06:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 08:37:13 2026 by rpki-client