Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-yJa-avrY8x6w-4otYTSTDiLJR0.roa
File: 1-yJa-avrY8x6w-4otYTSTDiLJR0.roa (raw, json)
Hash identifier: 6ixP2sR/OqLm9dIwOEysGfcO1nnOM7u3K7IbQrcTPfs=
Subject key identifier: FB:22:5A:F9:AB:EB:63:CC:7A:C3:EE:28:B5:84:D2:4C:38:8B:25:1D
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1C4DE2B0D437D0F9BB0E8E28570E3857A
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-yJa-avrY8x6w-4otYTSTDiLJR0.roa
Signing time: Tue 10 Nov 2026 09:50:56 +0000
ROA not before: Tue 10 Nov 2026 09:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 138.249.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:de:2b:0d:43:7d:0f:9b:b0:e8:e2:85:70:e3:85:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 10 09:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb225af9abeb63cc7ac3ee28b584d24c388b251d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:33:19:e8:c1:8d:4b:94:a0:77:4e:cc:9d:
29:9d:de:9c:40:25:16:3f:03:b2:7a:1c:37:01:1d:
44:cd:53:eb:60:23:3d:c2:eb:fd:06:3e:cd:57:1e:
78:16:54:ac:27:d2:4e:fd:aa:21:71:a7:b1:0c:d8:
e8:c9:7b:8f:90:20:4b:16:84:a4:2c:02:61:fb:52:
24:0b:8c:f1:91:4f:d2:c4:6f:07:5d:d7:6e:5b:e4:
ec:0e:98:dd:e4:dc:1f:98:93:be:5a:80:38:98:0a:
b7:eb:ba:5c:d9:78:b3:9b:00:5e:9e:45:70:18:09:
fe:3a:2e:39:a7:34:47:85:4b:81:4b:8f:66:36:3b:
f1:26:b4:54:ae:a8:9b:e2:cb:90:4d:ce:4e:fc:ce:
96:21:e7:de:28:84:d6:59:f6:86:a2:4e:db:4f:fd:
cc:d4:57:48:6f:5b:d5:a7:15:87:24:86:3c:2b:45:
83:13:6a:57:cf:2c:27:77:0d:b2:e4:9f:12:32:ef:
72:87:0e:df:ee:3c:35:ab:c9:8a:55:40:6e:4e:aa:
1e:1a:eb:98:54:31:45:a5:77:b5:97:5c:e1:4d:ca:
45:16:8d:da:ea:f4:46:16:5c:d5:81:1f:db:20:87:
2a:a7:d6:8a:cf:d8:50:4f:1b:70:34:d1:03:b2:7e:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:5A:F9:AB:EB:63:CC:7A:C3:EE:28:B5:84:D2:4C:38:8B:25:1D
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-yJa-avrY8x6w-4otYTSTDiLJR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:27:33:ef:97:11:77:7f:8a:6d:f9:27:22:58:e9:d7:14:02:
66:c1:29:2e:f0:19:ab:93:8c:e2:25:e5:9f:ec:fa:6b:cc:ae:
e9:f7:84:f5:dd:22:28:0b:14:26:51:45:c8:3d:5a:ac:23:e4:
1d:4a:5e:8c:7e:ed:48:2e:7f:a7:50:04:0c:9f:28:44:b7:7e:
0b:95:27:9a:26:d7:91:d3:87:52:99:a1:2a:5a:53:55:51:c4:
6e:42:52:60:a1:ba:1f:c2:7c:9c:18:e8:29:db:03:96:38:dd:
cb:c7:39:4d:11:dc:c7:eb:1e:86:50:62:ca:53:55:6a:51:5d:
7e:24:dd:de:db:9c:93:3f:e1:78:de:93:dc:ea:2c:8d:48:75:
04:ad:50:b5:c7:da:f8:ca:1c:72:ea:10:42:59:c0:0a:8e:80:
a2:0a:e3:40:49:03:f2:13:6e:98:6b:4e:79:1c:3c:76:f7:ff:
51:7b:ca:5c:09:00:55:07:67:23:25:18:16:6c:fc:9f:95:da:
09:4a:f2:ed:93:2f:fc:47:d6:be:a1:cb:09:55:a2:ba:79:92:
2c:35:42:c6:21:98:3b:3e:70:ef:59:dd:cf:d1:a4:26:cc:62:
62:87:5c:4d:95:dd:97:e3:1a:ae:31:87:b2:21:13:8a:fa:50:
06:e9:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:19 2026 by rpki-client