Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/kAq4hojeK0gkbXiz6xq0PC8k0Ek.roa
File: kAq4hojeK0gkbXiz6xq0PC8k0Ek.roa (raw, json)
Hash identifier: ttsnDtnP+BHLpM2WjJCxEUM/66waI/CJ1NYO0X6aDao=
Subject key identifier: 90:0A:B8:86:88:DE:2B:48:24:6D:78:B3:EB:1A:B4:3C:2F:24:D0:49
Certificate issuer: /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial: 019FAD54384A23206970E88CC73B0206CCFD
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/kAq4hojeK0gkbXiz6xq0PC8k0Ek.roa
Signing time: Wed 29 Jul 2026 10:03:25 +0000
ROA not before: Wed 29 Jul 2026 10:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196646
IP address blocks: 79.170.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:54:38:4a:23:20:69:70:e8:8c:c7:3b:02:06:cc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
Validity
Not Before: Jul 29 10:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=900ab88688de2b48246d78b3eb1ab43c2f24d049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:1d:6e:7e:75:f3:5b:c6:94:38:9f:a2:a7:
ab:73:6c:70:c1:07:28:0d:23:ad:86:49:76:8c:58:
9e:df:7e:53:22:2e:11:8e:3e:70:1e:c0:ef:0d:bd:
b0:cd:a6:be:92:e4:b7:44:cf:04:1a:71:1f:08:27:
af:6b:c6:7d:87:15:00:47:d1:29:a2:b9:f3:d4:3f:
fa:ad:7b:2c:c5:63:8f:11:91:05:70:e1:a9:0a:ca:
21:b2:d3:43:4a:f6:70:1b:66:b2:73:ab:a5:6e:ff:
cf:a5:ae:4b:94:b9:25:c6:03:40:a1:71:83:bb:83:
b9:7e:f5:d9:d4:38:9b:f6:4e:6f:9b:03:9f:8a:e7:
c3:a3:f7:6a:a6:e3:50:15:c9:05:2d:de:52:b8:48:
c5:01:b7:f7:88:bc:55:97:25:10:e5:c2:b9:14:5d:
39:78:c9:6f:7d:bd:7b:61:d4:17:78:89:48:b2:42:
09:55:42:05:3f:06:d3:d1:e2:ef:9a:6c:60:47:3e:
12:89:a1:ac:b0:ec:6c:b7:9d:16:7f:b4:d1:b9:c5:
46:5d:84:db:ac:53:c2:df:3c:49:b6:58:b0:c7:d0:
99:a6:cb:3a:3a:db:1a:ef:e7:da:0f:d8:ba:cc:84:
33:c7:8a:8c:6f:17:2f:ee:25:b1:18:0b:87:5a:14:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0A:B8:86:88:DE:2B:48:24:6D:78:B3:EB:1A:B4:3C:2F:24:D0:49
X509v3 Authority Key Identifier:
keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/kAq4hojeK0gkbXiz6xq0PC8k0Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3a:98:b4:f3:bd:a2:75:cc:65:c6:d9:ea:06:15:8c:0b:68:
c8:d5:4a:e7:56:4e:82:92:eb:f3:00:53:a8:db:82:ec:77:84:
fd:8e:c9:cd:15:cd:9a:92:27:93:96:48:7e:66:7c:6d:c9:30:
e9:3c:1d:7d:41:dd:19:e2:ce:67:30:b8:9b:c1:2a:5d:4b:85:
81:04:b9:18:08:a3:4f:3e:de:aa:ed:60:45:16:0e:33:5b:dc:
0f:f9:5f:6c:64:e7:d5:29:b7:ff:91:60:74:cb:78:a9:c8:47:
f4:05:51:f3:6a:60:77:fc:5d:29:83:e4:0a:0d:7e:aa:ad:f1:
b9:f9:cd:17:ed:1c:09:cd:04:cc:30:8d:25:c4:81:47:ac:df:
53:e9:2d:79:7c:ae:12:55:0b:b7:6c:d7:61:2e:43:88:75:e2:
92:67:1d:a0:14:9c:6b:a3:33:64:41:1d:18:6f:74:c9:53:77:
06:2a:46:20:cf:12:b5:ed:2b:6e:fe:88:95:cb:cd:53:2f:3b:
b0:50:a1:0b:95:0a:60:0c:b9:a5:71:0a:72:dd:0c:b7:1e:18:
c3:f8:b3:ba:97:8d:71:b4:ef:5a:94:46:43:61:f1:91:fc:93:
43:f1:43:9e:e9:b2:30:90:3a:25:41:3e:21:34:22:78:db:96:
b8:41:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:38 2026 by rpki-client