Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/ROLB9Mjn_CZgxTvW4BQk8AHfg6I.roa
File: ROLB9Mjn_CZgxTvW4BQk8AHfg6I.roa (raw, json)
Hash identifier: 2ep/pOW0R9I7zZ6fjDatO/bNW3VCn7ZijHQTLotnUyc=
Subject key identifier: 44:E2:C1:F4:C8:E7:FC:26:60:C5:3B:D6:E0:14:24:F0:01:DF:83:A2
Certificate issuer: /CN=fd71babf7ad6cc10d6c764f3e56ae415c1c45fa0
Certificate serial: 01A049107DA354599BF29EAC4CD2A35FE5DA
Authority key identifier: FD:71:BA:BF:7A:D6:CC:10:D6:C7:64:F3:E5:6A:E4:15:C1:C4:5F:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/ROLB9Mjn_CZgxTvW4BQk8AHfg6I.roa
Signing time: Fri 28 Aug 2026 15:50:12 +0000
ROA not before: Fri 28 Aug 2026 15:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201228
IP address blocks: 156.115.64.0/24 maxlen: 24
156.115.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:10:7d:a3:54:59:9b:f2:9e:ac:4c:d2:a3:5f:e5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd71babf7ad6cc10d6c764f3e56ae415c1c45fa0
Validity
Not Before: Aug 28 15:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44e2c1f4c8e7fc2660c53bd6e01424f001df83a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:ea:19:0c:4f:5b:45:dd:e2:50:06:b8:a6:
40:c7:25:27:a7:27:3a:d9:0d:ab:ca:82:d9:ef:8a:
f4:64:b7:2c:c2:8d:6b:2f:0f:1d:57:e4:ba:c8:8b:
23:12:11:0e:ca:ae:02:43:12:8a:a4:84:2e:27:55:
3e:59:70:72:95:0c:65:c2:0e:b7:d2:a3:3a:4b:96:
a4:14:1a:c6:b1:21:94:9f:87:1d:07:2b:f8:65:01:
bb:ca:f4:46:69:00:73:b8:d9:8a:02:e6:3e:c7:0b:
8b:06:67:c1:16:7a:54:85:10:b4:b4:61:6d:b0:a9:
8b:83:7f:5c:7c:9f:1c:0f:6f:1c:ea:a7:67:27:79:
1b:3c:ba:81:e4:90:10:84:f1:0f:91:20:62:e2:47:
1e:59:ea:c4:ed:69:39:36:3e:6a:87:4f:c4:a2:35:
b3:a4:e3:c9:c9:02:ae:a9:e9:35:75:1c:16:da:0b:
22:7b:7d:1f:99:5e:70:8b:3b:89:88:ca:36:6d:06:
a8:24:ce:26:0e:e7:12:a5:10:75:b2:28:50:86:7d:
cc:0e:95:8e:ef:b7:9b:8a:28:76:0a:ec:59:21:6f:
9d:a0:93:f0:96:cf:41:2f:cf:d8:1e:ac:65:08:1b:
ab:0d:74:39:b7:40:90:98:39:37:e8:da:eb:4b:11:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E2:C1:F4:C8:E7:FC:26:60:C5:3B:D6:E0:14:24:F0:01:DF:83:A2
X509v3 Authority Key Identifier:
keyid:FD:71:BA:BF:7A:D6:CC:10:D6:C7:64:F3:E5:6A:E4:15:C1:C4:5F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/ROLB9Mjn_CZgxTvW4BQk8AHfg6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.115.64.0/24
156.115.93.0/24
Signature Algorithm: sha256WithRSAEncryption
99:81:f3:96:1b:8f:1e:6c:51:3f:bb:72:09:53:62:36:bc:f4:
90:fa:70:4d:f8:23:3d:ff:66:b9:6b:f6:f5:e6:75:73:aa:3a:
73:13:38:80:f8:7d:1c:36:50:36:5b:14:96:60:cb:24:f5:2b:
e8:07:51:0c:98:2f:80:98:18:8f:81:45:99:d0:5c:1a:71:9d:
6f:48:83:db:6a:57:4b:10:59:3a:25:b2:f7:3f:23:44:e8:b0:
a3:35:80:2f:ed:fe:ea:53:87:d9:32:fd:78:71:3e:67:36:5d:
98:ec:63:4a:8f:0e:49:c6:e2:08:84:06:eb:23:ef:7d:df:a8:
e7:01:41:a6:b5:7b:e4:05:d1:30:9d:64:bb:07:3c:d9:a9:22:
5d:0a:9a:aa:b6:c6:5c:84:cd:a6:b3:95:9c:57:bf:a1:33:7c:
69:44:02:77:a8:12:3b:47:9e:c2:e4:b2:0e:6d:c6:33:06:35:
62:ff:59:a2:92:23:5f:dc:bc:1a:e9:12:c3:b3:31:1a:97:aa:
4a:c8:a5:de:fb:06:b3:ea:b6:88:3c:f5:86:fe:03:f9:e6:90:
0e:85:48:1c:70:ff:86:91:1c:9a:50:7c:a8:22:82:d0:51:54:
38:8d:64:e3:67:80:f1:64:c4:a0:79:fe:c3:84:ed:3e:19:9f:
30:69:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:39:03 2026 by rpki-client