Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/kK7yK4QwpG2P5nNrENkyc48XIqQ.roa
File: kK7yK4QwpG2P5nNrENkyc48XIqQ.roa (raw, json)
Hash identifier: t4WTKP4OAHsudazCPki6NxrFz09Rt8T0WQRSZXhdph0=
Subject key identifier: 90:AE:F2:2B:84:30:A4:6D:8F:E6:73:6B:10:D9:32:73:8F:17:22:A4
Certificate issuer: /CN=ce8f4ad9276744802e6a3a06256cd4750c1a755a
Certificate serial: 01A1368C5E1C286FFD6BCD66F51AE15AC1CA
Authority key identifier: CE:8F:4A:D9:27:67:44:80:2E:6A:3A:06:25:6C:D4:75:0C:1A:75:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/kK7yK4QwpG2P5nNrENkyc48XIqQ.roa
Signing time: Tue 13 Oct 2026 18:35:31 +0000
ROA not before: Tue 13 Oct 2026 18:35:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218509
IP address blocks: 193.168.165.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:8c:5e:1c:28:6f:fd:6b:cd:66:f5:1a:e1:5a:c1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8f4ad9276744802e6a3a06256cd4750c1a755a
Validity
Not Before: Oct 13 18:35:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90aef22b8430a46d8fe6736b10d932738f1722a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:c4:8a:fc:75:35:43:c1:ad:67:6a:ce:32:
40:ba:7f:c6:88:06:a0:8b:1d:79:20:d6:7b:b8:1e:
f1:52:49:d7:dd:c5:c1:47:2f:2a:d7:b7:04:06:be:
2d:79:9a:bd:db:be:fb:4f:41:2a:91:d6:19:7f:3c:
20:a7:8a:86:2e:3b:dc:07:7a:2c:68:5f:ea:38:6a:
31:23:2a:d7:f0:8a:aa:47:73:ab:9f:c8:cf:95:ae:
ab:e0:bd:72:c7:b1:e8:2f:44:9a:a9:d5:37:8e:7f:
c8:2f:d4:f0:1e:c3:ab:98:2e:8d:5c:eb:2a:b8:a6:
07:f0:3b:0b:9d:1b:63:1a:03:51:ab:ae:17:01:ed:
02:b0:56:79:15:0f:51:d8:36:7c:0d:e2:f2:f5:e8:
c7:0c:99:b7:2f:b0:e2:3d:ed:76:09:e2:84:2a:fc:
f0:13:f1:65:9a:c6:1d:c0:65:65:16:25:ad:a8:3d:
fd:ec:c5:7e:02:e5:a2:ae:ee:01:28:e1:67:6e:61:
01:ba:38:f3:2d:e4:7a:d5:22:16:ce:fd:91:4e:53:
ee:ca:01:8e:1b:90:6c:f7:d6:30:26:5c:48:0f:2c:
e1:c6:d6:83:56:98:36:26:8b:5a:67:99:61:be:35:
f8:10:e4:0f:32:7e:0f:51:a4:e6:f2:fe:50:2d:cd:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AE:F2:2B:84:30:A4:6D:8F:E6:73:6B:10:D9:32:73:8F:17:22:A4
X509v3 Authority Key Identifier:
keyid:CE:8F:4A:D9:27:67:44:80:2E:6A:3A:06:25:6C:D4:75:0C:1A:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/kK7yK4QwpG2P5nNrENkyc48XIqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.165.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
21:2b:3a:32:f7:23:d8:6e:b0:bc:da:ed:98:ce:4d:b0:3f:16:
38:ad:45:59:34:98:c1:51:39:a6:33:57:76:9e:92:df:4b:e6:
09:3d:60:ad:ee:d1:29:d2:77:a6:c5:a1:4c:2e:9a:a4:da:d9:
b7:c8:3f:80:b3:87:25:39:5d:4a:3b:0b:24:8c:8b:25:b2:dc:
4c:f6:30:2d:98:b3:8b:97:73:68:1e:41:bd:7b:3c:83:4f:36:
fd:6a:de:f0:cb:5e:98:d1:e3:d4:4d:8a:23:94:4b:ab:b0:dd:
fc:09:b9:d9:c2:12:12:97:b3:ba:aa:36:17:ca:47:ef:5b:43:
5d:cf:dd:07:04:e9:cd:a9:d7:0b:42:98:2c:e3:5b:a4:24:48:
b6:2d:d8:fc:e5:e6:23:15:d6:ea:4f:83:57:09:3f:82:ba:f1:
63:f0:12:81:93:83:4b:23:6d:50:6d:c1:26:0d:c8:56:74:cf:
db:ac:6e:71:be:0a:10:d0:ed:79:6d:83:27:74:8f:5f:23:db:
4a:09:ed:e2:5a:5b:cb:4d:45:ff:06:03:0a:db:cb:95:48:f7:
60:3c:09:2e:c0:3c:02:b9:ab:22:49:3c:bf:cc:ed:fb:14:68:
80:ea:32:6c:3d:60:af:06:6b:1d:28:84:63:08:90:7e:26:cf:
ee:bc:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:19:31 2026 by rpki-client