Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/aCrBApyDuKijuFQpX20WNh4unzc.roa
File: aCrBApyDuKijuFQpX20WNh4unzc.roa (raw, json)
Hash identifier: RUfwA5/PkM//szQwil20D8d8AR2S1/InQiu9dABqgmA=
Subject key identifier: 68:2A:C1:02:9C:83:B8:A8:A3:B8:54:29:5F:6D:16:36:1E:2E:9F:37
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FD102E5841AF8404315F59B0B9254C1FE
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/aCrBApyDuKijuFQpX20WNh4unzc.roa
Signing time: Wed 05 Aug 2026 08:20:55 +0000
ROA not before: Wed 05 Aug 2026 08:20:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20860
IP address blocks: 83.98.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:02:e5:84:1a:f8:40:43:15:f5:9b:0b:92:54:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 5 08:20:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=682ac1029c83b8a8a3b854295f6d16361e2e9f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:a1:05:70:de:0b:8f:ec:3c:7a:b9:01:f7:
79:f9:3f:42:4b:93:5a:89:ea:59:a8:15:52:1f:b1:
41:69:24:8b:e7:ff:fe:80:cb:15:00:08:7f:9c:2c:
b8:aa:fc:8c:0f:fa:7a:6a:28:00:fa:21:48:fc:b4:
b3:2f:b7:ba:e2:f8:6f:f3:8d:5d:0c:73:a7:8f:b8:
ca:fb:e1:57:fa:56:4d:ab:9d:64:d0:1e:46:ad:19:
d0:7b:69:6a:cd:be:18:c5:1c:4a:b2:ae:a7:1d:ba:
e1:57:90:cf:68:2d:cf:7f:18:74:26:43:18:6c:19:
5b:c7:b0:80:01:0f:47:cc:b1:d5:a9:77:34:15:7a:
8d:6d:70:08:ab:c2:32:89:95:8e:54:7e:d7:d0:84:
21:14:3e:5c:98:0f:9c:27:84:38:e3:fa:47:d5:96:
d2:d5:34:12:7d:a2:67:98:1b:ea:b1:83:45:6f:a6:
cf:74:ab:2f:82:07:b9:9f:3f:32:da:ee:97:00:29:
e3:97:6b:22:7e:fe:30:54:00:96:57:44:d3:1d:76:
ae:b4:e5:0b:2e:fa:5b:34:19:cb:6b:b6:0a:2c:9c:
26:e6:70:2f:43:81:dc:3d:de:4c:e4:db:4e:4f:ce:
c7:79:18:73:77:cf:4d:04:6c:02:83:ed:3d:b8:3b:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2A:C1:02:9C:83:B8:A8:A3:B8:54:29:5F:6D:16:36:1E:2E:9F:37
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/aCrBApyDuKijuFQpX20WNh4unzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d5:33:2f:69:ca:5c:da:d6:93:77:3a:2f:09:cf:56:44:34:
73:4b:16:ae:ba:03:e1:96:a9:e1:4c:88:bd:4b:8e:ff:d5:73:
08:57:a1:b7:31:e4:6d:b7:2f:b7:52:60:90:ee:f7:e6:a3:eb:
c3:5e:d6:e1:e9:15:b7:ac:7f:19:e3:58:1f:91:bf:84:aa:32:
46:d4:8f:ff:ca:9a:dd:14:d7:f9:3e:96:79:0b:71:b8:ea:4b:
0e:d9:aa:96:25:67:30:0a:14:13:9c:a2:5e:3d:13:71:62:79:
50:de:8c:51:87:ad:85:c6:75:69:9d:af:b0:a8:10:c5:95:f5:
0f:7a:6e:7b:05:fe:2b:20:dc:08:43:68:97:bb:ba:0d:36:d3:
65:78:63:bc:87:e7:31:29:dd:ed:8b:a4:2c:3d:18:73:01:aa:
f5:38:be:c6:97:8d:a1:62:90:f6:08:33:ca:2b:40:e9:46:af:
af:e5:d0:a2:99:2b:83:ad:24:f1:a6:50:2b:be:c0:f4:39:32:
1f:c7:03:b6:eb:af:00:2e:8b:66:5a:5b:41:9e:c0:f4:72:8f:
9b:f2:f2:a0:85:84:09:c9:25:ae:7b:3b:30:7b:f9:e3:a2:be:
99:d8:e6:d9:3a:06:b3:49:5a:cb:ad:8a:ee:a0:b2:1b:3d:a9:
31:38:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:38 2026 by rpki-client