Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/keEHUJ43Y9IN2xDD5mG2qVm1goM.roa
File: keEHUJ43Y9IN2xDD5mG2qVm1goM.roa (raw, json)
Hash identifier: hG1ssbYdtn0NJi+ksNOCJNHwyFqRe5pVzdnEry6sJ7Q=
Subject key identifier: 91:E1:07:50:9E:37:63:D2:0D:DB:10:C3:E6:61:B6:A9:59:B5:82:83
Certificate issuer: /CN=9a80ec3895c3b299a45d2698cd3aa7c9f1121adc
Certificate serial: 019F236880621AC33C8E18A17A4E91C42F0B
Authority key identifier: 9A:80:EC:38:95:C3:B2:99:A4:5D:26:98:CD:3A:A7:C9:F1:12:1A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moDsOJXDspmkXSaYzTqnyfESGtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/keEHUJ43Y9IN2xDD5mG2qVm1goM.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44823
IP address blocks: 193.16.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/moDsOJXDspmkXSaYzTqnyfESGtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:80:62:1a:c3:3c:8e:18:a1:7a:4e:91:c4:2f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a80ec3895c3b299a45d2698cd3aa7c9f1121adc
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91e107509e3763d20ddb10c3e661b6a959b58283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:13:ee:51:1a:5c:fb:81:d4:9f:20:eb:1b:
57:f0:ed:b2:9d:79:62:a0:ad:a8:ad:39:58:7d:71:
03:05:13:87:ff:6a:31:7f:f7:8c:4b:6e:33:ac:fa:
3d:9f:a4:0e:05:c7:99:50:5f:92:43:d8:91:25:3e:
63:39:b5:83:1d:34:28:a2:27:96:8e:d0:f2:67:16:
6d:f3:40:bf:18:8d:89:88:d5:69:a5:90:df:c5:fa:
56:b4:b9:89:11:56:97:a8:58:76:d0:92:41:ec:e5:
d3:94:30:6b:58:72:96:62:d8:df:2d:09:09:3e:0b:
98:26:2e:09:8b:c0:18:aa:41:73:2a:cc:1d:43:0f:
7c:70:71:af:8a:58:28:28:87:05:88:ca:e5:7f:a1:
69:90:af:86:e9:70:d1:f2:67:bd:b4:e4:b5:a2:9d:
b9:d6:36:3f:e0:6f:ce:b5:3d:92:9b:d7:21:9c:38:
5a:80:3c:0e:fa:ba:43:d5:de:1c:d6:0b:b9:39:95:
d9:ef:39:29:9c:d3:08:e2:b8:69:51:70:79:54:95:
3b:34:04:be:75:4a:87:8a:89:13:dc:94:0e:fc:5a:
4f:c6:1c:ad:97:40:04:fe:ce:27:17:52:43:26:d5:
32:3b:dd:e0:d8:a1:fb:29:bc:06:6e:66:0d:b0:69:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E1:07:50:9E:37:63:D2:0D:DB:10:C3:E6:61:B6:A9:59:B5:82:83
X509v3 Authority Key Identifier:
keyid:9A:80:EC:38:95:C3:B2:99:A4:5D:26:98:CD:3A:A7:C9:F1:12:1A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moDsOJXDspmkXSaYzTqnyfESGtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/keEHUJ43Y9IN2xDD5mG2qVm1goM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/moDsOJXDspmkXSaYzTqnyfESGtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.152.0/24
Signature Algorithm: sha256WithRSAEncryption
47:50:7b:ce:aa:1b:7a:b7:35:f1:5c:4a:b3:5e:b7:8e:1b:fb:
99:9f:61:48:cd:05:14:cd:bb:79:d2:c6:d6:32:1f:59:36:7d:
05:78:1b:a8:45:66:51:6a:10:6f:a2:5d:68:53:06:0d:27:6c:
49:9a:dc:dc:41:65:57:71:f8:e8:f7:ee:7f:4e:e8:60:1d:53:
32:8a:da:8a:3b:a4:be:35:7b:9c:ec:81:22:31:fe:c4:7f:64:
b0:40:ee:94:fd:b6:ad:85:a8:87:72:9a:e0:4d:4c:a4:00:ae:
57:d7:23:4b:2d:74:8d:42:94:88:dd:d4:f4:21:1d:3d:28:65:
7d:7d:49:8f:de:d7:cf:ed:70:e7:85:4d:58:ef:ef:66:c8:18:
02:3c:b2:65:62:5b:94:d8:93:4e:58:19:6b:bc:e5:b2:af:2f:
2c:7f:14:b5:d1:aa:d8:2a:fd:f2:7b:2a:e1:9d:eb:03:6c:63:
18:99:fd:c0:c9:07:90:1c:98:f7:87:6d:09:20:4b:86:56:b6:
29:87:9b:7a:35:f9:86:89:c9:dc:84:83:91:3e:7c:09:07:c8:
e6:69:63:62:91:95:ea:94:77:84:99:f9:84:11:4a:d1:8a:ba:
db:13:c2:7e:de:4d:70:98:f4:47:e2:de:98:b7:cd:27:47:f7:
1e:70:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:19:56 2026 by rpki-client