Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/knU4dZaimoTFNsDybo_RrHKE45g.roa
File: knU4dZaimoTFNsDybo_RrHKE45g.roa (raw, json)
Hash identifier: 91cLBLePGru3Ew/uOYSPXYIkqMobJYmdo5K1Q7DADLI=
Subject key identifier: 92:75:38:75:96:A2:9A:84:C5:36:C0:F2:6E:8F:D1:AC:72:84:E3:98
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 019FEB01CC116C891FFC125EEA0AFFCEB611
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/knU4dZaimoTFNsDybo_RrHKE45g.roa
Signing time: Mon 10 Aug 2026 09:29:51 +0000
ROA not before: Mon 10 Aug 2026 09:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402475
IP address blocks: 195.35.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:01:cc:11:6c:89:1f:fc:12:5e:ea:0a:ff:ce:b6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Aug 10 09:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9275387596a29a84c536c0f26e8fd1ac7284e398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:e0:e4:b7:29:72:9a:97:2a:7b:e8:9b:e9:
65:83:ae:04:75:16:c1:81:c9:ad:7f:e6:74:5d:59:
37:c2:23:c0:d6:66:88:43:e9:eb:22:d3:2e:0b:f2:
d9:07:76:88:b3:35:89:02:62:59:25:b8:32:bc:e9:
44:79:1f:60:91:41:f5:6a:60:2d:a2:7c:e8:38:68:
58:e9:25:71:36:f3:fc:1e:b3:c7:87:9a:10:ba:e5:
69:73:ca:79:1a:19:6b:c6:b2:06:60:20:d1:61:db:
63:08:0b:d3:fb:fb:fc:ab:6f:56:5c:6f:2c:66:7d:
6a:54:59:06:dc:37:3c:1e:14:0d:1c:8b:f0:19:a5:
b8:7a:d8:b7:d0:e4:65:9c:b7:b8:53:b9:67:08:7a:
3b:cd:2d:14:79:9f:60:db:75:f2:e5:4e:ac:3a:88:
43:38:46:9f:b9:19:e1:cc:79:5b:c4:97:89:28:c6:
94:28:a3:8e:98:43:c6:68:d4:3a:04:39:98:2f:b1:
56:c7:9a:51:37:aa:d2:e7:66:02:ca:99:3c:2c:b3:
86:95:39:b3:2c:13:b9:59:0b:81:de:82:6d:6e:03:
10:98:24:f9:77:99:8a:17:d9:d6:51:81:22:70:d1:
81:70:82:9f:07:1e:1e:d7:e9:4a:a8:df:21:a5:d9:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:75:38:75:96:A2:9A:84:C5:36:C0:F2:6E:8F:D1:AC:72:84:E3:98
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/knU4dZaimoTFNsDybo_RrHKE45g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.120.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a1:9e:5c:98:c6:fd:c0:c1:ec:86:6b:0f:c4:68:e5:08:a5:
db:c2:7b:d5:51:bd:3f:41:99:f2:ea:94:28:6a:6a:23:a9:06:
93:e5:83:01:d1:be:dc:18:74:d2:c8:36:5a:d6:f1:be:70:41:
fa:21:3b:ee:f5:ec:2e:40:5a:00:30:3b:55:1f:58:85:0b:80:
cd:e8:20:30:23:95:a0:24:87:7b:c2:61:20:eb:64:6b:d6:6f:
e8:65:3f:ca:15:00:4e:df:75:cf:e4:72:ac:49:67:d5:2e:ac:
fd:87:db:34:e6:66:8f:51:76:0b:1d:e4:e8:81:e4:f3:89:66:
6f:7e:09:58:0c:05:be:6d:a3:4c:93:d7:ef:a3:79:b1:0f:51:
82:da:c3:8b:a2:b4:a9:44:9c:d8:61:7a:ed:ba:41:2e:f6:cf:
4a:fc:b1:22:a8:5b:c6:12:db:a0:ae:f5:f6:b5:40:7a:84:12:
f1:33:dc:59:c6:4a:a8:ca:24:a2:b4:4c:e7:d3:1e:33:ba:37:
c0:00:b3:2c:52:10:5f:ff:ca:d4:54:ef:6d:99:d1:b7:51:0f:
14:ae:fd:53:62:5f:7e:61:86:a8:6d:46:f7:bc:d4:50:22:be:
41:ea:3d:f1:71:64:fd:b1:5f:96:04:2f:95:97:45:53:a0:90:
4e:92:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:24 2026 by rpki-client