Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/d5RPVknyCHa9Az1sdg2d6h_txo8.roa
File: d5RPVknyCHa9Az1sdg2d6h_txo8.roa (raw, json)
Hash identifier: tsFgAEeBEgBCxA1rUqj7Zu3rw97F2orYx1W3CXe2igQ=
Subject key identifier: 77:94:4F:56:49:F2:08:76:BD:03:3D:6C:76:0D:9D:EA:1F:ED:C6:8F
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A1D7DD66542F4429FBD1448B16AF7B46A4
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/d5RPVknyCHa9Az1sdg2d6h_txo8.roa
Signing time: Sat 14 Nov 2026 02:22:53 +0000
ROA not before: Sat 14 Nov 2026 02:22:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197196
IP address blocks: 216.195.195.0/24 maxlen: 24
216.195.196.0/24 maxlen: 24
216.235.248.0/24 maxlen: 24
216.235.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d7:dd:66:54:2f:44:29:fb:d1:44:8b:16:af:7b:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Nov 14 02:22:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77944f5649f20876bd033d6c760d9dea1fedc68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:6b:b7:c0:df:c1:28:e5:19:25:96:c3:f7:
00:ad:ec:42:ac:68:78:72:9b:89:f7:ad:15:9e:61:
bd:04:f5:fe:a8:50:a6:92:8f:8e:ee:a0:1f:19:3c:
3f:87:8b:08:cf:e2:8c:ba:17:55:6f:32:61:de:3a:
6b:99:b3:92:61:1d:79:44:73:fe:37:36:49:64:2f:
97:65:e7:45:01:02:55:42:ee:e1:de:9a:dd:81:37:
23:64:d8:87:7e:b1:b4:e9:e5:d8:6a:e1:fc:73:da:
20:9e:4c:d4:c9:a6:6c:bd:38:84:ca:90:32:e8:a6:
90:ff:5d:25:d2:c0:ff:b3:5a:3c:70:d1:ae:02:71:
78:be:6a:b4:26:e1:01:c8:cf:48:14:e2:fc:6c:10:
e3:01:e8:13:ec:c3:c4:b0:a4:a7:c1:0b:30:d4:86:
76:bd:84:bf:72:e2:7d:50:8b:b3:10:14:30:cc:07:
83:16:28:80:f5:41:80:3d:be:7f:36:c5:d1:ec:4d:
a8:61:2f:8e:84:6c:1d:62:34:ca:5f:dc:69:86:d5:
ed:83:cf:30:75:19:f8:eb:52:df:35:7b:86:fc:c4:
7a:02:b6:eb:4a:1c:9d:72:c1:16:c9:b7:2c:3f:0e:
53:1b:d6:cb:91:d8:98:07:0a:81:ad:a4:72:6a:08:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:94:4F:56:49:F2:08:76:BD:03:3D:6C:76:0D:9D:EA:1F:ED:C6:8F
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/d5RPVknyCHa9Az1sdg2d6h_txo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.195.0-216.195.196.255
216.235.248.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e2:6c:a4:35:1b:ec:0e:df:10:cc:b9:79:2b:bc:23:c0:72:
2c:c4:50:30:b4:cd:ea:86:c1:dd:2f:8e:5f:ee:9b:45:0a:75:
92:a5:df:4b:7c:98:46:22:ff:d1:31:bc:5a:2b:86:4e:fa:a0:
7e:b6:49:ec:8f:3d:cb:8a:44:97:f6:fa:1b:ec:d3:6c:c5:06:
99:d5:8c:fe:18:29:bf:06:0c:82:a5:c5:88:87:9c:89:b2:59:
54:81:39:2a:c5:04:24:b6:c3:0a:89:7e:93:7a:5a:b3:4a:b4:
46:1e:a3:23:9c:9a:a8:d4:66:9f:84:b7:60:e8:4c:de:11:93:
e4:23:cc:cc:fe:5d:7f:e4:a5:e6:ba:13:d9:c8:c7:7b:6e:f9:
a4:41:b4:9e:c5:7f:60:1f:14:0c:bd:2f:94:fe:65:c1:c8:f3:
4c:a0:1c:98:1b:62:de:48:f8:4b:4e:a4:82:14:83:62:26:48:
32:49:7d:5e:e4:6c:bf:a9:c3:b2:45:72:1f:b2:2d:eb:38:5d:
7a:b8:11:4f:78:b1:20:61:0b:a8:82:5b:fa:99:6c:28:98:3b:
dd:25:e7:fc:31:cc:67:3e:ab:a3:4e:4b:43:ac:c6:28:ff:8d:
9a:8e:bf:58:94:0f:0a:d7:79:a4:b5:a6:b3:e4:82:1d:28:6d:
1a:51:12:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:38:05 2026 by rpki-client