Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/CA_1Kmas_2nymLLXb3shDxqC9BQ.roa
File: CA_1Kmas_2nymLLXb3shDxqC9BQ.roa (raw, json)
Hash identifier: gwPY+wOHvDaqUHgSiKord1+4tmXgT/HPs2EN9Hz3/bQ=
Subject key identifier: 08:0F:F5:2A:66:AC:FF:69:F2:98:B2:D7:6F:7B:21:0F:1A:82:F4:14
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019FD636F86A11638B06617E8CECED26947E
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/CA_1Kmas_2nymLLXb3shDxqC9BQ.roa
Signing time: Thu 06 Aug 2026 08:35:54 +0000
ROA not before: Thu 06 Aug 2026 08:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 91.109.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:36:f8:6a:11:63:8b:06:61:7e:8c:ec:ed:26:94:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Aug 6 08:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=080ff52a66acff69f298b2d76f7b210f1a82f414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:66:ab:33:6f:cc:04:20:a9:4c:85:47:18:
7d:4a:d8:a0:03:a3:a2:34:66:ea:35:dc:e2:9c:2f:
e2:0b:9d:ba:92:ec:ca:b3:9a:75:50:2e:dd:53:cb:
7c:c7:4b:18:e9:3b:52:8d:23:8a:ab:6e:31:88:ad:
cc:0b:1d:2b:56:50:75:c3:fb:39:e9:ab:9e:fc:35:
e0:98:a5:35:10:a2:d1:26:0d:44:69:7c:4a:8f:97:
54:6f:c7:57:e1:fd:be:0d:41:26:28:65:80:72:67:
fa:02:4d:09:aa:5b:e6:63:8b:d3:ec:64:f2:5d:a4:
41:bf:42:f3:1a:4c:74:fc:a3:c5:67:d7:f0:b3:b6:
be:00:d7:22:ce:ee:c6:a7:2f:38:ab:f9:57:60:5a:
ee:63:97:da:8d:61:d9:65:ae:d3:ff:c8:91:c1:79:
d1:b6:cd:16:37:f5:bd:fd:c9:33:fa:09:b3:84:55:
5c:42:6e:63:c8:44:01:ef:9a:5a:fc:30:20:ce:a2:
b5:36:a3:5a:25:e3:66:51:b6:f1:2d:57:48:37:b2:
93:90:51:0d:b2:3c:6f:c1:ce:13:43:0c:b7:e1:da:
0b:45:4a:21:2b:9b:0d:14:02:9f:3e:c4:cb:f6:0f:
49:70:58:af:0a:89:09:28:ab:7a:94:9b:35:3a:8e:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0F:F5:2A:66:AC:FF:69:F2:98:B2:D7:6F:7B:21:0F:1A:82:F4:14
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/CA_1Kmas_2nymLLXb3shDxqC9BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.44.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ce:45:90:a2:3b:17:c0:3a:f7:dc:72:93:5f:1a:44:97:37:
f7:86:54:07:d2:14:26:1c:27:d9:29:34:a6:6e:45:08:d5:a5:
73:f3:24:c4:62:fc:74:a9:d4:ae:05:87:01:da:5a:b8:9a:ff:
9b:7e:32:5e:45:cc:ec:4f:7e:44:e1:f1:ba:6d:5b:1b:18:9e:
6c:44:ca:77:26:f3:f6:65:8b:6a:51:bd:76:61:db:82:0d:2a:
9b:9c:cd:25:c1:c9:52:dc:06:fd:87:39:fc:fb:25:ae:2b:d6:
32:bd:fe:35:c7:5e:8d:9d:a3:2c:7f:57:6b:15:85:f2:bd:0b:
f8:44:b2:f2:33:5f:42:0d:92:d3:13:62:13:b2:43:29:6b:97:
da:f0:cb:ff:b5:c8:ff:0c:f8:85:3d:6d:f6:f5:22:ce:d4:03:
5b:56:88:d0:8e:20:22:19:98:c7:98:b5:24:d7:72:0d:ca:38:
0b:b7:75:b2:05:99:6e:3c:20:91:27:25:d9:d5:26:de:61:34:
97:c8:4e:e9:05:37:d5:39:d9:48:b6:2c:a3:a4:ad:f7:d5:2f:
24:2d:76:d7:1c:e9:8f:2b:b1:8c:29:d2:53:ba:e2:8d:dc:d0:
07:c5:3a:35:aa:e9:44:f9:71:10:cf:25:c6:b1:ed:7b:03:38:
ac:0c:5d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:28:54 2026 by rpki-client