Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/kee8Ft_wtZ-FIjDr3KKyMCRKpJY.roa
File: kee8Ft_wtZ-FIjDr3KKyMCRKpJY.roa (raw, json)
Hash identifier: SQWFKL5vZwbDXF4nRLA/mJu5PqbR70Kz0kABO0qMwQE=
Subject key identifier: 91:E7:BC:16:DF:F0:B5:9F:85:22:30:EB:DC:A2:B2:30:24:4A:A4:96
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019F67237C9E62271BB96F3381DB3B07D826
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/kee8Ft_wtZ-FIjDr3KKyMCRKpJY.roa
Signing time: Wed 15 Jul 2026 18:56:46 +0000
ROA not before: Wed 15 Jul 2026 18:56:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.122.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:23:7c:9e:62:27:1b:b9:6f:33:81:db:3b:07:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 15 18:56:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91e7bc16dff0b59f852230ebdca2b230244aa496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:4d:66:36:2f:a6:d0:7b:81:ce:ef:4a:04:
91:af:40:bf:57:78:14:6a:13:71:b4:8f:bf:df:45:
85:b7:bf:3f:71:f1:e5:eb:0f:19:cc:41:45:52:58:
b2:94:8b:82:0a:1b:41:6c:67:79:b3:f0:ff:6d:fa:
60:9b:4a:3a:9a:1b:1c:31:e6:67:ab:6a:a7:62:30:
d7:c1:5a:18:a3:37:e6:c1:93:b7:74:70:eb:1e:73:
31:56:5a:6c:d3:31:0b:aa:bc:41:bb:96:45:21:38:
eb:07:6e:97:24:3c:8c:a8:5e:92:ec:f0:77:2d:51:
28:17:f6:77:fd:0f:4f:72:b6:f2:e8:db:53:c4:bd:
65:dd:df:4b:b0:c7:58:da:a8:09:e6:d3:bf:5e:d4:
d8:52:78:8a:29:82:e0:25:5c:fd:f9:a8:cc:14:8a:
48:a1:8b:42:98:28:be:d5:68:13:d5:54:21:48:cf:
07:2e:01:25:53:ce:c9:5c:e5:8d:52:b8:60:14:0b:
63:3b:f0:ff:38:42:75:ef:00:31:fc:fa:8c:eb:0a:
80:a6:d5:e2:92:28:45:a9:88:a4:f4:11:93:a7:b7:
f1:0e:1e:d9:6a:58:82:d0:e9:25:f5:b4:9d:b1:dd:
26:f6:a6:d5:f0:92:c8:78:34:fb:c9:cf:ff:e6:e5:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E7:BC:16:DF:F0:B5:9F:85:22:30:EB:DC:A2:B2:30:24:4A:A4:96
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/kee8Ft_wtZ-FIjDr3KKyMCRKpJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.10.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4f:86:9e:da:92:02:00:b3:35:d3:45:a8:a9:d0:35:d8:3a:
36:85:32:43:ae:2e:02:f9:4e:61:96:62:0f:b4:6c:e6:c8:1c:
ec:73:6f:43:34:f8:d8:b5:d8:fe:02:82:72:ae:6c:dc:57:aa:
68:37:7f:be:79:4c:dc:b0:70:08:d4:89:30:22:10:69:c3:03:
52:50:3b:00:92:89:20:b3:a6:88:42:0d:c1:c9:ff:81:30:ad:
7c:a5:e2:f7:f8:7f:6e:74:b9:5d:5e:e1:2c:19:66:5f:fc:a8:
88:37:eb:1e:a8:07:97:5b:86:1a:63:71:0d:d9:9b:3e:d6:7c:
72:e0:05:62:ff:3d:84:cc:1c:bc:aa:ab:60:1c:a8:6c:ec:a4:
64:92:72:3c:df:3b:24:45:bc:d0:e3:1c:49:bc:28:02:a1:69:
cb:3d:56:ad:40:59:28:7c:09:7e:16:7c:a3:d9:ca:34:84:c1:
56:10:7e:8a:45:fb:9a:cc:c0:31:45:ba:12:23:df:64:17:d9:
c4:9f:37:e5:02:d5:b6:9a:55:a4:42:2d:2c:03:a5:bb:0e:e5:
e0:a5:f9:bb:c5:ce:76:99:d0:42:a5:d4:45:75:ce:9b:6f:08:
83:c2:5b:db:59:0c:22:88:56:6c:01:ab:b6:47:61:ef:6c:fe:
23:8e:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:30 2026 by rpki-client