Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/abPQvZftn6KJAeQY-dEytO7cxZY.roa
File: abPQvZftn6KJAeQY-dEytO7cxZY.roa (raw, json)
Hash identifier: R8vNG4brLgkvsyByQsU/FMzt+IrfXl75oZ8JXs9klhQ=
Subject key identifier: 69:B3:D0:BD:97:ED:9F:A2:89:01:E4:18:F9:D1:32:B4:EE:DC:C5:96
Certificate issuer: /CN=4a4a0e1c939f0aeac67107ea07fdae516bdbf705
Certificate serial: 019F1D7B3FC2D18DF624431EFEC1FFC301E6
Authority key identifier: 4A:4A:0E:1C:93:9F:0A:EA:C6:71:07:EA:07:FD:AE:51:6B:DB:F7:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/abPQvZftn6KJAeQY-dEytO7cxZY.roa
Signing time: Wed 01 Jul 2026 11:40:44 +0000
ROA not before: Wed 01 Jul 2026 11:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 141.0.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:7b:3f:c2:d1:8d:f6:24:43:1e:fe:c1:ff:c3:01:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4a0e1c939f0aeac67107ea07fdae516bdbf705
Validity
Not Before: Jul 1 11:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69b3d0bd97ed9fa28901e418f9d132b4eedcc596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:46:98:d8:00:44:3d:67:0c:b3:e9:f7:80:
f5:3a:3d:64:5b:5e:67:73:e8:e2:f5:70:b6:36:a6:
0b:8a:1f:25:21:40:ee:2e:3b:f6:dd:6a:59:c0:50:
f5:02:5b:82:85:e4:51:77:5c:cf:14:ac:f1:97:b1:
68:f7:2d:48:51:e5:fa:45:37:ed:17:35:ec:41:c5:
f8:87:7a:ed:ee:7b:8f:62:30:04:3e:7c:3d:b5:68:
51:14:62:b3:8d:3b:54:6b:07:73:2e:18:d8:e8:17:
02:b0:f3:55:a0:aa:f5:2b:1b:ab:bb:1f:5d:c3:c1:
e7:f3:03:01:3e:f9:36:7f:bd:1f:be:6d:e9:6b:a6:
26:8d:bc:6b:fb:cf:ee:55:fb:eb:a2:73:7d:d5:8d:
4f:99:ad:6c:c1:56:68:8a:ac:ba:21:35:ab:5c:2b:
90:5f:0f:cf:20:43:62:a9:0b:56:77:b1:be:58:4b:
a6:d6:c3:da:42:9e:9f:71:99:f8:36:ef:f6:3c:a6:
a3:99:75:5b:26:ad:52:4f:ce:f5:6b:e3:88:3d:f3:
46:7a:ab:3b:4e:80:a2:37:0f:b7:3b:85:f8:52:f4:
54:57:ba:09:3a:28:9d:c8:37:ac:b6:fd:fa:37:8d:
1b:63:af:91:e5:19:1e:ec:b2:3a:b5:84:75:44:b3:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B3:D0:BD:97:ED:9F:A2:89:01:E4:18:F9:D1:32:B4:EE:DC:C5:96
X509v3 Authority Key Identifier:
keyid:4A:4A:0E:1C:93:9F:0A:EA:C6:71:07:EA:07:FD:AE:51:6B:DB:F7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/abPQvZftn6KJAeQY-dEytO7cxZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.196.0/22
Signature Algorithm: sha256WithRSAEncryption
66:c6:cf:e9:ba:3d:e5:8c:6a:ee:0b:69:36:2b:c4:24:bb:db:
2d:24:92:f2:65:8c:88:a6:73:f3:62:32:55:f4:40:9e:ce:b0:
f7:cd:e9:12:24:a3:f8:ab:ba:d4:64:53:9e:bf:4d:77:72:6e:
7f:cb:db:7e:3e:d1:3f:ff:7a:8e:a2:3e:52:ef:3b:3a:77:cf:
8f:34:a1:65:05:95:f2:45:07:47:fb:6b:a3:ca:73:9a:36:f0:
c9:29:8c:2e:32:bc:12:87:fc:41:58:d4:78:4e:51:25:c3:e8:
0a:ec:86:71:83:f2:65:60:83:dd:3e:3e:ee:bc:fd:95:00:86:
14:9c:4f:15:98:ec:1c:de:21:86:f8:69:b1:9c:ef:77:e4:a0:
4d:49:5c:04:57:1a:d4:ac:cc:5b:f0:22:b0:af:30:b4:db:2d:
ff:39:61:90:c9:17:08:d4:f8:08:42:9d:43:13:4e:50:72:c4:
8c:29:60:03:72:2d:45:48:a4:69:0d:fa:bb:a7:46:20:e7:f9:
ba:7d:86:5b:77:40:34:a8:c2:f7:d7:ab:11:2c:8e:76:09:3a:
12:41:86:98:b4:97:7b:79:04:df:b5:a0:c3:61:1c:40:2f:2a:
14:f1:fe:73:3f:47:03:c3:f4:06:45:29:d9:2c:54:ae:c5:d3:
ac:d3:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:09 2026 by rpki-client