Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_KTU1XFioFXHykyaPI9-ECIzuKw.roa
File: _KTU1XFioFXHykyaPI9-ECIzuKw.roa (raw, json)
Hash identifier: Sm4O60krv+NehKeirqYQOb8p4+/r1yl5xYN6DrU2hSk=
Subject key identifier: FC:A4:D4:D5:71:62:A0:55:C7:CA:4C:9A:3C:8F:7E:10:22:33:B8:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A134862ED326392AA97785485228FF7DE3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_KTU1XFioFXHykyaPI9-ECIzuKw.roa
Signing time: Tue 13 Oct 2026 09:09:31 +0000
ROA not before: Tue 13 Oct 2026 09:09:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53107
IP address blocks: 185.47.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:86:2e:d3:26:39:2a:a9:77:85:48:52:28:ff:7d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 13 09:09:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fca4d4d57162a055c7ca4c9a3c8f7e102233b8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:97:a7:eb:85:57:f9:7d:36:e9:63:13:24:
d4:bb:77:86:46:4b:a4:bd:1b:9b:fa:8c:28:66:7c:
c7:52:3d:9d:92:54:e1:a4:a6:6b:4d:f4:ff:ac:4f:
c3:ff:29:b5:1f:e2:d4:db:33:4f:75:91:95:27:7a:
02:0c:b0:db:33:63:91:ef:ed:04:6c:3f:c9:51:22:
96:69:1c:c1:71:72:dc:a7:d9:c9:55:95:c5:e3:09:
62:3c:f3:4e:e5:a7:c3:df:4c:3a:3e:b6:5a:9e:e4:
64:a0:b6:b1:5b:39:38:63:82:d9:81:2c:8e:1e:ec:
f7:51:23:d8:83:d7:26:3d:c2:62:51:ec:73:17:63:
f5:4a:e9:c5:78:b3:63:0c:40:a7:56:7d:c0:95:2a:
45:b0:2a:b5:66:74:27:f9:94:f8:d9:8e:2a:d0:cc:
fa:92:4f:b3:89:11:08:e0:ae:2d:c1:17:75:c5:e4:
6e:f4:59:a1:ce:16:ac:80:6a:d3:9a:51:d5:c8:15:
a8:9f:ef:49:55:d7:01:de:93:24:77:13:13:9e:2c:
d4:26:07:fe:aa:c4:82:95:fa:25:21:18:7e:05:8d:
e4:34:24:e2:c8:56:51:81:b4:88:fd:45:d6:08:84:
0a:cd:00:d3:67:a5:97:c0:1e:eb:59:7d:2e:32:85:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:D4:D5:71:62:A0:55:C7:CA:4C:9A:3C:8F:7E:10:22:33:B8:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_KTU1XFioFXHykyaPI9-ECIzuKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:59:00:ce:3b:82:c4:c9:5d:64:83:74:54:60:9f:0c:e4:db:
35:7b:67:11:ea:e3:24:87:53:a2:5c:0a:04:31:6d:a2:33:52:
ab:2c:2f:19:2f:8d:23:24:9b:19:45:ee:b0:ae:20:8a:b2:66:
42:68:ad:a2:09:16:3b:d8:d1:36:26:63:0e:59:ee:85:9f:bf:
9c:60:ae:07:a3:dd:dd:57:99:6c:70:ae:2b:9e:72:3f:ed:16:
f2:dc:51:e8:bd:f2:b9:d6:f5:30:4f:b6:78:ea:51:78:48:5a:
90:d0:b5:9f:15:07:e5:bc:19:7b:85:8c:e0:42:aa:6a:cd:eb:
fd:a3:a8:ac:4a:ab:54:f3:3d:97:cb:69:8a:c3:36:c5:9c:9a:
53:0e:d5:97:d9:11:eb:d8:ed:ad:25:ae:1d:0c:63:e4:90:f3:
ae:c2:13:98:79:e5:57:34:38:c0:c5:27:f5:13:d1:a6:1b:14:
86:8f:5a:a6:92:43:57:3a:f7:34:2a:59:d7:e5:d8:e5:59:5a:
71:9a:0c:ca:88:e0:16:57:f7:17:c1:26:5a:ef:2a:99:bb:7f:
6f:cf:4d:1d:64:16:5f:ea:96:e1:53:46:c7:40:72:6e:db:f0:
6c:04:8c:b2:35:69:23:e6:e8:06:11:18:06:11:66:bc:dc:93:
82:af:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:18 2026 by rpki-client