Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/kauPKbwaOUARfDg5d8F8aNgSNO4.roa
File: kauPKbwaOUARfDg5d8F8aNgSNO4.roa (raw, json)
Hash identifier: vw523GTo/K45OJ6RNzehhYYWckxE5wHVG39xQrBxD2c=
Subject key identifier: 91:AB:8F:29:BC:1A:39:40:11:7C:38:39:77:C1:7C:68:D8:12:34:EE
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 01A0E2F514709E9E0F33A008A9F072D39B72
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/kauPKbwaOUARfDg5d8F8aNgSNO4.roa
Signing time: Sun 27 Sep 2026 13:01:47 +0000
ROA not before: Sun 27 Sep 2026 13:01:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55002
IP address blocks: 128.139.6.0/24 maxlen: 24
128.139.7.0/24 maxlen: 24
128.139.34.0/23 maxlen: 23
192.114.0.0/24 maxlen: 24
192.114.1.0/24 maxlen: 24
192.114.2.0/24 maxlen: 24
192.114.49.0/24 maxlen: 24
192.114.50.0/24 maxlen: 24
192.115.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:14:70:9e:9e:0f:33:a0:08:a9:f0:72:d3:9b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Sep 27 13:01:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91ab8f29bc1a3940117c383977c17c68d81234ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:28:b3:35:ba:25:6a:5b:0f:80:cc:ca:b0:
a8:fa:24:07:6c:24:f2:69:f4:ca:02:81:4e:44:f0:
31:ce:c6:f1:8f:82:8e:95:c6:14:5e:98:12:ce:5d:
d9:70:0d:0e:10:6e:88:d9:ef:9b:0e:94:3e:f1:4b:
ea:4c:f8:1b:e4:fa:58:f5:10:2d:32:d3:77:30:43:
92:4c:2b:6a:95:9c:2f:ac:be:0f:dc:3c:6c:ad:66:
f5:e7:4b:e2:7e:65:03:4e:21:9e:05:d5:9d:c5:36:
ac:61:a3:39:39:67:3c:ca:52:83:e2:ff:60:8c:e6:
23:e5:2b:81:f1:0f:4f:22:d5:ea:1f:61:74:a2:60:
e8:1e:2f:8e:c9:4f:f6:ae:ad:c6:63:e8:fe:f6:05:
0c:dc:bd:92:61:6c:4c:89:ff:48:5f:5b:da:4f:93:
9c:90:bc:6d:70:6a:93:b1:43:67:96:8a:bb:7f:09:
08:83:b0:e5:ee:0b:a2:53:21:e2:65:d4:5f:61:c0:
b7:46:c8:2f:7f:f4:3b:3e:32:0d:56:f4:81:d7:f9:
da:a8:f1:23:b4:4e:4e:9c:16:cf:7d:2c:98:55:65:
87:7d:0e:46:95:78:11:2f:05:da:d2:07:63:cd:9b:
2c:ae:8a:58:46:e8:09:a2:50:3a:e7:ea:ca:ab:b3:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:8F:29:BC:1A:39:40:11:7C:38:39:77:C1:7C:68:D8:12:34:EE
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/kauPKbwaOUARfDg5d8F8aNgSNO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.6.0/23
128.139.34.0/23
192.114.0.0-192.114.2.255
192.114.49.0-192.114.50.255
192.115.40.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:65:ff:50:c2:e9:96:44:e5:9b:83:e5:dc:45:ae:21:69:23:
47:94:e6:01:32:63:b3:a5:d9:3b:b8:7b:76:8e:0d:ca:16:9d:
49:e6:1d:7f:7d:ac:89:a9:d0:3c:2b:9c:cf:ff:00:b2:cc:2b:
7f:ae:a7:c0:61:4d:90:ef:9b:5b:47:8f:34:de:e8:67:10:31:
90:61:1a:9b:a8:03:f0:61:75:43:b9:3f:1d:e9:49:b6:ac:f1:
4f:d7:2e:84:ab:7b:47:3e:79:d7:0d:54:4a:49:2a:bf:87:b9:
19:a8:f8:55:8f:7b:43:9c:a1:5d:22:bd:b8:6e:4e:a4:b3:89:
96:a9:ae:41:ae:44:63:88:31:2e:fe:df:4e:dc:a0:19:37:5a:
40:bf:3f:f3:9e:d3:93:cb:19:00:54:31:61:79:33:36:59:f2:
74:fd:22:60:19:ce:fb:7a:7c:eb:d9:39:a8:63:c4:bb:be:cc:
c6:0f:0f:c4:6b:8b:69:bb:b8:13:c6:e4:6f:71:aa:e4:57:cf:
0d:64:73:8b:d2:91:f2:40:fe:33:13:5d:c0:c4:f4:ea:22:27:
9d:95:21:d6:88:83:84:5a:46:d7:85:71:dd:8a:f8:70:3e:8e:
bb:e1:23:02:5e:4c:34:2a:e4:1f:ae:b3:ea:13:fb:23:a1:f4:
2f:7b:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:17 2026 by rpki-client