Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/120r8ZGRXnSEGgoYd0ESGLcJYeY.roa
File: 120r8ZGRXnSEGgoYd0ESGLcJYeY.roa (raw, json)
Hash identifier: QqXXHGyWXIw9zufZ0Mb3rfLz+X/7k3Qi2ANi80nwNPI=
Subject key identifier: D7:6D:2B:F1:91:91:5E:74:84:1A:0A:18:77:41:12:18:B7:09:61:E6
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1C518C46C2BAC56A48D7BE02F0DCEF3C6
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/120r8ZGRXnSEGgoYd0ESGLcJYeY.roa
Signing time: Tue 10 Nov 2026 10:54:56 +0000
ROA not before: Tue 10 Nov 2026 10:54:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34224
IP address blocks: 185.101.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:18:c4:6c:2b:ac:56:a4:8d:7b:e0:2f:0d:ce:f3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Nov 10 10:54:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d76d2bf191915e74841a0a1877411218b70961e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:d3:4b:df:84:a0:0f:32:bc:81:26:67:53:
64:c8:e8:97:fe:a6:ee:b6:c3:8c:3a:75:61:be:b8:
6b:ed:59:34:f9:f1:b2:4c:cb:fc:a9:de:f1:7e:83:
03:bf:20:1c:2c:71:ac:bf:8e:29:09:ff:ea:61:10:
0c:84:51:d4:b4:c2:d3:cc:14:23:c3:0c:20:15:2f:
92:98:60:71:af:b4:f6:a3:aa:fc:b8:24:f7:59:86:
89:14:59:74:c1:04:f0:9c:f4:17:48:53:e1:4b:e6:
2e:c8:6f:fa:d0:52:77:be:21:0e:bd:78:10:29:b7:
c0:f9:d6:93:20:8e:80:67:bf:59:e9:e8:60:3d:38:
77:f3:79:de:79:f6:a2:80:1e:37:a4:ca:26:af:2f:
06:02:dd:0b:40:d6:b5:04:6c:fa:56:e6:ef:ce:92:
f8:5c:d6:18:10:b7:38:d5:ce:00:87:e5:1e:17:71:
ea:c2:9e:5a:17:a9:0c:ef:04:93:7a:b5:29:21:8a:
30:52:e6:28:f3:53:74:35:c8:62:65:85:ac:ae:42:
64:e1:c9:77:8a:ab:30:89:de:fe:65:63:1d:a9:6f:
27:c5:f4:8c:a4:f6:3f:c9:43:c2:11:3a:98:e0:fe:
5f:ce:7e:31:c7:92:58:38:78:96:bb:10:17:e2:ec:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6D:2B:F1:91:91:5E:74:84:1A:0A:18:77:41:12:18:B7:09:61:E6
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/120r8ZGRXnSEGgoYd0ESGLcJYeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0a:9b:28:f8:d1:c4:a5:44:5a:79:2d:e1:83:2e:4b:3a:97:
c7:71:2e:8c:c9:ad:9b:c7:1e:16:2a:13:7d:62:db:ac:a7:09:
3e:d7:39:55:d4:b3:9e:9f:bf:05:28:d7:ac:d8:fb:d3:a8:26:
0f:ad:d6:dc:91:48:5e:90:d9:58:d2:dd:eb:e0:1b:2e:0d:84:
b4:76:db:d0:eb:f5:fc:e8:36:53:c0:0c:92:d8:f7:74:2c:7e:
d1:26:f2:ad:75:92:55:65:2d:e4:0f:c0:38:c1:28:bb:79:4f:
3b:15:6b:ea:30:dc:53:55:3e:9d:83:1e:b1:ca:2c:5a:ec:d5:
43:21:16:f1:23:c3:6e:5c:5e:d0:06:52:24:ad:90:27:d6:2d:
88:92:fd:5b:7b:f2:d6:86:11:0c:d6:59:a5:59:f5:66:d7:70:
c0:d1:1c:d0:a2:16:cf:f9:e7:ef:84:ed:61:0e:6f:31:e6:68:
35:c9:cb:fd:c4:dc:22:85:c0:73:c1:a9:9c:6d:bc:46:58:3d:
a2:c9:76:1d:37:51:c4:1f:4f:81:11:fb:fc:1e:e5:d2:ea:09:
eb:1f:de:83:51:7f:5a:a0:b2:a3:b7:b0:04:7c:42:5d:c9:36:
3e:a1:1b:fe:e6:6d:a2:c4:c6:73:be:8a:fa:db:88:9c:99:61:
44:e0:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:29:28 2026 by rpki-client