Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa
File: RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa (raw, json)
Hash identifier: Wjqw6vgltXyXDlwoAetJMPKopD3DI3ppoohYHWiU90I=
Subject key identifier: 44:69:B6:95:94:4C:9D:27:CA:9B:80:7D:EC:D0:30:04:FC:BD:95:84
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019EFCF20ECBFE4620E7A11381B67CD1090B
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa
Signing time: Thu 25 Jun 2026 04:03:02 +0000
ROA not before: Thu 25 Jun 2026 04:03:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219353
IP address blocks: 149.170.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:0e:cb:fe:46:20:e7:a1:13:81:b6:7c:d1:09:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jun 25 04:03:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4469b695944c9d27ca9b807decd03004fcbd9584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:3f:48:1f:d0:45:7c:e1:a8:67:6a:4c:79:
f8:5f:eb:99:36:c8:dc:e2:15:8a:c2:d3:71:a1:f9:
69:04:f2:e1:05:90:0d:f2:85:f2:85:55:02:c6:f8:
28:b7:d5:42:08:a9:96:9f:7e:2e:95:b8:27:26:76:
f5:2f:66:c3:a6:ed:30:f1:47:0f:6a:d6:c8:8e:e4:
6b:52:7d:61:9b:7e:76:d2:ba:47:eb:00:f4:87:25:
49:c9:82:89:a8:7b:ee:c2:3f:91:66:74:9a:91:4b:
e8:b3:fe:5d:47:f3:81:8f:52:9e:2d:d4:db:0c:ed:
c7:74:df:9a:32:7d:34:8b:1f:9c:18:84:f5:ef:f5:
1b:04:6a:b6:99:a1:ce:6b:f2:91:45:f9:d9:f5:a3:
2a:63:01:72:f7:25:7b:d3:1c:a4:9c:7d:9f:3c:fc:
9f:3e:ca:7d:21:3f:27:07:70:90:00:13:2f:b9:a5:
c4:45:ea:18:37:98:09:a9:ea:88:0a:6a:bb:dd:4d:
6b:c5:4a:f0:36:0c:0b:c3:95:77:76:5e:12:96:fb:
9b:c0:0e:4a:9e:9c:ae:8f:f3:29:ac:31:5e:55:d1:
06:d5:86:72:c1:b0:2c:80:90:6d:6d:a5:3a:fd:87:
c6:62:55:65:ca:ec:86:3e:90:73:40:84:f8:f9:71:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:69:B6:95:94:4C:9D:27:CA:9B:80:7D:EC:D0:30:04:FC:BD:95:84
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.170.63.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9d:7c:83:87:dc:32:e6:b8:7f:af:38:b9:07:bc:85:5b:63:
91:58:31:85:9a:e0:04:f1:31:90:cc:06:d6:d0:59:17:9f:21:
00:69:48:87:95:26:1f:df:26:43:a3:a6:4a:a7:7d:63:3e:a9:
98:24:09:ff:07:d0:31:2b:e9:d3:54:1a:07:d4:98:9f:ba:28:
49:d4:23:c1:09:27:16:23:8e:0a:c2:5b:5a:78:53:40:21:f1:
1c:c3:ef:29:48:8d:98:9c:4c:c0:92:07:d5:17:29:19:80:3d:
fa:39:23:0b:35:f2:2e:f2:c5:df:96:c2:a4:ec:36:63:ce:59:
a8:d0:97:78:ff:36:ec:b4:df:96:69:c3:26:d6:dc:4f:56:6f:
1c:18:0f:a2:95:29:d6:2d:65:cf:72:76:eb:0d:15:82:50:a3:
2e:7c:c9:23:33:9f:8c:4f:fe:7f:23:74:48:d6:09:2b:77:be:
5b:40:52:3b:ce:1f:2f:9e:20:27:fa:2b:4b:b0:78:72:0a:ec:
a3:c7:ab:3e:ff:0c:6c:d9:29:2c:45:8b:4d:0e:33:ea:9c:8a:
39:1f:f0:c4:a1:e9:b3:c5:a8:87:3b:ef:82:07:b8:6d:17:56:
10:9c:07:2a:1a:a0:ae:67:8f:ae:61:44:0d:e1:8a:ea:b3:08:
cc:70:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:00 2026 by rpki-client