Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/D8AltX8NXcLOq-pSTN7KWtLKGHY.roa
File: D8AltX8NXcLOq-pSTN7KWtLKGHY.roa (raw, json)
Hash identifier: Jhg74LTPlJvtU+9SkThmAe1N9wxkw8e/NSOn4orb4Jw=
Subject key identifier: 0F:C0:25:B5:7F:0D:5D:C2:CE:AB:EA:52:4C:DE:CA:5A:D2:CA:18:76
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A1CFD8DBAA7B8A9703D44B3E256F7382E7
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/D8AltX8NXcLOq-pSTN7KWtLKGHY.roa
Signing time: Thu 12 Nov 2026 13:00:58 +0000
ROA not before: Thu 12 Nov 2026 13:00:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197710
IP address blocks: 153.56.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:d8:db:aa:7b:8a:97:03:d4:4b:3e:25:6f:73:82:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Nov 12 13:00:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fc025b57f0d5dc2ceabea524cdeca5ad2ca1876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:0c:e5:66:06:2a:6f:44:3b:fe:74:70:0e:
81:14:d9:46:f1:b8:ad:39:7e:06:04:1e:b2:47:43:
ca:e4:4c:ed:b0:ae:70:07:bf:bb:27:70:cd:57:c9:
ec:66:b4:e0:d5:bb:57:7d:f9:4a:01:76:12:9b:a7:
62:69:c3:4a:75:ba:8c:5e:66:1d:db:d9:b4:6c:53:
6e:95:3a:42:a8:54:66:2c:29:26:7d:53:bc:4b:2e:
54:77:28:ec:9b:8b:15:6f:31:21:c8:cc:09:c7:ab:
c6:71:68:e1:0f:e4:ff:b4:28:c0:2b:76:42:45:8d:
ae:41:9f:9d:29:4e:d0:6d:7d:eb:80:b3:f8:0f:66:
dc:66:1d:ad:9e:82:71:c2:30:7e:28:1c:df:24:96:
11:29:a3:93:37:fe:55:0c:2b:6c:b1:fb:7c:24:33:
54:44:07:dd:d3:0d:9d:e1:79:2c:10:82:c3:84:51:
5c:a3:ea:c1:31:95:12:87:0a:db:c5:25:aa:1d:0e:
54:5e:23:87:72:b6:55:bc:88:e3:d8:7b:6a:36:0e:
b7:f1:5a:69:af:ff:71:d2:fe:07:83:40:0d:49:b0:
24:0d:18:00:32:9d:76:33:cd:42:0c:a2:fa:e1:96:
f6:fa:d2:67:9e:f8:73:dd:eb:38:78:21:a3:c2:22:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C0:25:B5:7F:0D:5D:C2:CE:AB:EA:52:4C:DE:CA:5A:D2:CA:18:76
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/D8AltX8NXcLOq-pSTN7KWtLKGHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:66:d9:e6:44:45:35:7d:5d:38:4c:b1:48:41:28:aa:d3:6c:
33:02:81:bf:47:97:07:23:26:23:f5:a1:84:00:1a:07:77:32:
b8:e1:12:1f:93:f2:b1:49:aa:e4:5d:87:79:0c:16:72:80:64:
19:e9:60:32:da:33:5c:02:9d:72:3f:1b:54:22:33:ff:fe:72:
9b:a9:d7:2a:c6:06:71:00:20:8c:94:e3:ba:b7:ca:04:92:76:
0a:4b:2e:ed:87:75:25:04:c0:50:da:d9:f5:65:66:7b:f2:e3:
e5:3a:f6:d8:31:da:79:23:c9:3c:e6:32:b4:a2:0d:80:ef:82:
cb:84:b9:3d:6e:1f:41:33:be:8d:47:f4:99:31:fb:0e:fc:d4:
a9:23:62:94:83:6a:b7:42:e9:6d:a2:d2:69:f1:f5:e2:56:50:
14:96:fb:0f:88:75:27:72:2f:68:d4:ac:40:2a:17:c7:ea:5d:
9b:b4:90:95:e7:bc:ff:1f:74:66:92:37:9b:19:cb:6d:69:5c:
b8:16:9b:08:d7:a6:e1:00:f9:b0:60:6a:5d:a4:57:b5:37:82:
9b:14:be:ea:cb:fc:91:ea:2e:4d:01:cd:03:21:97:7b:7d:ae:
c4:cc:be:26:3c:52:4d:6c:0e:c6:87:0d:84:a1:72:c6:ae:7e:
82:db:6e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:34:10 2026 by rpki-client