Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/URKIafcHZ60vit5LIOw_tnOcooo.roa
File: URKIafcHZ60vit5LIOw_tnOcooo.roa (raw, json)
Hash identifier: hhO8carr/kSOIQuT+hYSGEtPo9DPeJQDm3xkwgjGVX8=
Subject key identifier: 51:12:88:69:F7:07:67:AD:2F:8A:DE:4B:20:EC:3F:B6:73:9C:A2:8A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A01E6A24BDFD467786D7BAE376ABEABFB0
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/URKIafcHZ60vit5LIOw_tnOcooo.roa
Signing time: Thu 20 Aug 2026 09:04:27 +0000
ROA not before: Thu 20 Aug 2026 09:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205941
IP address blocks: 91.200.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:6a:24:bd:fd:46:77:86:d7:ba:e3:76:ab:ea:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 20 09:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51128869f70767ad2f8ade4b20ec3fb6739ca28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:51:f9:2a:4b:49:ae:8d:46:6a:78:db:a3:
02:12:20:7e:9d:76:d0:21:47:4b:19:bb:69:e3:55:
4b:24:09:57:0f:00:14:4f:53:00:c5:6e:c6:f3:40:
55:ba:a1:a5:0d:92:04:15:cd:6c:6a:7a:e7:b7:aa:
d7:f5:37:f8:79:67:f1:95:fb:60:11:c6:d2:2c:b5:
b8:1f:d3:6c:f7:02:ab:4e:f0:29:1c:72:2e:e0:88:
62:4c:70:99:72:c6:ac:d8:e1:ec:92:9d:ca:04:07:
3c:75:b3:fc:70:6e:f7:5b:ec:89:44:b6:b4:39:56:
9d:6d:c5:3d:dc:86:ab:2a:1c:71:1c:57:0a:a4:04:
f9:d7:2f:24:ae:2b:f3:32:c6:2c:d3:e0:ce:99:ca:
8d:e1:87:e6:57:a5:43:cf:d8:c2:7f:d5:3a:c2:a4:
d7:7f:74:81:24:ef:a9:1e:96:32:da:c8:ed:b3:7a:
3e:8b:17:0c:34:6b:10:b0:11:a8:e9:8f:67:12:42:
e1:e1:3e:80:8a:c8:dc:ff:34:e5:00:a6:d6:2e:6d:
fa:7e:ba:f7:c6:d1:f2:ea:47:49:4b:70:fa:b9:a2:
1a:e4:37:7c:75:f5:1a:27:0b:48:6e:6e:5c:c4:08:
45:09:dd:8c:f0:52:eb:20:a9:22:23:d4:a6:de:45:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:12:88:69:F7:07:67:AD:2F:8A:DE:4B:20:EC:3F:B6:73:9C:A2:8A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/URKIafcHZ60vit5LIOw_tnOcooo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c5:2e:80:2e:67:9b:7c:f8:da:d5:c8:b8:43:7e:a6:83:b1:
9d:a7:d3:a6:7f:98:c1:9e:b8:eb:3f:3a:a6:9e:2e:4f:95:1d:
6e:7a:21:07:8a:66:9a:27:a9:14:d1:0b:0b:3a:16:75:13:a7:
75:e4:c0:18:a3:24:b5:24:e7:da:2c:80:3a:8f:a8:03:e9:dc:
62:50:a0:57:85:3a:cf:8c:c3:58:ff:9d:3a:37:e7:89:7c:18:
c3:e3:0a:43:48:d4:d7:f0:68:71:71:22:70:f3:58:59:14:af:
27:36:64:f7:c5:b1:d2:07:77:7d:c9:6a:95:12:cb:76:ef:12:
a9:9e:9b:f2:01:ec:b9:ab:b7:f1:05:9c:87:7e:92:1a:2a:9c:
d8:44:8f:3d:76:a1:3d:e2:36:b0:8b:84:b2:e1:6f:21:d7:e5:
98:7d:16:eb:d0:27:f1:38:eb:0f:b5:16:7d:59:bf:c6:7c:dc:
0b:5a:85:b1:62:89:c9:93:b9:5e:0f:27:86:27:36:c2:0b:77:
1f:c3:3b:fb:3c:45:9e:52:04:af:64:92:9c:39:27:ed:2c:8f:
d5:50:2b:62:b1:73:61:28:86:75:f9:51:4d:e0:a5:19:0f:3f:
29:56:ea:89:df:1d:bd:69:63:9b:f9:55:06:49:72:68:8d:85:
70:73:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:24 2026 by rpki-client