Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Kg1_YucTEzlXSB0LMDiMK6xZgWo.roa
File: Kg1_YucTEzlXSB0LMDiMK6xZgWo.roa (raw, json)
Hash identifier: E8KNhdU3ZeZfKm/2sOqze/F1EKGKULhBgufCeRQnsDs=
Subject key identifier: 2A:0D:7F:62:E7:13:13:39:57:48:1D:0B:30:38:8C:2B:AC:59:81:6A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0AE7650D83C591191135AC2AF856AA8C8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Kg1_YucTEzlXSB0LMDiMK6xZgWo.roa
Signing time: Thu 17 Sep 2026 08:23:04 +0000
ROA not before: Thu 17 Sep 2026 08:23:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209630
IP address blocks: 93.123.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 13:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:76:50:d8:3c:59:11:91:13:5a:c2:af:85:6a:a8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 08:23:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a0d7f62e713133957481d0b30388c2bac59816a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:de:da:bd:ad:f4:ac:13:38:01:ee:8a:f6:
39:63:0f:87:ff:12:76:71:d5:e2:0b:99:7b:32:be:
d1:ec:82:21:40:be:e1:46:35:f5:b8:f2:04:83:28:
a1:84:f8:63:39:99:60:11:d9:9a:bd:2d:53:a8:16:
e7:39:a4:f6:91:71:35:19:14:67:f4:40:8f:a7:1f:
d4:69:e4:8e:94:d2:88:b9:a1:a0:34:65:0e:05:97:
c7:5e:5a:47:eb:d5:b6:44:c8:22:32:ac:a7:12:c1:
b9:ee:9b:f2:6b:23:9b:54:eb:a6:e2:0b:24:3f:dd:
2a:6f:53:61:87:2f:3e:ad:0c:2f:6f:4d:e0:78:66:
d6:2a:b6:6f:49:3e:cc:42:3f:54:87:db:56:ff:f3:
e4:a1:3e:2f:52:ec:20:21:36:e4:3b:b1:3c:ca:7b:
dc:6f:ae:8d:87:6c:d4:32:8e:01:eb:ac:df:66:bf:
08:ba:4d:60:c1:0e:b4:83:75:23:74:aa:0e:ad:5a:
fa:2c:bf:be:4c:fa:45:cf:73:f0:1e:4c:ae:1b:a0:
9b:fa:1b:4f:20:e1:c9:0d:01:77:db:11:2b:9d:1d:
4e:ba:95:78:16:5d:89:2c:4b:8f:75:a4:7e:80:9c:
13:0b:11:5a:08:3a:7d:55:a0:c1:8f:1c:6e:b1:71:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0D:7F:62:E7:13:13:39:57:48:1D:0B:30:38:8C:2B:AC:59:81:6A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Kg1_YucTEzlXSB0LMDiMK6xZgWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:fe:c0:ce:aa:a0:d0:2b:8b:22:31:db:3e:33:57:86:ed:a5:
34:54:f0:2b:5c:a2:65:4b:3f:6c:5a:74:9d:0e:f4:8c:bb:67:
3d:56:aa:a0:77:aa:96:26:ab:31:42:24:45:78:7b:62:6f:07:
45:4e:09:e1:64:6f:ab:49:a3:e5:db:0c:0c:5a:e5:38:65:ca:
8e:64:1e:50:75:f3:60:71:2d:49:80:aa:6e:47:95:05:c7:90:
5b:dc:2d:ba:a1:79:b1:97:dd:25:75:63:c5:2e:05:0f:dc:a1:
72:5c:e9:45:00:08:89:58:70:17:be:cb:c0:72:6d:af:b9:f3:
5b:38:2e:82:64:42:db:96:ca:69:fe:4a:53:45:f7:f9:d5:57:
d3:28:da:9b:f7:99:b0:e1:35:6f:df:28:31:4e:d2:45:e3:67:
08:59:ea:aa:a8:3f:93:2f:84:65:10:03:dc:ac:62:27:c6:09:
a2:f3:25:c2:39:5a:b8:03:29:33:05:48:c5:a9:17:71:e1:77:
ae:40:9f:22:c4:9f:a2:7c:b1:26:01:08:c0:ff:0b:24:9d:34:
5b:19:fb:ba:85:7d:80:ca:7c:14:48:48:40:a7:58:9b:7f:43:
9a:bf:25:1a:bb:6c:75:45:f4:d5:d6:a0:5f:90:e3:f4:f0:18:
b7:e8:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:31:04 2026 by rpki-client