Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/1mW5uwrA_W3v9jqHQRpyjlHRr8k.roa
File: 1mW5uwrA_W3v9jqHQRpyjlHRr8k.roa (raw, json)
Hash identifier: MvfZK0vopuWN555bO977ZaPEKGpn35Tp4Z56kxBVG7U=
Subject key identifier: D6:65:B9:BB:0A:C0:FD:6D:EF:F6:3A:87:41:1A:72:8E:51:D1:AF:C9
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 01A08B66D61FD2032B67C1C347BD10B8D88D
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/1mW5uwrA_W3v9jqHQRpyjlHRr8k.roa
Signing time: Thu 10 Sep 2026 12:59:27 +0000
ROA not before: Thu 10 Sep 2026 12:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 85.234.224.0/20 maxlen: 20
2a02:bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:66:d6:1f:d2:03:2b:67:c1:c3:47:bd:10:b8:d8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: Sep 10 12:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d665b9bb0ac0fd6deff63a87411a728e51d1afc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:1c:95:e5:cb:26:08:50:1a:f7:a9:7d:27:
5b:47:ec:24:74:30:4d:5b:55:3f:40:c8:ff:08:32:
b1:d9:9e:4a:f3:f4:7f:90:cb:01:7d:8d:2a:9d:68:
7c:bf:47:5c:8d:40:ad:44:96:2f:43:60:e5:52:83:
2e:02:a5:b2:d2:5b:4a:fc:a6:f7:cd:74:62:87:96:
30:51:98:92:10:56:c3:50:f6:a5:c0:e6:83:04:60:
81:72:de:a5:e7:93:a6:c9:d5:81:74:3a:c1:43:6e:
64:59:9e:10:e8:e7:ee:57:dd:af:8d:12:c9:20:22:
f8:67:9b:12:da:ca:32:f4:e3:a5:9c:d1:0c:ef:3b:
20:5e:c0:80:21:1d:60:c1:d3:8b:60:28:53:f9:c4:
34:ca:14:8a:7f:f6:22:b6:26:64:b6:a0:c8:71:36:
39:47:43:0f:99:26:23:9a:cb:f6:63:89:02:02:63:
09:fa:61:95:c5:6e:7c:9b:2b:87:7c:84:3a:bf:0b:
de:fa:31:66:22:d0:16:34:2b:a5:e6:47:f5:05:3a:
cc:dd:d7:12:dc:69:dd:52:82:75:92:c6:ac:f0:cc:
c5:1c:68:3c:15:81:33:a1:97:46:69:96:e7:e6:94:
6c:30:d0:c1:88:8e:2d:a5:bc:1e:33:64:cf:56:29:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:65:B9:BB:0A:C0:FD:6D:EF:F6:3A:87:41:1A:72:8E:51:D1:AF:C9
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/1mW5uwrA_W3v9jqHQRpyjlHRr8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.224.0/20
IPv6:
2a02:bc0::/32
Signature Algorithm: sha256WithRSAEncryption
10:c8:eb:2c:d1:bf:7b:fe:fd:54:46:b8:b6:6c:20:5c:4f:39:
6e:25:61:15:e2:c5:f7:07:53:29:1b:76:7c:0d:cc:6d:5e:10:
5b:b6:c1:c9:fa:cb:64:e2:2a:7e:5c:a1:1f:2f:82:7f:a4:b6:
d0:6b:dd:1f:b8:ca:e5:5a:12:96:91:d8:f4:4e:ee:df:58:c4:
e6:d6:67:df:17:a1:0f:25:7b:ad:62:c5:b9:d8:40:83:91:22:
2a:6b:a2:17:75:9e:39:ce:ef:47:11:07:73:ec:29:6e:83:88:
00:71:5c:5a:c5:d6:94:2a:98:a6:64:c5:68:01:5d:3d:52:09:
b6:80:f2:fa:97:8f:75:81:fa:c6:90:32:22:61:f5:6e:0d:e3:
f1:af:2b:ce:4a:a1:6d:09:bd:72:9f:d4:28:eb:94:91:aa:af:
0a:da:83:72:6d:e9:80:a6:00:6d:d3:65:ec:a5:cd:c2:66:30:
61:f2:4a:cc:45:35:e2:9e:d0:1f:9c:8a:ad:62:7d:0b:10:a8:
50:4e:a2:81:13:59:47:32:6e:0e:10:58:36:b0:6f:65:d4:82:
8e:c1:67:b9:0e:a2:c0:be:8f:99:77:4d:ff:eb:47:26:59:1f:
c0:64:4f:92:43:12:78:ab:98:56:3b:63:d3:b6:4f:5d:5e:1e:
a6:3c:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:02:46 2026 by rpki-client