Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/ksaCCpURSw0ZhOl5teojDL5xafg.roa
File: ksaCCpURSw0ZhOl5teojDL5xafg.roa (raw, json)
Hash identifier: zdkmFDcBfCu3b+jGRXAWP+4CGEsf9AaTPVfVHsmsQ5Y=
Subject key identifier: 92:C6:82:0A:95:11:4B:0D:19:84:E9:79:B5:EA:23:0C:BE:71:69:F8
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 01A043DA36CA070785F0821BED3C651E6EBB
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/ksaCCpURSw0ZhOl5teojDL5xafg.roa
Signing time: Thu 27 Aug 2026 15:32:49 +0000
ROA not before: Thu 27 Aug 2026 15:32:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211521
IP address blocks: 96.9.145.0/24 maxlen: 24
2a0a:c743:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:da:36:ca:07:07:85:f0:82:1b:ed:3c:65:1e:6e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Aug 27 15:32:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92c6820a95114b0d1984e979b5ea230cbe7169f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:53:1c:0b:e0:ca:9d:ed:5e:96:d9:3c:dc:
ec:40:d8:b8:4a:01:93:97:4b:2b:f9:a9:ed:ee:37:
56:3a:78:91:ed:b0:c7:48:87:e9:91:f6:ed:e8:08:
3b:4a:15:db:5d:2a:f7:23:db:8d:4f:15:95:aa:5d:
dc:05:c9:67:54:f5:03:ed:cd:0c:10:4f:1e:92:41:
74:8a:4f:22:3e:d0:ee:13:24:26:f0:18:7e:ac:af:
89:26:57:05:da:0d:1b:53:b7:48:33:53:5d:e7:15:
79:fd:76:4a:d3:a0:f4:a5:7b:f8:5f:7e:28:5d:11:
00:f1:37:f5:a2:a4:12:fa:37:c6:4f:11:3b:56:54:
3d:ce:c3:b9:51:74:35:68:b7:3d:fc:28:29:43:82:
36:55:02:12:cd:c8:ea:85:df:35:34:7d:db:1e:f0:
64:b2:f5:a5:56:c0:00:08:05:fd:c6:d7:48:a5:5a:
2f:eb:ba:0b:ed:40:6b:fb:4a:22:62:1b:5b:ef:c9:
58:38:6c:2a:58:c0:a1:2f:9b:0b:a5:79:2c:4e:95:
9f:e6:54:2a:7e:ab:99:e3:85:27:67:be:92:9c:d4:
4e:95:33:c0:9d:08:f6:74:a9:00:22:22:9b:6c:03:
3d:ac:40:e7:b8:aa:c5:43:57:bc:df:25:39:d1:61:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C6:82:0A:95:11:4B:0D:19:84:E9:79:B5:EA:23:0C:BE:71:69:F8
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/ksaCCpURSw0ZhOl5teojDL5xafg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.9.145.0/24
IPv6:
2a0a:c743:1::/64
Signature Algorithm: sha256WithRSAEncryption
84:53:f0:45:c0:f5:ce:73:b2:e1:a6:d3:6e:35:9b:57:20:b9:
f1:75:3c:6f:58:32:9b:61:bf:5f:91:e2:6b:d1:b7:98:a2:a8:
0b:16:e1:d0:56:f3:57:ec:bf:23:1c:55:0f:02:08:63:d6:d8:
2c:1b:8d:94:b1:ea:f7:1d:09:f6:9e:86:5d:22:ce:3c:91:ac:
61:b2:5c:dd:64:98:37:dd:a1:cb:07:78:e7:73:ac:2a:aa:33:
50:f5:d5:d1:7e:1a:eb:24:13:90:9b:12:40:38:5d:3a:5b:43:
9a:14:9e:80:1d:9a:5b:5d:b4:1e:0f:77:db:a9:49:46:f2:94:
0c:87:21:87:ea:7e:89:40:2f:be:04:76:40:fb:24:99:c2:75:
6a:fe:c3:55:19:71:98:61:1d:b0:e6:66:9f:d4:58:28:9f:1b:
3e:c8:91:ee:92:0b:d3:df:1c:dc:f2:96:64:a0:e7:bb:df:03:
80:3a:aa:05:d2:f4:9d:ae:98:8e:12:76:3c:93:b8:50:c4:95:
70:0d:94:b5:cc:e2:51:86:5a:01:d2:b0:2e:f1:53:fb:67:64:
43:1a:60:24:5d:67:61:ee:9f:0e:6d:73:31:bb:2c:99:04:54:
9e:c7:46:80:6e:63:fd:d6:ee:57:40:a0:bd:0d:01:d9:d0:b9:
96:d4:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:25:21 2026 by rpki-client