Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/H_GEWT7z6ttbEt24HiB7J1QFRDQ.roa
File: H_GEWT7z6ttbEt24HiB7J1QFRDQ.roa (raw, json)
Hash identifier: u1Rv29NW5fMjioWnWp4CaMR30l3FVNTJh80UQ7C1cZc=
Subject key identifier: 1F:F1:84:59:3E:F3:EA:DB:5B:12:DD:B8:1E:20:7B:27:54:05:44:34
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 01A1CAB93EE8720DAD963A6F466D9549DD99
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/H_GEWT7z6ttbEt24HiB7J1QFRDQ.roa
Signing time: Wed 11 Nov 2026 13:08:20 +0000
ROA not before: Wed 11 Nov 2026 13:08:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 204.57.220.0/24 maxlen: 24
208.90.252.0/24 maxlen: 24
208.90.253.0/24 maxlen: 24
2001:678:13e8::/48 maxlen: 48
2001:678:13ec::/48 maxlen: 48
2001:67c:e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:b9:3e:e8:72:0d:ad:96:3a:6f:46:6d:95:49:dd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Nov 11 13:08:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ff184593ef3eadb5b12ddb81e207b2754054434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:3c:dd:13:c5:a5:46:b3:0f:44:53:99:f8:
36:f0:5b:2c:63:e0:5b:11:52:bd:fc:e0:52:00:08:
aa:8e:e5:7e:5c:3c:ee:56:b3:6f:61:00:98:43:08:
a5:7d:3a:1a:48:94:ea:1f:38:80:ab:72:c6:00:04:
1c:ea:28:66:46:e7:db:5f:8d:16:e9:d3:bf:e4:52:
d5:ef:89:21:6b:75:6a:a2:8a:02:64:97:59:9f:c3:
c1:20:e9:c8:18:dc:db:49:3c:55:72:0c:76:b1:39:
a7:64:de:0e:93:56:e9:8f:90:41:5d:6e:3c:c3:1c:
11:81:7a:a4:ff:b5:0a:5d:b5:4a:2f:31:4a:c4:03:
eb:e6:5c:f9:74:db:6c:c9:fe:7d:88:64:20:18:ef:
de:c0:b4:db:21:f3:ec:e0:71:33:a2:5b:95:95:da:
38:93:2c:c4:53:51:fb:f6:b3:db:f5:83:89:c3:1a:
cd:1b:d8:3c:5f:dc:f2:6e:18:a2:23:02:02:47:01:
e4:1a:d5:fd:07:e7:20:8e:37:2b:34:87:0a:1b:55:
3a:dd:55:6a:43:ba:c4:36:3b:19:a2:e0:b8:5f:3b:
37:bb:07:da:0d:54:7a:9c:4f:d3:52:02:9a:26:d4:
24:53:78:9d:53:b2:49:3b:b1:26:7f:43:d8:1b:04:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:84:59:3E:F3:EA:DB:5B:12:DD:B8:1E:20:7B:27:54:05:44:34
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/H_GEWT7z6ttbEt24HiB7J1QFRDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.57.220.0/24
208.90.252.0/23
IPv6:
2001:678:13e8::/48
2001:678:13ec::/48
2001:67c:e40::/48
Signature Algorithm: sha256WithRSAEncryption
88:0f:fd:9c:ef:33:41:53:97:83:82:92:ab:dc:b5:62:ad:39:
61:27:19:d8:d5:f0:66:97:f2:96:9c:21:6a:ef:a1:a3:9c:74:
54:e8:e7:9c:d2:2b:5b:5b:10:ba:af:66:0b:c8:27:b8:b0:ac:
f2:94:d6:8d:db:d0:03:61:1f:f5:74:e8:cd:66:64:ee:76:4e:
7e:45:7a:23:f2:53:47:84:64:43:75:4f:ad:ea:c7:5f:6c:47:
63:b8:7f:62:9f:cf:a4:af:34:89:e8:44:64:ba:93:0f:57:ca:
4d:fc:6c:af:29:82:86:48:35:b0:dd:e2:5c:93:b2:63:72:bb:
b0:8e:ff:5a:8f:91:13:c5:c1:0a:80:7f:ab:8f:2e:df:bb:97:
c4:ed:99:62:da:cb:4b:c6:a5:ed:cf:7b:0b:94:de:97:69:82:
fa:cd:4f:51:28:3f:58:06:0f:c2:d0:bc:5d:75:68:cd:d8:05:
8c:59:bc:a3:59:4e:b1:29:81:06:38:23:f4:6e:e2:cf:f4:67:
2b:db:25:c4:88:30:5c:7b:d0:d9:92:40:41:81:1d:3d:c1:76:
80:eb:80:92:a3:39:c2:4d:6e:5d:47:40:76:2d:c9:3f:80:93:
06:45:a4:c9:73:a7:8b:1a:20:c3:4e:f1:9f:6b:94:1d:3f:25:
f6:ad:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:10 2026 by rpki-client