Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/kHVx3MxOhUHnvGzMhHMTh-h0xao.roa
File: kHVx3MxOhUHnvGzMhHMTh-h0xao.roa (raw, json)
Hash identifier: apdMUVkUsjvxSYU4NdkC22tvpcOKIkS/iIwnp6sgj8E=
Subject key identifier: 90:75:71:DC:CC:4E:85:41:E7:BC:6C:CC:84:73:13:87:E8:74:C5:AA
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A0246D248B61073572990657E4AE879531
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/kHVx3MxOhUHnvGzMhHMTh-h0xao.roa
Signing time: Fri 21 Aug 2026 13:05:27 +0000
ROA not before: Fri 21 Aug 2026 13:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132541
IP address blocks: 94.177.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:6d:24:8b:61:07:35:72:99:06:57:e4:ae:87:95:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Aug 21 13:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=907571dccc4e8541e7bc6ccc84731387e874c5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:7b:37:08:56:62:97:f3:e7:df:78:8a:f7:
8f:a0:e9:de:23:d9:27:8e:a8:0c:16:ff:e7:f5:6d:
85:8e:5a:4a:ec:69:80:fe:c4:a0:d5:06:28:35:69:
67:d2:02:5e:1c:0f:ed:05:e8:98:bd:b6:87:c2:90:
63:cb:a2:66:cd:30:24:11:31:98:f1:8c:ef:4c:a4:
b0:f0:39:0c:2c:a6:15:d4:8b:19:da:2f:91:83:41:
6c:e9:72:5e:9c:25:08:5d:dd:2f:11:b1:a7:e6:69:
d4:f9:fe:5b:a1:b1:b2:15:47:c2:9e:79:a3:b5:f8:
c0:d7:48:cb:13:f5:4a:43:00:d7:17:77:fe:86:f0:
28:6d:fb:4e:82:21:ea:56:4b:69:45:e4:9f:b2:e3:
9d:56:51:88:e6:df:87:28:de:65:4e:b6:d0:55:13:
c9:72:59:a8:50:00:e8:d0:19:ed:74:a2:4a:6d:99:
b8:78:c5:a6:a0:3d:5e:77:d3:3d:73:b0:5c:0c:ed:
5f:15:1a:64:e2:02:ee:64:d6:85:bc:54:38:e7:ee:
b6:28:bd:b8:bd:d0:bc:9e:5c:b7:3e:8b:0e:3d:b4:
ce:11:06:b3:ac:99:90:0c:89:d4:63:eb:55:4a:57:
e7:58:fc:29:3c:cb:6b:be:fe:aa:a4:5d:87:4a:be:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:71:DC:CC:4E:85:41:E7:BC:6C:CC:84:73:13:87:E8:74:C5:AA
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/kHVx3MxOhUHnvGzMhHMTh-h0xao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:25:e0:02:f4:35:5a:75:9f:f8:38:55:50:3e:c3:a7:54:36:
99:45:9d:85:f9:fe:19:6f:d0:70:54:65:67:17:7d:a6:34:ee:
e8:8d:e0:4b:6b:42:f2:4a:dc:52:cf:82:2a:fc:44:9d:50:ac:
c4:58:31:79:42:e0:ca:4c:a5:d1:f1:63:db:13:92:74:bd:60:
d4:ef:4c:a7:cc:95:f4:21:ca:25:b9:0a:a3:46:56:e0:e6:82:
d3:2d:5a:8c:68:5f:28:af:67:64:f8:a5:89:7c:06:99:2e:da:
e6:85:13:84:20:a7:38:e4:01:da:1e:ba:28:8f:1a:08:8f:00:
d0:9b:d3:9d:22:31:b0:7c:73:05:1b:b6:65:67:a9:b4:13:f8:
db:8b:75:93:cf:af:bf:21:80:e3:07:ad:35:cf:60:67:37:3e:
8d:e3:4f:56:90:70:f4:b2:a7:7a:53:b1:e4:8d:c7:51:fc:36:
9f:53:b2:73:3a:bd:5f:68:ac:af:e8:98:47:84:b5:bb:f5:1d:
9a:d3:bb:b8:9b:d8:09:c4:a4:0f:39:8f:8f:6e:ca:82:c6:cf:
a8:9c:fe:5e:9b:f2:69:88:53:61:d7:6f:46:89:35:a4:57:06:
90:c2:0e:b9:95:6e:29:33:68:6d:98:b8:e3:09:c0:c0:38:6b:
b8:8a:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:21 2026 by rpki-client