Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/lr5pPhXtC_CqPrNuogf4lkr9PRk.roa
File: lr5pPhXtC_CqPrNuogf4lkr9PRk.roa (raw, json)
Hash identifier: lEm6/EmaZxK7xXQjs0gL6QBNZccCJ9C/Et7XzH7k124=
Subject key identifier: 96:BE:69:3E:15:ED:0B:F0:AA:3E:B3:6E:A2:07:F8:96:4A:FD:3D:19
Certificate issuer: /CN=9e8dd3045b670c089198dbcd95227ba7c51270fe
Certificate serial: 01A0C7E949B2BC2389DD6C2C95C4A9A8ED14
Authority key identifier: 9E:8D:D3:04:5B:67:0C:08:91:98:DB:CD:95:22:7B:A7:C5:12:70:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/no3TBFtnDAiRmNvNlSJ7p8UScP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/lr5pPhXtC_CqPrNuogf4lkr9PRk.roa
Signing time: Tue 22 Sep 2026 06:59:09 +0000
ROA not before: Tue 22 Sep 2026 06:59:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 194.60.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/no3TBFtnDAiRmNvNlSJ7p8UScP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:e9:49:b2:bc:23:89:dd:6c:2c:95:c4:a9:a8:ed:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8dd3045b670c089198dbcd95227ba7c51270fe
Validity
Not Before: Sep 22 06:59:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96be693e15ed0bf0aa3eb36ea207f8964afd3d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:7c:65:3e:da:0a:a6:91:5b:cc:bb:7c:9e:
42:3a:09:81:19:9d:fe:33:f5:8d:a8:72:e4:d8:ec:
f3:ca:05:7a:a6:19:a7:93:dc:52:ff:50:70:c1:01:
7c:03:9b:20:d3:23:04:ad:b8:69:77:32:26:4e:79:
f9:b5:8f:73:eb:90:e1:6f:37:dd:84:6c:d4:55:16:
38:79:b6:ae:58:81:ca:e8:9a:96:4c:04:61:92:78:
f4:de:40:5e:de:0e:b8:28:28:a9:17:8e:ea:4c:2e:
86:ed:c8:f0:46:04:7e:0d:46:11:cc:ed:1f:b2:98:
9f:05:5b:dd:43:80:dd:3c:3a:71:3c:e1:cd:f3:c2:
bd:b1:66:92:7f:79:41:4c:e0:13:16:a2:89:e5:6f:
12:7b:e3:7c:57:2b:52:44:49:ed:78:6d:a8:31:1f:
57:27:bf:44:bb:d0:ca:9b:eb:43:9f:1c:14:69:94:
7e:d3:3c:ea:04:7a:5e:17:32:92:e1:a0:a3:41:c8:
bc:c3:e7:10:2a:10:aa:fd:3c:1b:1f:4c:ad:02:ce:
b6:f9:96:00:6e:a1:4e:41:d7:58:dc:e8:c1:cf:5e:
f6:2c:9e:84:3a:fc:8d:2c:0f:1f:15:2e:5b:18:2f:
b1:fa:5c:af:c7:eb:e0:3b:67:34:df:00:31:e0:5c:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BE:69:3E:15:ED:0B:F0:AA:3E:B3:6E:A2:07:F8:96:4A:FD:3D:19
X509v3 Authority Key Identifier:
keyid:9E:8D:D3:04:5B:67:0C:08:91:98:DB:CD:95:22:7B:A7:C5:12:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/no3TBFtnDAiRmNvNlSJ7p8UScP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/lr5pPhXtC_CqPrNuogf4lkr9PRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:04:7f:b3:6a:a8:eb:0f:a9:44:2d:43:80:7b:ef:13:30:d3:
2b:2a:d2:97:3b:f5:69:ed:ee:7f:32:10:14:f0:1c:34:44:dd:
a4:a8:93:a4:51:bd:54:3e:53:2f:50:ea:29:ce:76:34:48:47:
74:f3:d4:76:c9:f2:91:b9:42:2b:10:ae:84:05:55:f8:3f:55:
91:66:b5:a4:33:35:4f:db:ac:a1:d4:33:d7:ab:2b:bb:5f:8e:
5c:79:b3:00:62:1d:84:49:ed:69:01:a4:84:9a:6a:da:a3:67:
6e:c0:aa:ef:d1:c8:60:b0:0f:47:3a:be:43:9d:72:07:d9:be:
c2:c8:90:e8:9f:bd:31:31:4e:c2:2a:7a:3f:6b:01:53:6a:f0:
d4:9a:df:4f:16:4e:77:03:ab:a0:ea:90:33:71:b8:61:7b:ab:
63:1c:40:43:c2:73:1f:c6:2b:c8:e2:50:d6:8d:07:37:7c:5f:
4c:0f:be:05:ce:ba:11:6b:c4:33:e7:29:12:58:75:41:a5:5c:
5b:62:86:9e:ab:fd:34:c8:97:eb:06:1b:75:3e:6d:b5:b7:7f:
9e:ca:8d:e3:d4:39:82:a6:69:59:67:2c:22:ca:41:0a:57:c0:
41:53:5b:4e:85:e6:36:0a:72:83:b2:96:b3:0e:7f:b8:8e:d4:
7c:25:cf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:26 2026 by rpki-client