Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/l0ZhVuO8CnBskyMUviULUIbSugk.roa
File: l0ZhVuO8CnBskyMUviULUIbSugk.roa (raw, json)
Hash identifier: nBThp1xoOSvwO2qAcy3LGZHvbULgo9YPQqhSlsziQBQ=
Subject key identifier: 97:46:61:56:E3:BC:0A:70:6C:93:23:14:BE:25:0B:50:86:D2:BA:09
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A1963AF6594BE12A3E4043C05DDEE62A6E
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/l0ZhVuO8CnBskyMUviULUIbSugk.roa
Signing time: Sun 01 Nov 2026 08:30:08 +0000
ROA not before: Sun 01 Nov 2026 08:30:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54339
IP address blocks: 84.55.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:3a:f6:59:4b:e1:2a:3e:40:43:c0:5d:de:e6:2a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Nov 1 08:30:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97466156e3bc0a706c932314be250b5086d2ba09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:4d:7b:0f:3b:62:58:89:3c:e5:d2:aa:aa:
a3:ba:fe:09:2f:5a:f7:f0:ad:ba:12:7c:4e:85:cc:
61:72:ce:78:67:18:38:c5:5c:4b:3e:c9:6e:8f:42:
9c:fd:09:aa:45:3b:c8:d6:85:b1:0e:23:c1:43:04:
09:8e:fb:13:cb:24:82:ed:03:42:e6:d8:7f:3e:fa:
39:8b:a3:0a:f3:51:dd:d6:b9:9c:cd:d7:be:28:5e:
96:4b:88:96:7d:75:f5:43:19:21:ca:96:9a:a1:87:
5d:6a:a4:61:ac:8b:e9:d6:26:a2:d0:87:69:ae:90:
6c:1e:2e:0f:18:58:61:32:d3:2b:79:b1:52:00:af:
f5:5e:74:1f:05:8a:b3:4d:5a:70:cd:c4:b9:83:e5:
ea:c1:2e:0c:20:a7:49:e9:02:da:d2:74:3a:df:d3:
5f:5b:70:48:e7:aa:44:67:96:7f:37:f5:c5:05:6c:
88:a4:f8:a3:71:a3:55:28:0a:1b:75:02:f3:b1:cf:
73:c9:c7:0d:38:4a:8e:a6:34:19:a0:96:88:96:33:
16:1c:b1:48:0a:59:be:17:80:34:3b:8c:62:37:d7:
71:24:4a:aa:03:55:ff:a8:7d:95:04:d7:9e:29:2a:
93:09:01:8c:d3:11:43:fa:53:d0:b1:16:8b:75:cc:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:46:61:56:E3:BC:0A:70:6C:93:23:14:BE:25:0B:50:86:D2:BA:09
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/l0ZhVuO8CnBskyMUviULUIbSugk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:99:ba:4e:ec:c3:95:a9:7a:11:6a:c1:38:85:57:32:f4:30:
3b:4e:d1:f7:47:ac:d2:21:f0:9b:35:ac:ef:b5:02:4e:e3:71:
17:d5:90:cf:90:72:b2:4f:df:4a:fb:a4:6d:4d:63:6f:96:a9:
5b:e8:12:b9:27:a5:f5:eb:22:cc:29:7b:57:97:58:49:b4:63:
6a:4f:af:67:53:4d:d4:0d:67:a5:a9:3e:b4:9e:bb:5c:57:5a:
fe:bb:e3:ec:fe:fd:73:4b:f2:33:66:26:e2:0d:53:34:3b:9c:
f2:6d:1e:ba:d3:5e:2f:04:d3:59:77:31:21:d7:40:f4:12:82:
ff:5f:fc:c6:c3:11:55:a6:ac:fa:4d:21:6f:40:69:22:5f:07:
27:c8:2d:60:6f:47:bd:f7:70:6e:59:dc:e8:7c:7a:63:55:0f:
32:1b:5a:44:26:74:40:96:9d:a9:74:93:ef:e7:33:d5:76:77:
cf:02:b9:97:2f:47:a4:b9:65:32:c7:13:b0:3c:52:08:72:09:
15:0c:63:61:84:30:fd:2a:89:98:ec:ac:53:ff:24:43:9c:0f:
d2:ea:7a:76:28:1f:a7:22:b0:f4:a1:35:01:e3:c7:db:b8:14:
f5:5f:1b:b1:20:96:5e:bb:c1:05:ba:f9:ce:98:fc:a2:70:ed:
07:57:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:12:26 2026 by rpki-client