Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kzSYb8opKdqOyzTHf_wCph9we0c.roa
File: kzSYb8opKdqOyzTHf_wCph9we0c.roa (raw, json)
Hash identifier: x6kOOrWM0W8r50NyYTSF2YpVJdrFtliYRqSKepxPZr0=
Subject key identifier: 93:34:98:6F:CA:29:29:DA:8E:CB:34:C7:7F:FC:02:A6:1F:70:7B:47
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01A15E8170E835B47C859A1CC092FFCC31E0
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kzSYb8opKdqOyzTHf_wCph9we0c.roa
Signing time: Wed 21 Oct 2026 12:48:23 +0000
ROA not before: Wed 21 Oct 2026 12:48:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216151
IP address blocks: 77.76.9.0/24 maxlen: 32
82.118.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:81:70:e8:35:b4:7c:85:9a:1c:c0:92:ff:cc:31:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 21 12:48:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9334986fca2929da8ecb34c77ffc02a61f707b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:0b:c6:24:d5:91:c0:b2:20:15:85:b2:0d:
4f:a3:0c:b1:c1:40:4e:71:b0:fa:dd:d6:b6:94:9d:
58:8f:6f:43:28:47:f3:01:d3:e2:ce:84:78:2c:99:
df:69:99:ac:57:ec:c3:05:dd:18:8d:5f:d2:f1:de:
46:21:21:a8:2c:d2:e8:74:97:ff:53:34:15:c2:c8:
04:c1:e3:4f:6e:a8:01:d6:46:5c:76:04:2e:cd:83:
4c:3e:cd:17:82:96:ac:f1:44:3f:b9:c8:72:4a:31:
fa:5d:9f:0f:9f:3b:d6:11:a3:55:78:64:9f:1f:ec:
4f:fa:ce:32:be:f0:1c:43:e5:df:8b:02:c1:24:b7:
da:09:93:a8:b7:a3:94:d1:97:de:1f:5b:e4:c0:8b:
9d:25:d9:81:03:ee:8c:ef:5b:16:3c:50:f9:8a:01:
d8:55:49:7f:d9:dc:53:b4:d5:3f:d3:0a:23:b6:3c:
49:9a:50:89:b3:ec:51:8e:e8:b7:d8:20:d7:58:ee:
8e:51:cd:24:89:e6:94:8b:34:b4:98:2b:19:50:28:
63:25:b2:e1:13:bf:e6:57:53:72:56:50:2f:94:c9:
2b:29:c7:b1:71:97:dc:a9:e4:7b:3b:14:04:65:4f:
f1:67:ae:a2:34:0e:77:dd:d8:92:43:65:1d:60:da:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:34:98:6F:CA:29:29:DA:8E:CB:34:C7:7F:FC:02:A6:1F:70:7B:47
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kzSYb8opKdqOyzTHf_wCph9we0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.9.0/24
82.118.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:61:3c:34:d3:f9:fe:e0:19:96:cd:8d:b5:8a:cc:ee:39:a4:
63:13:91:55:14:41:31:3d:69:9e:22:2e:19:ce:5f:7a:f6:f6:
e1:d6:1d:ea:9a:f6:78:43:6b:28:05:17:92:71:5f:3c:bf:16:
44:a0:79:ee:18:f7:43:2a:d2:d4:62:45:eb:6d:ba:3f:2f:86:
58:6a:35:99:4c:27:46:46:8e:16:6a:21:14:5e:13:d0:e4:20:
30:ae:c9:7a:7e:de:3a:54:39:d0:1b:a5:12:e8:ac:e4:ed:ea:
8c:00:58:ea:a5:b2:cd:94:d9:b1:3c:31:2d:03:14:0e:69:90:
10:0e:1c:ab:7c:9d:52:42:07:ed:e1:27:c8:03:b3:cc:09:d5:
0e:93:57:40:56:ed:7e:90:7c:e6:b2:cb:71:82:43:4d:67:85:
b1:25:d7:4e:f6:68:16:72:9b:54:06:af:3b:e6:91:bb:91:18:
d4:85:a3:b6:86:10:2a:52:34:49:1d:c2:e6:d8:b0:55:f6:c6:
ad:94:a6:b0:e5:ea:01:3c:9a:59:6a:46:1d:99:73:9e:17:10:
2e:62:2b:a0:fc:20:d8:5f:4e:62:c2:8c:2b:73:04:f9:a3:ec:
97:fa:4b:41:e1:14:5a:5d:49:94:aa:2c:09:60:a7:93:95:bd:
56:fc:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:56 2026 by rpki-client