Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/kHjyu0leWmEWJz4dGZNRuqPpKu0.roa
File: kHjyu0leWmEWJz4dGZNRuqPpKu0.roa (raw, json)
Hash identifier: xSmyUIXwxdKC/wUH6aKgbqf7oSMgpHlsL1OZu9Jw99Y=
Subject key identifier: 90:78:F2:BB:49:5E:5A:61:16:27:3E:1D:19:93:51:BA:A3:E9:2A:ED
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 01A0244A5A2D7D6D2007923A54FB41873B76
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/kHjyu0leWmEWJz4dGZNRuqPpKu0.roa
Signing time: Fri 21 Aug 2026 12:27:27 +0000
ROA not before: Fri 21 Aug 2026 12:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48631
IP address blocks: 178.22.8.0/24 maxlen: 24
178.22.9.0/24 maxlen: 24
178.22.10.0/24 maxlen: 24
178.22.11.0/24 maxlen: 24
178.22.12.0/24 maxlen: 24
178.22.13.0/24 maxlen: 24
178.22.14.0/24 maxlen: 24
178.22.15.0/24 maxlen: 24
194.62.140.0/24 maxlen: 24
194.62.141.0/24 maxlen: 24
194.62.142.0/24 maxlen: 24
194.62.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:4a:5a:2d:7d:6d:20:07:92:3a:54:fb:41:87:3b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Aug 21 12:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9078f2bb495e5a6116273e1d199351baa3e92aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:85:55:cf:f3:7b:6c:94:1a:13:73:75:69:
3c:9d:f7:54:c3:78:92:20:1c:f3:0b:13:ff:64:a2:
d1:df:2f:f7:39:96:73:ec:e2:db:99:fe:ff:52:f3:
59:41:71:54:46:7a:36:e1:fe:68:f9:4c:b4:ba:f1:
bf:a3:63:76:51:c7:21:06:ca:d9:36:92:ad:b4:c0:
3c:aa:ab:05:63:cf:db:c6:12:f2:86:a4:c5:a7:b6:
1d:27:c8:6d:2f:40:d3:83:74:66:7e:12:47:1d:d5:
d2:70:59:1f:29:07:aa:c5:db:49:48:d2:ab:11:64:
e3:48:1c:1f:0e:34:62:05:5d:0a:f0:2c:80:18:d9:
81:dc:6f:da:a0:f0:60:c6:37:f2:72:30:60:48:ab:
2d:f6:42:1b:fd:f4:02:86:01:42:ac:be:50:f5:dd:
25:42:96:d3:b0:a4:01:a0:ca:42:0f:50:0c:4d:5a:
18:7b:c4:9d:b7:14:65:8a:0a:bb:34:fb:a2:79:0c:
36:c1:be:18:66:c4:84:79:bc:34:31:a2:a2:97:cd:
09:6c:0f:b7:4a:8a:71:bf:af:ab:d2:65:a9:65:1f:
be:72:93:27:f1:10:34:ff:a6:4c:18:05:56:d3:3d:
49:be:a7:2e:9d:b1:47:1a:33:a6:6c:a5:97:dd:5a:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:78:F2:BB:49:5E:5A:61:16:27:3E:1D:19:93:51:BA:A3:E9:2A:ED
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/kHjyu0leWmEWJz4dGZNRuqPpKu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.8.0/21
194.62.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:f4:41:01:28:d8:d8:a0:29:ab:62:b5:f7:67:2a:65:14:34:
10:3b:d4:1f:24:8e:4f:a0:b5:49:a9:cc:97:0d:87:be:6c:22:
ec:8d:ed:e3:3d:39:cc:3c:db:5c:f8:3b:f1:93:34:47:83:68:
96:82:2f:93:03:d7:df:a1:bd:43:4d:fb:c9:55:c9:59:a8:4e:
d4:74:b8:f0:40:e5:1b:81:49:f3:28:b9:80:60:b6:6c:ce:51:
8a:6b:31:9a:07:57:b0:7a:a2:87:c6:8f:60:d4:41:bd:64:6a:
84:71:46:fb:c5:12:6d:cb:ea:f7:c9:4f:ce:70:15:10:d4:a4:
42:5b:5d:20:a2:98:91:2a:07:59:df:3c:a3:b5:0e:83:10:52:
70:24:7d:bf:33:45:65:03:8b:f6:85:83:ac:3f:1c:35:d4:2a:
bb:d3:70:40:a1:a9:df:22:5f:cb:49:ad:98:c6:91:f3:f2:c8:
1e:0f:f9:ac:47:3e:61:15:95:e2:04:03:5e:98:bb:24:1b:d1:
33:57:83:db:09:0a:23:49:cc:5d:33:f6:ec:57:3d:f0:d1:3d:
4b:95:2e:51:46:46:ad:53:86:1b:2f:32:29:74:75:d6:14:2a:
96:6a:29:82:7a:86:bd:4b:39:c4:64:df:ce:b5:d8:3e:e3:43:
61:f5:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:03:36 2026 by rpki-client