Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/rLBH5svB1VS7QwTo-P4BbPtkWjg.roa
File: rLBH5svB1VS7QwTo-P4BbPtkWjg.roa (raw, json)
Hash identifier: GQC3l20U3FlDBntbQklVVfQJJPpYk08bWSGvYtXz6vY=
Subject key identifier: AC:B0:47:E6:CB:C1:D5:54:BB:43:04:E8:F8:FE:01:6C:FB:64:5A:38
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A1825DAD998E7AAA31513811E270E08202
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/rLBH5svB1VS7QwTo-P4BbPtkWjg.roa
Signing time: Wed 28 Oct 2026 11:55:39 +0000
ROA not before: Wed 28 Oct 2026 11:55:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 185.96.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:5d:ad:99:8e:7a:aa:31:51:38:11:e2:70:e0:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Oct 28 11:55:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acb047e6cbc1d554bb4304e8f8fe016cfb645a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:da:3f:a5:9e:ba:d7:e4:14:fc:17:e0:67:
ad:29:7f:42:1d:fc:24:8f:78:54:e3:d9:93:bf:93:
47:8c:0a:7f:2b:ed:85:5f:b9:07:fe:38:5c:e7:0e:
b2:05:85:45:51:01:96:50:76:85:7b:b8:8b:03:45:
a7:d7:25:ed:cc:44:aa:c4:4c:70:13:cf:79:31:b6:
b4:38:ea:fc:cb:97:c7:79:31:96:8f:66:54:18:c5:
6a:28:9d:e9:c5:5c:ed:e9:7c:20:78:aa:ac:61:0b:
99:b6:00:5c:7d:aa:0d:80:6e:6b:56:13:0a:1f:7d:
37:45:09:1a:61:bf:4c:b3:2a:e7:99:29:af:84:af:
97:a2:19:3d:c7:f0:f7:0a:f0:00:33:59:c0:7f:5d:
77:a3:ef:9b:8e:af:10:0b:d2:43:32:54:21:44:ba:
a0:0e:9b:d4:b1:28:c6:40:d3:61:86:66:49:f5:b0:
8e:40:7e:bd:af:54:fd:52:ba:5a:ad:30:0b:79:64:
69:95:0c:dd:e5:14:b8:d5:a5:01:69:ca:f5:ad:6f:
d1:f8:99:54:aa:be:4c:d4:ed:50:e7:02:cf:44:c8:
ed:eb:7b:1d:c0:97:4c:4e:06:e5:46:69:05:e1:62:
d4:39:3c:99:41:52:d0:93:ba:9e:a8:c1:2c:70:f4:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B0:47:E6:CB:C1:D5:54:BB:43:04:E8:F8:FE:01:6C:FB:64:5A:38
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/rLBH5svB1VS7QwTo-P4BbPtkWjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c2:37:d5:0a:50:17:dc:f5:40:90:a0:4b:49:68:3e:ac:eb:
e5:4d:7e:b5:37:d3:16:00:8b:5a:03:33:d3:a3:c4:8f:c4:52:
8d:63:35:a4:bd:c9:18:9b:b8:2e:0f:b1:7a:cf:8c:ef:fd:1a:
04:9f:f9:45:e0:25:4f:2c:49:af:ca:fb:c0:47:9b:aa:7c:b2:
48:2b:c8:aa:c4:35:a9:d6:d5:ae:12:c1:77:9b:89:e7:cf:20:
7e:9a:9b:c2:ad:d5:d1:d4:9e:5b:e9:90:36:91:de:da:7f:67:
30:19:87:fd:35:be:70:82:8a:d0:ab:00:13:d2:0a:fd:2f:6b:
ad:7b:d3:58:22:67:3a:b2:f1:22:7a:75:88:96:23:c3:11:6b:
f8:15:55:a7:50:3a:ac:47:0c:ad:72:37:fd:82:98:f4:2d:c9:
81:7d:70:8d:d2:ad:ec:c8:01:66:bb:2d:0c:1d:fb:db:06:a3:
0f:75:ed:1a:74:cd:4a:2d:46:b2:8f:66:b0:32:7b:b8:78:4f:
17:e5:d1:60:24:90:ff:8a:3d:f3:1c:4a:e9:b7:57:05:55:56:
4d:97:84:0f:ed:34:70:2b:38:6c:b5:8b:5a:b1:d2:6c:a6:df:
4b:ad:d2:34:42:9f:25:81:b8:0f:5b:b2:db:84:c5:80:fa:ae:
84:7f:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:25:22 2026 by rpki-client