Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/aLO1_dk6LgzX4fm5tLs5_fRvIQg.roa
File: aLO1_dk6LgzX4fm5tLs5_fRvIQg.roa (raw, json)
Hash identifier: ZIj/y9+pucp6g8B0V5z39DYYd8b4wFUj1DSlFdjES/E=
Subject key identifier: 68:B3:B5:FD:D9:3A:2E:0C:D7:E1:F9:B9:B4:BB:39:FD:F4:6F:21:08
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 01A022DEE398801421754DD25ED78359F026
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/aLO1_dk6LgzX4fm5tLs5_fRvIQg.roa
Signing time: Fri 21 Aug 2026 05:50:27 +0000
ROA not before: Fri 21 Aug 2026 05:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219052
IP address blocks: 77.87.191.0/24 maxlen: 32
2001:678:e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:de:e3:98:80:14:21:75:4d:d2:5e:d7:83:59:f0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Aug 21 05:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68b3b5fdd93a2e0cd7e1f9b9b4bb39fdf46f2108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:87:50:2e:0e:88:98:3e:9f:8c:b4:00:b2:
32:36:5f:52:06:9b:a5:94:7a:d7:96:e6:cc:f1:84:
5b:06:40:39:37:7e:6e:88:8f:22:4d:9f:e4:17:40:
a8:58:31:7d:0e:ad:17:cf:fc:c5:19:ab:e7:10:3e:
5a:e1:ca:0c:db:2d:7d:61:70:11:c4:17:d9:d9:e2:
5f:ee:87:28:55:0e:d2:3a:26:93:e6:24:b0:0e:bd:
57:13:01:b0:d8:1a:68:49:7a:e8:35:5b:5b:bc:93:
b9:8a:f2:37:3a:af:07:44:53:bd:61:6d:5a:32:d4:
3d:92:da:eb:fd:19:b4:cd:19:bc:fd:13:77:72:e4:
ee:17:1c:a5:fc:ee:f4:6a:52:68:6e:2e:a4:c6:79:
93:e0:68:3e:ad:83:00:d9:d3:08:8e:db:65:10:7d:
6b:0c:e5:68:5f:f3:ca:16:51:b4:77:2b:5d:5d:2f:
73:4b:2e:50:c8:33:8d:72:43:0f:01:e5:66:66:7f:
23:b3:95:72:f5:0c:37:a2:ac:02:37:63:4e:1f:d9:
28:a9:68:a2:e2:18:42:38:63:7f:cc:b4:56:5f:08:
e7:6b:3c:a7:31:87:79:9c:2e:ff:69:11:47:48:ad:
6e:a9:ab:8b:68:15:ea:48:3f:0a:20:45:73:4a:30:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:B5:FD:D9:3A:2E:0C:D7:E1:F9:B9:B4:BB:39:FD:F4:6F:21:08
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/aLO1_dk6LgzX4fm5tLs5_fRvIQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.191.0/24
IPv6:
2001:678:e40::/48
Signature Algorithm: sha256WithRSAEncryption
01:06:7a:7e:4f:13:64:ba:bb:9d:f9:64:df:07:7f:00:b3:a5:
d6:36:9b:99:80:74:d9:f7:2a:b6:a8:04:35:36:49:05:85:f3:
0f:27:27:af:78:72:c9:64:59:05:76:e2:fa:94:cf:f7:84:f6:
b8:ea:d4:c4:d3:d0:57:ec:8a:c5:23:34:d2:bb:a3:ee:86:63:
f9:87:5a:19:99:9f:8d:47:02:58:ab:4d:48:61:62:25:8a:df:
de:d8:bf:d1:a8:ec:72:a4:95:22:d8:90:7b:fd:2f:3a:9e:41:
d9:ad:ee:89:76:26:28:46:34:7d:0b:f0:5a:6c:ab:8f:57:6f:
33:69:e9:05:da:93:e0:8f:31:4a:37:ea:8c:0f:03:1a:f0:d9:
06:8c:88:51:3b:ba:78:ae:21:9a:c8:a5:74:b1:8d:f0:35:1a:
89:a9:20:74:3d:f8:15:96:1a:7b:1f:b0:ea:dc:6c:f6:5a:2e:
77:b0:95:1c:ff:9a:2a:52:42:86:a7:27:9b:7a:8f:f1:82:45:
f9:93:0e:6a:a3:02:b0:e2:4b:b9:0d:bb:50:8c:80:f2:58:93:
f1:cd:b9:04:e4:5d:68:b4:6d:4a:1c:81:69:51:53:8a:c8:db:
d8:e0:5d:8a:29:df:68:cc:87:78:8f:96:b6:b5:b1:80:3d:3d:
17:64:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:28:48 2026 by rpki-client