Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/74WIeW-lAdcRldUXrpyfHZcfNb0.roa
File: 74WIeW-lAdcRldUXrpyfHZcfNb0.roa (raw, json)
Hash identifier: MhcSIbU5Z2cPwGQWGNCCzFFEwTBli26dj0X+HuKpXO8=
Subject key identifier: EF:85:88:79:6F:A5:01:D7:11:95:D5:17:AE:9C:9F:1D:97:1F:35:BD
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A19116B0868EEBB73C18DC6D617FBDCC31
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/74WIeW-lAdcRldUXrpyfHZcfNb0.roa
Signing time: Sat 31 Oct 2026 08:32:25 +0000
ROA not before: Sat 31 Oct 2026 08:32:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210848
IP address blocks: 150.40.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:16:b0:86:8e:eb:b7:3c:18:dc:6d:61:7f:bd:cc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Oct 31 08:32:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef8588796fa501d71195d517ae9c9f1d971f35bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:ea:64:00:b2:cf:04:09:ab:8e:42:c7:e1:
04:fe:1b:f2:e0:02:ed:96:b0:d1:e9:e7:58:cd:21:
bf:e0:1c:9d:e1:a9:24:cd:67:86:96:74:ee:e9:70:
0d:9f:95:c5:e6:b2:0d:cc:79:66:e7:0e:40:59:96:
5d:c7:bf:c3:06:fe:db:1f:80:b9:0c:a4:c3:2b:dd:
c2:b2:55:60:21:32:cd:8d:e0:be:e9:ae:33:32:14:
56:96:3c:3b:9d:7a:77:9a:da:2e:51:1f:48:02:ee:
d9:10:cf:8b:4d:44:c1:11:73:ff:02:e3:60:e1:7d:
3f:f2:58:cd:4b:cb:16:f2:5b:6d:ab:c8:c7:c8:a1:
b4:c8:e2:b0:6b:f6:fe:ae:d4:ef:92:37:51:31:ed:
65:70:af:13:47:2a:92:f9:bc:14:87:c6:a7:c7:6c:
b9:e9:73:8f:3d:59:58:99:7d:28:5b:81:4e:2e:c9:
b2:5c:ee:50:b8:ea:fc:e5:ee:14:5d:22:8a:b7:eb:
2b:10:23:a7:bb:fb:8f:73:b6:cc:6e:ca:a0:55:b0:
23:fb:41:6f:e9:37:05:7f:13:13:08:25:f2:71:d7:
63:6e:91:89:03:76:18:62:21:06:d9:1c:68:2d:5e:
c8:17:56:7f:60:cf:d2:f1:48:cb:71:75:71:40:86:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:88:79:6F:A5:01:D7:11:95:D5:17:AE:9C:9F:1D:97:1F:35:BD
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/74WIeW-lAdcRldUXrpyfHZcfNb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.103.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2d:cf:bf:0e:da:93:4a:e2:db:68:89:cc:ab:a5:19:f4:3e:
ef:a4:9f:e3:96:ce:7c:d0:99:7f:d1:26:89:a2:20:4b:35:5a:
da:95:53:12:de:f9:a8:2c:fa:6f:6b:52:66:9f:9e:f8:4c:a3:
97:1d:3d:ec:c0:a3:0b:88:97:4b:5a:6e:29:17:ac:72:f3:71:
13:67:79:42:12:88:e3:84:eb:98:92:69:9b:0c:10:aa:c5:0c:
2f:be:c6:44:34:27:a8:c2:b7:89:b9:61:f6:79:57:f6:e0:f1:
53:f4:eb:ef:cf:b0:a3:31:92:0b:9a:2c:12:22:42:fe:59:3a:
f3:94:ff:ab:a9:b3:c2:c3:5d:44:86:5e:a3:d9:3b:ed:d1:2f:
3e:f1:5d:bc:b8:17:fb:69:bb:f6:38:19:4a:0c:1f:54:fc:06:
80:b5:bf:6c:bd:ca:b5:2c:1c:65:03:7f:f6:73:eb:b9:4e:bc:
1c:a1:cf:97:99:07:67:29:9b:5e:d2:a0:d0:f4:27:f5:db:97:
e8:82:56:9a:65:34:1e:70:69:49:84:e7:21:04:40:67:55:f1:
ae:86:0f:3a:61:63:39:7f:47:1b:c8:6b:fe:1c:55:eb:b9:32:
db:bb:c4:9b:af:19:b8:65:3f:f4:d9:41:09:8a:d6:8e:39:4f:
ed:c3:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:18:16 2026 by rpki-client