Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/kl0qAMZVjThCV4SrxjYOJUq85Q0.roa
File: kl0qAMZVjThCV4SrxjYOJUq85Q0.roa (raw, json)
Hash identifier: DZqm2xRPR/TZM6XTBiHwcNgd9Zv8cEHMlNMDzT4TnFM=
Subject key identifier: 92:5D:2A:00:C6:55:8D:38:42:57:84:AB:C6:36:0E:25:4A:BC:E5:0D
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019F4CDA510FA79C385D089EE5969ED0BCFB
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/kl0qAMZVjThCV4SrxjYOJUq85Q0.roa
Signing time: Fri 10 Jul 2026 16:26:43 +0000
ROA not before: Fri 10 Jul 2026 16:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 193.233.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:da:51:0f:a7:9c:38:5d:08:9e:e5:96:9e:d0:bc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 10 16:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=925d2a00c6558d38425784abc6360e254abce50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:1d:70:bc:38:59:d3:44:ed:6e:5b:b7:ff:
81:f0:62:c7:14:12:8c:25:ab:c0:23:cb:8f:1a:19:
cf:32:dc:fb:14:77:a6:ec:8b:24:75:6a:9b:b6:5e:
a8:82:7b:1e:67:35:0f:2a:d1:1f:54:0a:21:6b:f3:
09:10:3c:d9:1f:b0:f4:44:f3:f9:7a:63:f7:e3:50:
5c:e3:45:c7:94:7a:cf:cb:83:a0:c1:80:24:39:b9:
62:b9:6a:a7:41:a1:86:e0:29:17:70:c0:cd:91:d8:
11:ba:c2:b7:c9:f5:5b:e4:a7:31:fd:66:ee:9b:8e:
56:02:bc:82:2a:e5:0e:1a:e7:12:4f:30:12:1c:3d:
e6:3f:ee:85:a2:93:49:01:42:7b:5e:95:4c:10:64:
10:9b:2c:a8:a2:b7:27:68:c1:8d:d1:0a:02:09:99:
e9:4c:74:70:25:da:fd:6a:eb:f5:3f:26:46:3c:ba:
a0:f5:d9:e0:27:6f:e5:0d:46:e6:d5:dc:3b:9a:9b:
3e:fe:a7:4f:d2:cc:9f:f8:42:89:28:da:6f:c9:a6:
2c:d4:de:72:97:7a:2e:8c:96:09:38:a1:37:77:eb:
2c:2f:6c:23:a2:c3:f1:37:b4:2e:1a:6e:6c:15:50:
c1:29:eb:92:bd:ba:89:9f:cd:ab:ec:2b:e7:80:2e:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5D:2A:00:C6:55:8D:38:42:57:84:AB:C6:36:0E:25:4A:BC:E5:0D
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/kl0qAMZVjThCV4SrxjYOJUq85Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:cd:5a:ee:04:37:f2:9b:64:39:ec:bc:d3:8d:e6:56:49:a5:
ff:67:bc:47:7f:8d:a4:50:3f:37:20:ce:c1:fe:50:67:2e:43:
c5:58:1d:84:5d:fd:09:30:22:b9:40:f9:6f:02:15:0d:4e:54:
c9:01:f2:a7:fe:d5:ff:be:8e:03:1d:3a:41:37:29:83:25:b9:
f7:50:84:47:fe:be:13:bc:e5:9c:f8:a9:41:cc:e9:42:dd:94:
c6:38:61:56:07:e3:f1:37:ab:86:0f:30:ff:36:93:05:7d:07:
cd:1f:40:84:5e:a4:6d:af:96:d3:08:47:36:6d:2c:0b:8e:63:
28:6a:d7:8c:e1:26:10:d6:9a:95:05:8b:e4:97:4e:21:9a:0b:
de:53:e3:92:93:b8:02:8d:12:21:cf:b9:87:ff:20:e3:64:c1:
07:70:d8:ad:6a:eb:f5:46:9a:10:70:81:f0:2b:81:2a:35:a2:
ca:75:06:13:1a:8d:4f:df:73:0e:ea:10:af:b3:da:04:1d:d0:
6b:82:73:d4:4f:0f:90:cf:df:3a:ca:f3:63:2a:cc:17:b0:22:
bd:36:17:9b:f0:23:c1:95:ce:95:7c:08:10:4e:16:ce:54:84:
a8:ec:ee:be:52:f9:a2:e5:ef:57:19:fa:50:17:7a:09:79:25:
11:87:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:38:32 2026 by rpki-client