Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ABsGa_x0LVeOWh8nacBO3hPlX8s.roa
File: ABsGa_x0LVeOWh8nacBO3hPlX8s.roa (raw, json)
Hash identifier: w/HbnJsL5nwMbdNqytCxR3QohEjjsPfouxp0rdvi1ao=
Subject key identifier: 00:1B:06:6B:FC:74:2D:57:8E:5A:1F:27:69:C0:4E:DE:13:E5:5F:CB
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A1CC143B62E239B3A67FEB229B5151D9B6
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ABsGa_x0LVeOWh8nacBO3hPlX8s.roa
Signing time: Wed 11 Nov 2026 19:27:20 +0000
ROA not before: Wed 11 Nov 2026 19:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214822
IP address blocks: 189.74.125.0/24 maxlen: 24
191.44.37.0/24 maxlen: 24
191.44.38.0/24 maxlen: 24
191.44.54.0/24 maxlen: 24
191.44.56.0/24 maxlen: 24
201.50.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cc:14:3b:62:e2:39:b3:a6:7f:eb:22:9b:51:51:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Nov 11 19:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=001b066bfc742d578e5a1f2769c04ede13e55fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:22:c0:ce:38:b9:94:48:55:80:04:41:54:
b8:6c:9f:c6:bc:b7:f8:3d:22:6b:c1:8a:fc:98:9f:
93:17:21:b2:77:3a:cf:4d:04:8c:0b:13:48:47:5d:
db:0f:60:09:9c:1b:96:03:b4:c4:39:36:f4:80:c9:
f7:0e:21:6a:9f:c0:5d:22:5f:a5:85:df:6a:4a:72:
12:c2:fb:41:9f:ed:dc:44:ab:bf:52:9b:47:6e:f5:
52:50:3b:8c:a5:a9:b2:ee:16:14:b4:de:d9:1e:fa:
8a:c4:96:a1:db:cf:ae:11:1f:0a:6c:0e:13:e8:07:
1a:0b:d7:4a:0d:83:43:0b:38:dc:0f:3b:0f:7c:ca:
a1:b5:3a:a1:9e:ff:53:85:87:6c:1f:ed:81:28:57:
c2:2e:45:dc:b1:d6:50:a8:83:17:ce:db:f1:1c:ba:
6a:ec:25:fd:0a:d1:b6:e7:d7:2e:7c:af:28:83:f5:
82:11:50:46:e3:f7:3e:77:af:5e:0c:0b:c2:92:b6:
a0:fc:fb:60:da:21:0a:c2:4e:46:01:aa:70:76:54:
f5:95:65:7c:e2:74:7b:46:8c:0f:af:29:22:10:fc:
f8:22:bc:b7:61:92:32:dd:07:bd:ac:3d:af:85:b0:
e3:0c:3c:84:ae:b3:59:12:a3:aa:11:01:c4:b2:c7:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:06:6B:FC:74:2D:57:8E:5A:1F:27:69:C0:4E:DE:13:E5:5F:CB
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ABsGa_x0LVeOWh8nacBO3hPlX8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.125.0/24
191.44.37.0-191.44.38.255
191.44.54.0/24
191.44.56.0/24
201.50.116.0/24
Signature Algorithm: sha256WithRSAEncryption
08:83:02:e6:3b:07:30:61:1a:3a:c5:7e:88:a6:f4:0d:80:a6:
8b:a4:48:2f:db:15:aa:3e:3b:8d:bd:84:9b:48:1a:f0:b2:89:
91:c7:72:e6:5a:df:b4:3e:ad:e0:45:e6:9d:01:3b:50:61:a8:
37:55:73:f5:73:c8:1b:25:3a:82:69:a7:41:1b:12:f7:b3:43:
5a:55:21:02:8b:55:43:f0:c0:25:42:49:98:67:a0:37:91:4d:
03:21:ff:e5:f9:9f:b2:ce:86:0c:fe:f1:f7:a6:4e:30:c1:18:
13:05:7f:fb:a4:ce:78:ce:e5:b9:07:85:93:d4:a8:4a:d9:dd:
3c:8a:57:32:11:e5:00:f7:d6:fa:5e:94:ef:83:8b:2b:78:b5:
41:a0:b7:e8:60:36:25:20:fe:53:24:0d:01:9e:d0:2f:f7:23:
c9:ac:6b:6b:b4:06:5b:c8:9d:27:14:38:2c:ec:89:fd:7f:2d:
78:9e:1c:d9:e3:1a:39:a6:e1:7b:e5:1a:a9:db:12:8e:9d:43:
7a:2d:58:d1:69:df:ca:35:a9:e4:6d:0c:dd:8f:6b:b8:b5:5d:
78:f3:d7:aa:b7:95:20:71:32:5a:2c:1e:81:7d:98:51:89:0f:
33:68:3a:c1:05:2b:de:59:75:7a:87:c2:99:12:f2:9e:e8:1c:
cb:21:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:59:24 2026 by rpki-client