Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/acF61KZ29V24M09HrC4SnqioqKg.roa
File: acF61KZ29V24M09HrC4SnqioqKg.roa (raw, json)
Hash identifier: f2Zt9fM/PQ3kKZDQ55epIpklRon8WdDTTYwdfvXeiss=
Subject key identifier: 69:C1:7A:D4:A6:76:F5:5D:B8:33:4F:47:AC:2E:12:9E:A8:A8:A8:A8
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A17C6D51D087FD820633A4B0951EA57DF9
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/acF61KZ29V24M09HrC4SnqioqKg.roa
Signing time: Tue 27 Oct 2026 08:15:01 +0000
ROA not before: Tue 27 Oct 2026 08:15:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 213.189.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:6d:51:d0:87:fd:82:06:33:a4:b0:95:1e:a5:7d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 27 08:15:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69c17ad4a676f55db8334f47ac2e129ea8a8a8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:f2:38:a2:24:fa:fc:25:79:1a:e6:47:de:
c2:46:bc:af:c9:90:07:7a:09:d6:25:c6:11:f5:ed:
af:8e:9c:33:21:00:26:ca:4a:fc:64:e4:6d:31:40:
ef:25:3b:14:b8:1a:93:74:0f:43:9e:1d:54:15:33:
1f:60:8f:53:39:1f:91:f2:ed:e5:14:4e:9f:ef:62:
86:4e:99:2a:67:82:b1:86:fb:02:38:ec:bd:3f:b9:
9d:b6:41:42:03:b0:dc:4b:a2:ba:a2:1d:ad:5d:eb:
b5:a2:91:2b:89:ee:f2:64:b1:0e:74:81:da:56:a4:
82:30:88:5f:17:cf:27:5a:98:3d:61:8a:71:8a:a2:
96:18:c0:d1:eb:71:91:1d:7c:90:f9:77:61:19:93:
3e:83:94:cc:62:1b:4f:fb:74:a3:48:a0:9e:4d:83:
06:a0:3d:bf:be:1d:e2:4d:b8:19:df:ab:83:05:49:
87:e9:9e:c8:db:6d:ea:97:5f:4a:75:56:f3:c1:a1:
a2:4c:50:12:fa:aa:f8:67:bf:25:a6:2b:ce:31:45:
d3:54:97:38:10:a5:c1:bb:93:33:3e:99:b3:1a:e8:
b9:97:fe:14:87:98:e0:5e:04:86:92:84:5e:8d:70:
2e:fa:48:cd:0d:9d:99:68:f9:48:fd:6b:49:e8:de:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C1:7A:D4:A6:76:F5:5D:B8:33:4F:47:AC:2E:12:9E:A8:A8:A8:A8
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/acF61KZ29V24M09HrC4SnqioqKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cf:60:f4:55:14:25:b5:27:c5:c5:fe:f2:41:2f:f5:9e:a5:
64:b7:2d:62:17:12:ce:26:76:3e:bd:58:d7:4e:48:a0:a4:db:
a5:56:0a:fa:8e:fe:58:a3:4c:f0:2c:2d:fa:8f:80:23:4d:ff:
e3:8c:7a:bc:b2:bd:e8:1d:3e:b3:41:c6:69:0f:9f:3c:88:42:
4b:e4:95:15:0d:5c:d8:79:7e:45:93:1f:54:0b:9f:05:cb:0f:
6f:45:74:f3:47:77:a2:13:1a:33:78:e8:3b:1f:fe:1c:48:30:
3e:69:26:0b:7c:9d:3b:78:84:15:d9:7d:1d:bd:f7:8c:ca:b9:
98:a0:b5:3e:77:71:37:05:82:73:d4:53:9b:72:c2:1d:00:eb:
8d:ec:40:71:3d:04:e8:94:e7:a8:07:5d:48:c7:ad:fa:12:44:
a7:06:7a:67:59:75:2d:32:2a:57:d4:32:a6:07:d9:ec:e8:f1:
77:7c:b2:14:66:38:10:31:bc:e1:a6:78:e5:f0:4d:94:c8:95:
8f:45:86:77:82:54:f4:87:32:b1:1b:ea:33:95:97:2a:e0:71:
4a:ee:50:e5:46:96:ee:7d:53:04:c4:5b:78:42:c2:fd:96:a6:
46:fb:c3:2e:72:e5:fe:c5:60:47:d9:9f:f8:a2:cb:48:f3:a3:
aa:fb:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:23 2026 by rpki-client