Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/D1L8he-Z3uaX_kv2qLosJG-F7N4.roa
File: D1L8he-Z3uaX_kv2qLosJG-F7N4.roa (raw, json)
Hash identifier: dDqVqlgs2qjplhwfb2N5g+Z1GMx0+9UTFVeYZq/BU7U=
Subject key identifier: 0F:52:FC:85:EF:99:DE:E6:97:FE:4B:F6:A8:BA:2C:24:6F:85:EC:DE
Certificate issuer: /CN=0a04b30bfe55f1de02b9031603ab6458be650e13
Certificate serial: 01A05D55FF02553D89D68A2EEE504486319C
Authority key identifier: 0A:04:B3:0B:FE:55:F1:DE:02:B9:03:16:03:AB:64:58:BE:65:0E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgSzC_5V8d4CuQMWA6tkWL5lDhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/D1L8he-Z3uaX_kv2qLosJG-F7N4.roa
Signing time: Tue 01 Sep 2026 14:18:32 +0000
ROA not before: Tue 01 Sep 2026 14:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204933
IP address blocks: 198.228.101.0/24 maxlen: 24
2001:678:12e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/CgSzC_5V8d4CuQMWA6tkWL5lDhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/CgSzC_5V8d4CuQMWA6tkWL5lDhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgSzC_5V8d4CuQMWA6tkWL5lDhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:55:ff:02:55:3d:89:d6:8a:2e:ee:50:44:86:31:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a04b30bfe55f1de02b9031603ab6458be650e13
Validity
Not Before: Sep 1 14:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f52fc85ef99dee697fe4bf6a8ba2c246f85ecde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:df:cf:18:04:0a:fe:d4:5c:49:d7:6b:7f:
f9:30:b1:87:58:36:3e:08:d2:3b:77:69:ec:dc:3e:
47:56:18:1b:a0:8f:33:b0:68:15:9e:4b:08:04:ad:
c0:c8:08:62:3b:85:92:e3:02:3d:81:16:b3:e3:0d:
7b:99:3c:03:3c:1a:dc:a5:f6:82:c7:da:e8:5f:ef:
76:82:91:66:8f:4a:9c:b4:c4:4d:98:b3:6a:ea:76:
7d:92:8d:dd:39:bf:29:18:7d:3e:30:75:f9:ed:3f:
55:e0:91:4f:57:a3:f4:b9:5c:45:e9:ba:38:79:9a:
97:ec:60:24:a3:dc:e6:6f:e8:21:4d:87:eb:de:9c:
5f:e8:77:99:f0:e5:e7:5e:f5:70:59:4c:3f:68:22:
36:69:db:f3:53:ce:50:b9:7e:7e:b1:2e:f2:52:da:
df:0b:b4:9a:7a:18:7f:a3:87:ac:24:1a:ad:f2:57:
b8:8b:66:82:1b:e8:fb:c6:4d:6a:a0:47:f5:04:fb:
1e:ec:63:70:95:4e:d3:62:12:61:bd:72:4d:18:bf:
b8:08:b2:75:ff:e9:85:09:5a:f0:ff:f9:00:83:c3:
2e:53:e0:26:77:09:81:d6:e1:6f:84:da:d2:de:29:
65:40:6c:53:ce:c8:c1:b5:8b:15:98:fb:fb:64:29:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:FC:85:EF:99:DE:E6:97:FE:4B:F6:A8:BA:2C:24:6F:85:EC:DE
X509v3 Authority Key Identifier:
keyid:0A:04:B3:0B:FE:55:F1:DE:02:B9:03:16:03:AB:64:58:BE:65:0E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgSzC_5V8d4CuQMWA6tkWL5lDhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/D1L8he-Z3uaX_kv2qLosJG-F7N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/649d06-6b3d-4704-9841-2c4dede90467/1/CgSzC_5V8d4CuQMWA6tkWL5lDhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.228.101.0/24
IPv6:
2001:678:12e8::/48
Signature Algorithm: sha256WithRSAEncryption
ac:d8:01:f5:c0:b2:71:10:54:84:40:49:09:f7:68:1b:c6:4a:
78:4f:9e:0e:84:94:73:b9:23:a7:f4:42:e0:bb:96:9d:ec:03:
97:ea:66:e8:6e:30:cd:0f:75:9a:2d:67:0d:a6:f4:73:9e:12:
9b:ff:40:51:6d:db:a2:36:c2:90:2e:e6:6c:9b:03:b1:da:90:
5a:dd:55:0b:e9:98:64:4b:b5:56:46:d6:ca:6a:a9:dc:13:1d:
57:29:76:f0:e1:95:58:e9:cc:77:ba:2c:98:99:b3:e7:93:f5:
2e:39:52:ef:ed:01:f9:b4:7f:2b:96:30:f8:f9:c5:4f:9b:4d:
cd:5b:ed:53:0f:c2:82:9a:e5:ca:23:4b:88:f1:88:e6:62:cd:
0e:6d:c5:73:5c:40:83:00:d5:ad:08:a7:e6:55:ee:31:29:51:
d4:04:dc:36:7e:17:6e:db:df:93:35:21:1f:46:1c:16:35:f0:
7c:5a:73:d1:36:8b:0c:cc:a0:2c:7c:86:e6:f0:a4:8c:77:d2:
10:30:a2:ab:d6:1b:78:9b:91:b2:c2:1a:96:db:e1:95:c6:94:
71:c3:27:f9:06:66:40:47:f7:6c:0f:38:b9:a4:91:4c:31:e4:
c2:90:f9:14:44:6a:94:5f:30:c0:ab:52:3e:b9:29:9e:d1:96:
d4:55:23:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:26 2026 by rpki-client