Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/pxLEF2RjrsmWxr__FiJCGd0O-XA.roa
File: pxLEF2RjrsmWxr__FiJCGd0O-XA.roa (raw, json)
Hash identifier: 8cpNLcp+mPcQuR/BygpDtykHgjpRRhd/HLzOIgKs5zc=
Subject key identifier: A7:12:C4:17:64:63:AE:C9:96:C6:BF:FF:16:22:42:19:DD:0E:F9:70
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01A1B12AB600429D20D9B3A1F943B9D1983E
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/pxLEF2RjrsmWxr__FiJCGd0O-XA.roa
Signing time: Fri 06 Nov 2026 14:02:08 +0000
ROA not before: Fri 06 Nov 2026 14:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15510
IP address blocks: 194.34.245.0/24 maxlen: 24
194.34.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:2a:b6:00:42:9d:20:d9:b3:a1:f9:43:b9:d1:98:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Nov 6 14:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a712c4176463aec996c6bfff16224219dd0ef970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:fb:35:ee:e1:6e:35:9e:91:26:a6:12:e2:
47:9a:96:fe:ee:53:98:ba:84:45:5c:94:54:97:7f:
b5:a7:56:0c:7d:17:c7:83:96:94:38:fb:be:03:f1:
8f:0a:8a:1e:98:02:ff:0c:1f:09:34:f0:9f:9c:3e:
98:52:f8:ae:f0:4e:44:63:be:65:00:75:6b:ea:db:
74:b8:96:bf:51:45:f1:20:34:b8:01:55:92:6b:78:
19:60:8e:59:af:72:dd:1f:ad:6b:91:d7:dd:f6:f4:
28:d7:ed:b9:3a:c6:16:6e:8a:63:31:df:62:16:7f:
e9:91:99:a7:d0:91:6a:7a:f1:88:e3:cf:17:2f:0f:
cd:0f:34:1d:e8:ac:7e:c5:9e:96:e4:9c:bc:f5:d9:
d3:6e:19:5f:76:03:da:9a:8e:05:88:90:b7:77:07:
e5:3e:06:63:6c:58:9a:df:17:67:ca:c5:84:16:12:
a4:37:f5:b1:5a:1b:6b:de:b9:42:e7:de:22:00:3e:
ee:de:a0:d4:ce:16:29:a9:60:a8:f8:6f:9c:fa:13:
3a:26:3d:f1:d1:da:38:ce:74:17:c7:87:c3:35:f0:
10:f4:95:f1:b1:fd:ba:7b:d4:78:16:f7:eb:4b:ec:
d5:bf:58:ca:5b:eb:7a:39:a8:8b:f2:65:46:84:89:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:12:C4:17:64:63:AE:C9:96:C6:BF:FF:16:22:42:19:DD:0E:F9:70
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/pxLEF2RjrsmWxr__FiJCGd0O-XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.245.0/24
194.34.247.0/24
Signature Algorithm: sha256WithRSAEncryption
84:90:77:03:7a:b2:92:2a:a5:a6:99:30:f3:63:2f:78:7f:2a:
93:e2:9c:be:f2:90:d9:52:be:97:28:03:d2:39:bc:6c:83:6f:
78:e4:d7:c3:6c:e0:35:f4:9e:a1:2b:83:bc:b7:45:41:ea:12:
d2:55:4c:6b:41:70:9a:e8:b7:9a:1a:62:c3:65:f4:bb:b6:89:
89:4c:d8:26:d3:a1:c8:23:35:f7:48:f5:a3:74:f3:32:64:2b:
b9:70:02:69:3f:f9:ba:cb:c0:69:b3:16:63:05:2b:c7:36:bb:
b9:02:92:e0:c6:1e:4b:52:84:11:16:d8:cf:17:20:57:bb:3f:
ea:da:4e:9b:9b:ee:a5:da:6f:40:b1:12:d1:c4:49:fb:09:de:
2f:2c:a7:83:32:99:a3:3a:28:2b:9a:bf:db:2f:45:84:84:7d:
88:13:6a:e6:24:d6:ac:0a:0a:37:b0:a0:d1:79:e8:39:5a:79:
09:62:87:36:ba:c6:45:98:0d:5f:12:33:99:10:b4:ed:96:89:
19:6a:26:97:7f:12:1e:24:48:3d:ed:96:cd:77:d8:10:bb:0c:
ff:30:08:d2:54:7a:07:5f:f7:20:aa:20:22:29:4e:aa:85:00:
19:ad:7b:20:ae:27:b2:47:43:38:cd:ab:f5:e4:6c:77:63:29:
a9:a5:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:39 2026 by rpki-client