Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/klZdZ8xiyHGKEf_gfoS4Gl7S3V0.roa
File: klZdZ8xiyHGKEf_gfoS4Gl7S3V0.roa (raw, json)
Hash identifier: PnFskfREpmwodvBbY9tSgM475PNufEhEVsxknIOHmG8=
Subject key identifier: 92:56:5D:67:CC:62:C8:71:8A:11:FF:E0:7E:84:B8:1A:5E:D2:DD:5D
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F2368795DBD6D78AB13FFC0361D558552
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/klZdZ8xiyHGKEf_gfoS4Gl7S3V0.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 193.239.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:79:5d:bd:6d:78:ab:13:ff:c0:36:1d:55:85:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92565d67cc62c8718a11ffe07e84b81a5ed2dd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:ea:96:3c:7e:53:4d:70:e9:30:af:38:85:
7c:ca:04:cd:66:09:12:2f:60:aa:fa:50:b0:61:c1:
e3:39:75:91:cb:d9:85:f5:ac:25:ff:52:27:f5:57:
ff:3b:10:a3:a0:b6:1d:ee:81:80:fe:81:71:e6:87:
2e:b6:6a:7f:fd:1c:71:d9:6f:17:89:40:b3:ac:9c:
27:d4:60:54:d0:0e:40:7a:4c:04:11:c3:27:db:79:
3d:a4:73:97:d7:73:0c:b3:3d:ea:6a:89:96:96:e9:
dd:3b:9e:c9:88:c7:c5:99:a4:23:55:56:30:15:bc:
e5:48:b9:30:41:34:ed:b0:ce:86:77:89:29:b9:93:
df:13:78:67:b6:b2:65:46:02:14:eb:47:df:52:5a:
57:37:5f:da:65:6c:d8:20:fc:9d:94:76:45:ac:28:
ad:7b:77:c4:9f:db:b2:e0:34:0b:2b:24:9f:5f:0c:
f6:e0:f3:10:7c:b7:ac:7f:4e:fb:92:a1:76:d8:b6:
7a:d2:be:3d:5f:bf:fc:54:2f:38:4e:86:30:1a:b5:
90:63:f9:fb:ad:bb:d8:1b:18:0b:e9:dd:1a:38:d7:
93:dd:5d:4f:b5:21:63:15:80:92:6f:9e:55:43:10:
2c:d8:f7:84:bc:f5:fb:dc:8c:c5:a5:5f:a0:b0:10:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:56:5D:67:CC:62:C8:71:8A:11:FF:E0:7E:84:B8:1A:5E:D2:DD:5D
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/klZdZ8xiyHGKEf_gfoS4Gl7S3V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
95:fc:a3:ae:66:59:44:3a:19:5d:9c:9b:b0:92:a8:7f:ce:6c:
cb:3a:af:ca:52:e2:0d:43:20:f2:b8:b0:a2:78:e7:6e:99:60:
2f:aa:c1:b4:a4:84:37:bf:c4:dd:a8:81:b1:2c:d6:d2:5e:d2:
bf:7a:1b:0b:e3:ab:84:4b:8e:d4:12:34:05:42:c0:62:b5:3b:
06:ae:36:a9:7a:3a:a5:04:26:f1:c7:58:cc:86:c7:6c:cf:8a:
1a:70:32:a2:2d:18:e3:aa:73:a9:cc:ed:a6:e0:84:0c:03:29:
c0:ad:36:01:56:f5:c5:bc:5c:6e:5e:64:26:ef:f9:9f:5e:76:
aa:ff:d2:26:10:0c:9b:42:61:a5:db:d6:74:1d:38:e2:53:fa:
80:8e:31:ab:a2:70:17:e2:09:13:c5:8f:d4:7c:b7:de:d2:39:
51:de:a4:20:f4:c8:d3:db:58:70:0e:31:fa:ff:46:1b:13:19:
b2:2d:a8:78:ae:1a:cf:71:48:d7:d4:a9:3b:4f:31:8c:42:69:
24:b7:1f:24:6e:a2:92:69:50:b7:5e:af:07:bc:88:f4:72:32:
19:02:29:f3:b9:a3:3f:cb:f4:02:df:8b:fd:c2:1c:e2:68:24:
0c:ac:8e:6e:a2:12:0d:8c:41:1a:87:aa:4c:ca:11:4d:38:bb:
7d:b3:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:51:36 2026 by rpki-client