Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/tVwUWgI0k8DkV7G2WTgXa5VNfPo.roa
File: tVwUWgI0k8DkV7G2WTgXa5VNfPo.roa (raw, json)
Hash identifier: rqPzYD02GYLG9fAY4VlQoJM56kO+k6njtSAlc0b2fAA=
Subject key identifier: B5:5C:14:5A:02:34:93:C0:E4:57:B1:B6:59:38:17:6B:95:4D:7C:FA
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 01A177E3924D5441DE4EC1B86B7559618111
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/tVwUWgI0k8DkV7G2WTgXa5VNfPo.roa
Signing time: Mon 26 Oct 2026 11:06:05 +0000
ROA not before: Mon 26 Oct 2026 11:06:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 86.110.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:e3:92:4d:54:41:de:4e:c1:b8:6b:75:59:61:81:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Oct 26 11:06:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b55c145a023493c0e457b1b65938176b954d7cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:eb:32:96:40:ec:f3:af:f9:dc:b0:fb:be:
28:8d:13:09:d7:b4:40:50:f8:e6:0b:45:d6:79:46:
bb:db:cd:bb:a1:1b:fd:84:5b:2d:d0:bc:34:52:52:
d2:af:0c:6f:8d:6d:d4:1a:14:7f:27:ea:b8:1a:1c:
e7:3b:bc:3d:e9:7e:a2:d0:28:ed:80:0a:9d:06:32:
52:63:24:03:b9:55:3a:71:34:bb:a0:e3:46:fb:45:
00:c8:d7:e4:76:02:00:da:a8:b7:5f:ac:fc:df:88:
57:27:d0:60:4b:84:ff:86:39:a8:10:1a:53:0a:af:
a1:bf:ee:b4:e9:b4:87:53:ff:56:74:0d:be:8d:2c:
74:60:e0:53:b2:d3:47:ca:1c:03:1e:08:7c:2d:0f:
b8:14:7b:e9:e8:4d:61:c3:fd:2b:ce:d2:0e:6e:09:
e7:17:45:ab:be:e3:7c:11:d6:07:12:53:38:c3:b4:
c4:45:a8:8d:65:78:bc:53:82:9a:f0:35:48:cb:8a:
4c:92:6f:e7:ec:0c:3e:e0:77:32:27:8d:fe:7a:fa:
c9:4e:8d:30:86:11:4e:6c:d2:4a:1a:fc:71:55:f7:
8e:50:c6:84:07:72:16:45:bc:cf:1f:28:97:85:db:
d3:8b:4b:d8:d5:eb:72:63:2c:e0:05:f0:e3:c7:d6:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:14:5A:02:34:93:C0:E4:57:B1:B6:59:38:17:6B:95:4D:7C:FA
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/tVwUWgI0k8DkV7G2WTgXa5VNfPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:80:e3:87:df:b5:35:3a:fe:86:2f:3a:46:70:81:23:c0:19:
05:74:6d:9a:3e:0e:f9:af:87:5f:51:cb:30:4b:df:07:4e:ba:
4c:4a:3a:f2:d6:6e:a1:b7:01:68:4a:40:a4:6c:7b:50:8f:c1:
54:67:6d:12:73:43:08:13:6d:33:94:a5:c8:8f:17:fa:b0:d0:
f4:9f:e0:4a:1a:99:2e:af:53:da:a5:ba:6b:0a:6b:5a:9c:4d:
d9:6b:52:2a:ab:63:06:0e:b6:a0:87:9c:35:4d:03:b5:f2:1c:
32:dc:e2:29:72:8a:e1:05:9f:13:61:22:55:8c:0f:5e:21:58:
5e:7e:16:00:b2:bf:6d:6b:d2:f4:5d:9e:e3:bb:4f:f8:20:1f:
cd:09:f2:08:60:0d:43:34:5e:45:d7:4c:b8:94:96:de:ed:33:
ac:ab:72:47:a8:6c:c0:5d:03:0c:12:bf:8c:6c:35:68:74:d4:
e2:db:62:ae:1f:48:74:c4:ff:df:ed:70:02:9e:a4:1b:98:99:
40:84:ea:db:56:34:6a:7a:8e:d7:b7:ea:87:fa:0f:85:31:b5:
e4:2c:52:5c:51:02:2e:36:34:eb:50:d2:1b:cc:8b:9f:dd:9f:
fa:45:47:c5:81:8c:04:4f:e5:3a:cd:89:60:76:4b:53:96:5a:
69:f1:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:29:51 2026 by rpki-client