Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/KOWxSmH0_bapiUsF2I5NvMk2mAE.roa
File: KOWxSmH0_bapiUsF2I5NvMk2mAE.roa (raw, json)
Hash identifier: qlla291EA5iael/7BwH1F/97Ya9GRn26shYvkPQjZ4Q=
Subject key identifier: 28:E5:B1:4A:61:F4:FD:B6:A9:89:4B:05:D8:8E:4D:BC:C9:36:98:01
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 019DA57CEC7282A7A7E2415C424C4E1AAB2C
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/KOWxSmH0_bapiUsF2I5NvMk2mAE.roa
Signing time: Sun 19 Apr 2026 11:25:20 +0000
ROA not before: Sun 19 Apr 2026 11:25:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24658
IP address blocks: 81.19.128.0/20 maxlen: 20
81.19.128.0/23 maxlen: 23
81.19.130.0/24 maxlen: 24
81.19.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:7c:ec:72:82:a7:a7:e2:41:5c:42:4c:4e:1a:ab:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Apr 19 11:25:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28e5b14a61f4fdb6a9894b05d88e4dbcc9369801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:d6:02:10:0a:b4:9f:7d:11:73:d5:6b:80:
e2:ac:18:71:18:3d:6c:43:3b:77:7d:cb:d4:11:fc:
1e:49:db:0a:8d:e7:42:a6:d1:bf:34:29:ed:51:e8:
d6:ed:40:1d:07:c3:f1:f6:b0:11:f1:9c:d6:8e:2f:
d6:37:05:00:60:dc:a2:90:e8:b5:ec:c1:b8:fc:73:
04:27:1c:db:07:36:75:fb:c4:55:cc:da:12:09:a1:
e0:93:aa:ec:49:93:a1:e4:b4:24:2d:4c:d9:d2:d3:
13:f2:96:bf:68:0e:6a:92:68:61:c3:4c:5b:d0:83:
34:b8:6b:68:16:7d:68:53:9f:f5:a6:18:93:0f:a6:
a5:bb:bb:47:87:e3:55:1d:0e:54:0c:83:69:17:3b:
7a:ac:da:01:0d:f5:f6:74:cc:11:49:cf:db:cf:f9:
41:e5:6f:2e:71:e9:8c:ce:52:84:f1:7e:b7:b1:db:
79:bc:a4:ef:a0:f0:fa:e7:bc:77:f3:f7:ee:df:95:
2e:9a:38:4f:19:60:7b:46:82:99:46:4f:c0:98:b7:
e2:67:9f:b1:23:de:24:2b:66:9d:40:35:6d:3a:84:
03:21:2a:58:57:41:7b:13:72:5c:94:f7:43:6d:dc:
bb:aa:72:10:90:5c:6c:41:95:94:10:8d:20:43:d2:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E5:B1:4A:61:F4:FD:B6:A9:89:4B:05:D8:8E:4D:BC:C9:36:98:01
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/KOWxSmH0_bapiUsF2I5NvMk2mAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:7d:a4:27:e7:ae:16:ff:e7:ea:95:fe:e3:1a:b3:53:b1:57:
09:fe:eb:6b:d3:18:ce:84:e8:f3:95:90:48:bc:08:22:b1:4e:
32:4e:8d:91:af:7b:88:1a:af:ed:08:e8:a2:e6:9e:5b:25:32:
25:a7:27:f5:26:f4:8f:98:73:8a:0e:b8:ce:be:af:84:f7:99:
5e:91:bb:d6:0f:85:a3:5f:db:bd:0e:53:16:3d:ca:91:90:39:
62:15:28:32:ad:d5:d2:22:2c:af:51:a7:40:b3:99:41:f0:dc:
0d:01:c9:0d:2d:05:2e:ce:d5:8b:30:0f:f8:0a:1c:8b:d6:0b:
0b:0a:2c:17:96:a5:1e:99:a2:82:dc:6c:49:d3:48:0b:8d:61:
ee:a8:52:77:b8:4e:8d:72:c3:0a:ec:31:07:41:08:b2:60:8f:
76:9e:b6:d5:de:7c:12:97:5f:b3:06:d1:23:ca:ca:e7:07:7c:
d1:ec:11:11:4d:e3:1c:73:ce:ab:fc:37:79:c1:d5:e6:60:ee:
4f:46:9e:ce:10:b5:1d:6e:2a:64:ff:06:59:85:81:cf:cb:46:
03:bb:31:c9:55:22:9d:d4:76:fe:9b:06:fc:04:14:4e:05:75:
5e:c1:4b:de:03:33:37:68:cb:b3:96:15:76:e1:98:5f:8b:62:
8f:a9:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:59:34 2026 by rpki-client