Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/KTl4yvtl1K10TOrICutc3Mwy5AQ.roa
File: KTl4yvtl1K10TOrICutc3Mwy5AQ.roa (raw, json)
Hash identifier: VcoJ6L1AFO2A8ZtsbXDXJR4eW30oqtBx+iMLYosDEAQ=
Subject key identifier: 29:39:78:CA:FB:65:D4:AD:74:4C:EA:C8:0A:EB:5C:DC:CC:32:E4:04
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A01128487D86C24D0ED2485A29DFC93329
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/KTl4yvtl1K10TOrICutc3Mwy5AQ.roa
Signing time: Mon 17 Aug 2026 19:17:27 +0000
ROA not before: Mon 17 Aug 2026 19:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 109.122.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:28:48:7d:86:c2:4d:0e:d2:48:5a:29:df:c9:33:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 17 19:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=293978cafb65d4ad744ceac80aeb5cdccc32e404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:b3:7b:54:14:79:91:18:cb:0d:e8:c6:9a:
d7:46:b9:d7:56:cc:da:bb:2f:6d:e3:c5:04:30:e9:
7d:6f:87:58:f1:bf:f5:00:3a:7f:27:d7:4b:d3:89:
dd:b5:7b:9c:41:7c:3f:1e:64:6c:46:54:6b:a5:e5:
0d:6b:15:35:c1:80:e3:2e:5a:d8:85:78:c9:b0:87:
e0:ac:e1:d4:be:d0:34:6e:ab:69:c4:17:66:fa:52:
f5:c0:22:af:b1:f3:70:2e:38:0e:99:a2:5c:2a:c6:
38:20:84:5e:e1:c8:47:85:12:44:d0:f8:65:47:50:
48:34:72:f6:0c:6c:43:a6:4e:8e:9f:06:02:c9:8d:
ae:20:67:7e:c4:35:5f:6e:4d:85:10:81:5a:53:37:
8b:cf:20:4d:f2:74:3e:2e:31:a3:eb:19:4e:ef:f2:
13:52:46:d6:29:e6:20:52:27:b1:c2:63:7a:18:34:
9f:ee:c8:ce:74:1b:7e:77:55:76:17:78:a6:01:00:
e4:20:fe:30:98:05:37:1e:33:5d:59:bf:e4:fe:a4:
98:2a:77:61:36:9f:c0:b2:10:cb:b9:66:4f:5a:61:
ec:ba:64:f2:90:60:73:03:7a:4e:de:b6:f8:ed:d7:
df:07:0f:00:40:ea:a1:b3:22:1e:bf:7e:b3:95:3a:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:39:78:CA:FB:65:D4:AD:74:4C:EA:C8:0A:EB:5C:DC:CC:32:E4:04
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/KTl4yvtl1K10TOrICutc3Mwy5AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.27.0/24
Signature Algorithm: sha256WithRSAEncryption
76:17:a2:69:fe:be:17:fd:ea:eb:c3:7c:51:df:77:1d:2a:16:
69:17:27:7b:9b:7b:b9:57:40:8d:86:c6:92:c3:84:ba:ec:d7:
ad:98:6d:10:c2:91:f5:7d:58:77:b0:8d:ce:78:02:b6:15:49:
27:8e:dc:de:90:9e:b0:5b:e4:e9:7e:15:a9:d2:e9:67:38:bc:
15:21:ee:6a:54:64:d3:0c:5f:28:96:9c:49:03:c5:3b:b9:a4:
c1:c4:36:5b:ba:78:ed:5a:29:53:f4:99:38:d4:cf:44:f6:59:
e4:65:7f:4e:52:2c:8f:d7:7f:f1:fc:4d:8b:d3:fe:ab:27:aa:
27:b3:2b:69:f2:ce:d1:a8:93:d8:29:18:22:30:0f:d4:77:48:
a7:b5:dc:4f:6f:23:f8:ad:ba:fe:8e:a1:00:c2:e4:ad:dd:fb:
a0:f7:91:2c:c7:52:c2:1c:9b:e4:a0:87:42:75:8d:23:7d:60:
ef:4f:95:a4:b6:f2:26:00:4b:5d:aa:ca:c7:b5:04:fd:52:eb:
f7:27:cc:28:70:c9:0a:c2:50:84:51:1c:ae:2f:c1:18:c9:47:
ee:96:d0:07:58:fc:be:63:11:ee:bc:9d:0f:99:1c:a6:b7:0d:
c2:e6:d4:93:93:ee:fa:72:a7:bb:81:4d:a7:7c:61:73:65:ef:
bc:11:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:56 2026 by rpki-client