Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/1-yrh7o7l73BoZ4mxu1Sc2NNXao.roa
File: 1-yrh7o7l73BoZ4mxu1Sc2NNXao.roa (raw, json)
Hash identifier: REAlvue4rS4WJe/Gx81v/QcR074zYeNDV7Fc3dUQZ50=
Subject key identifier: D7:EC:AB:87:BA:3B:97:BD:C1:A1:9E:26:C6:ED:52:73:63:4D:5D:AA
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01A1A6BCDF81382E4D6A532FA20E196FC42B
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/1-yrh7o7l73BoZ4mxu1Sc2NNXao.roa
Signing time: Wed 04 Nov 2026 13:25:58 +0000
ROA not before: Wed 04 Nov 2026 13:25:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214321
IP address blocks: 185.127.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:bc:df:81:38:2e:4d:6a:53:2f:a2:0e:19:6f:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Nov 4 13:25:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7ecab87ba3b97bdc1a19e26c6ed5273634d5daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:e7:6f:5f:51:85:e3:74:6c:80:d3:f2:12:
3d:ea:f4:f2:41:d9:9a:b9:ad:51:3d:cc:8d:e5:fd:
85:e7:38:5c:8d:ac:ab:3a:b1:cd:ae:13:5e:d5:de:
7d:48:f0:a4:c7:43:f8:90:2e:64:8b:a6:9e:d6:86:
dc:7f:01:d9:ce:b5:0b:97:c8:54:16:33:0d:9d:a4:
19:42:a6:f7:75:8b:8a:ad:7b:dd:a2:03:1f:2d:04:
4f:6a:59:69:c3:c1:05:c8:68:15:eb:6f:22:6e:ac:
7b:3e:a9:7a:a6:44:96:a6:46:6d:7e:a9:f4:35:c1:
c6:e4:68:1a:63:21:74:c5:9a:8f:2e:b0:fd:d5:57:
dd:29:fd:ae:59:9d:91:24:22:88:b9:cf:93:5e:c2:
e7:64:f3:95:30:79:b1:a7:18:3d:2b:db:ba:b1:06:
71:7b:92:3c:19:1f:10:f9:e1:0b:9a:73:2d:b2:0f:
09:ef:ce:81:a5:21:0d:96:e9:60:c3:d6:7b:b4:66:
14:eb:ee:6a:86:93:6a:c0:a3:f3:71:ed:ec:61:44:
dd:48:83:02:2e:c1:5a:81:fb:43:5c:95:0c:57:66:
12:c8:df:f2:fa:55:f2:63:75:6c:bd:b3:55:14:fa:
b6:e6:cc:82:42:69:d3:db:3c:e2:0c:38:84:16:21:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:AB:87:BA:3B:97:BD:C1:A1:9E:26:C6:ED:52:73:63:4D:5D:AA
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/1-yrh7o7l73BoZ4mxu1Sc2NNXao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:41:ba:5d:5d:9b:6b:cd:5f:92:45:d2:80:16:6a:96:16:43:
d5:79:06:44:c6:7e:e0:30:78:bf:01:4d:75:9e:d3:d1:21:3c:
9a:c8:c9:6a:86:86:16:af:bf:12:b3:49:9d:e6:ee:8c:be:88:
bb:b0:de:95:b1:49:1e:11:12:c8:1a:97:71:42:9d:5a:3e:fd:
4c:b1:13:84:8d:04:2b:68:af:83:7b:e3:03:1b:a5:77:b7:ea:
e7:a9:c0:90:89:0a:9b:19:49:5b:e7:bf:a1:47:eb:b3:f4:00:
20:03:70:d3:81:c5:70:e2:f0:ec:24:55:a0:18:29:79:7c:24:
2f:b5:e7:52:57:7d:f3:de:d1:0e:bc:1a:8f:a4:eb:d6:71:ed:
b0:95:2d:97:39:19:d1:7e:a4:5c:47:86:f0:63:cf:4b:3a:99:
8a:c3:ea:80:c7:be:8e:38:c1:b2:16:57:e2:c8:4f:0f:1f:83:
86:2e:fb:53:8d:e3:f8:11:82:87:8d:f7:f0:39:56:04:75:5b:
1b:5d:11:62:ad:c2:e6:18:e4:75:a9:5f:52:63:da:df:6a:24:
11:9f:47:de:cc:a7:7a:c1:0c:dc:31:2b:4f:d5:be:8a:40:9b:
5d:93:20:72:27:ed:37:60:3c:4a:e0:84:73:4e:ee:8f:42:6f:
21:e3:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:24:53 2026 by rpki-client