Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/sciKXaMQOqJN11ht2WSVkdieJ20.roa
File: sciKXaMQOqJN11ht2WSVkdieJ20.roa (raw, json)
Hash identifier: uEeL5GwGG20z3VTTPp/62PAZMypZ0CPKNdPkxVS368s=
Subject key identifier: B1:C8:8A:5D:A3:10:3A:A2:4D:D7:58:6D:D9:64:95:91:D8:9E:27:6D
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01A1C11249B36B35234731691375B0FADFAB
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/sciKXaMQOqJN11ht2WSVkdieJ20.roa
Signing time: Mon 09 Nov 2026 16:09:23 +0000
ROA not before: Mon 09 Nov 2026 16:09:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 136.148.83.0/24 maxlen: 32
136.148.84.0/24 maxlen: 32
136.148.85.0/24 maxlen: 32
136.148.86.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:12:49:b3:6b:35:23:47:31:69:13:75:b0:fa:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Nov 9 16:09:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1c88a5da3103aa24dd7586dd9649591d89e276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:0e:72:2a:cb:91:b5:75:d8:f1:88:26:a0:
39:bf:22:df:d9:5a:e8:fd:e6:7a:fa:ba:23:23:42:
0d:03:f7:49:94:69:d1:d1:69:61:b5:b7:7a:2a:1a:
25:b2:dd:0b:ac:77:20:62:10:bf:c0:58:c9:2f:2f:
ea:39:5e:bb:83:3d:99:83:b7:ea:69:4b:43:61:54:
43:1c:07:5a:31:41:a7:a3:52:a2:dc:fc:91:9c:1d:
0d:ab:ec:3d:fc:c1:9c:ee:5f:c1:f3:b7:35:08:c6:
a5:5a:19:52:a1:d3:fb:27:b0:b3:1d:28:be:27:5c:
4f:2f:b9:36:07:f8:b0:26:30:1c:0f:eb:b8:4d:10:
e6:50:0e:2d:a2:4f:24:99:c1:c3:db:52:08:31:76:
09:c3:16:0c:43:fe:7a:66:b4:71:c5:de:06:aa:de:
1b:d6:dc:da:08:a8:3e:87:59:3b:b5:bc:ac:ca:42:
c1:3d:55:26:6d:40:92:88:a5:ea:38:a2:66:91:84:
9f:ae:c1:aa:b4:81:d3:98:6e:3a:fd:5e:50:3a:04:
f9:5d:86:93:53:7f:79:c2:dd:ab:e0:21:30:1c:14:
30:2f:63:22:40:de:12:74:ea:19:44:90:39:c2:56:
ae:da:d3:f9:ef:0a:ec:13:17:d9:ba:8d:6d:17:ca:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:8A:5D:A3:10:3A:A2:4D:D7:58:6D:D9:64:95:91:D8:9E:27:6D
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/sciKXaMQOqJN11ht2WSVkdieJ20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.83.0-136.148.86.255
Signature Algorithm: sha256WithRSAEncryption
43:2f:58:33:2a:5a:97:29:03:e0:f7:d8:b6:8a:de:67:ab:a5:
ce:df:6f:9b:50:0a:d0:1c:64:db:6a:52:a8:59:55:cf:8c:1a:
3a:29:13:ff:dc:0e:aa:bc:ce:78:7a:f7:32:08:a4:f6:d6:03:
6b:e8:e4:2f:d9:d0:f9:fb:bc:f6:b1:33:0c:9e:ce:6d:e7:50:
50:35:41:53:6d:a9:5f:47:a8:21:7b:36:75:11:cc:48:64:39:
8b:ef:ae:44:49:0e:ca:e6:c0:41:6b:b7:f8:a9:bd:01:be:50:
45:c2:b3:9e:f8:c7:4e:d1:9c:42:67:c7:66:e9:7e:d7:0a:86:
da:88:e8:9b:39:92:2f:cf:b5:94:2f:55:55:b6:93:33:6e:cf:
23:ef:ab:76:74:c8:3e:32:8d:d5:a5:a5:76:b8:b5:4e:1b:e3:
0e:b3:19:9c:c8:ec:29:6c:dd:9d:71:ef:09:8b:fe:98:cd:f4:
c1:e6:63:53:b2:2c:d5:55:6c:65:67:27:64:9d:9a:ac:ad:ac:
56:08:3f:b5:c6:04:e0:69:ef:84:b2:1b:98:41:b6:2c:5f:30:
74:46:e9:8a:fc:49:bf:29:56:01:e6:17:da:2e:22:94:65:85:
e9:b1:d3:bb:72:a9:d9:1b:20:3d:63:90:0a:b6:79:d3:e9:4c:
b4:b2:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:08:39 2026 by rpki-client