Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/kToJrNs3-88YwxrMqnw31g7dxis.roa
File: kToJrNs3-88YwxrMqnw31g7dxis.roa (raw, json)
Hash identifier: 5cHaxNbK49cdprO9q39A2QZDD+NyUY26jCUSJRkU0PQ=
Subject key identifier: 91:3A:09:AC:DB:37:FB:CF:18:C3:1A:CC:AA:7C:37:D6:0E:DD:C6:2B
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 019FB8ADA48390B8ED75F8C6DF636D4EC228
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/kToJrNs3-88YwxrMqnw31g7dxis.roa
Signing time: Fri 31 Jul 2026 14:56:55 +0000
ROA not before: Fri 31 Jul 2026 14:56:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209659
IP address blocks: 94.142.251.0/24 maxlen: 24
2a12:5bc0::/32 maxlen: 48
2a12:5bc1::/48 maxlen: 48
2a12:5bc2::/48 maxlen: 48
2a12:5bc3::/48 maxlen: 48
2a12:5bc4:2::/48 maxlen: 48
2a12:5bc5::/32 maxlen: 32
2a12:5bc6::/48 maxlen: 48
2a12:5bc7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:ad:a4:83:90:b8:ed:75:f8:c6:df:63:6d:4e:c2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Jul 31 14:56:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=913a09acdb37fbcf18c31accaa7c37d60eddc62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:47:0d:4c:fb:8f:ce:11:db:bf:ff:ea:6d:
ce:19:be:0c:b4:e0:11:bf:24:7b:14:bb:1f:d3:c7:
1f:f4:8a:76:20:d9:58:af:9c:dd:f8:52:bc:fd:5a:
3c:32:94:7b:c6:e0:52:3d:55:8a:20:08:37:f9:f4:
91:0a:ff:50:91:44:aa:44:39:66:26:37:48:11:8a:
4a:83:c7:93:ca:54:2a:a5:2b:f7:60:2e:7d:19:d4:
97:ef:e9:74:98:a6:7b:f9:da:80:4d:55:05:2c:52:
67:a2:60:56:c3:82:1f:03:f1:22:7a:96:f1:4c:53:
3f:47:dc:eb:bf:b4:ce:ec:9c:66:fe:17:b0:7b:a9:
af:4f:bd:15:2a:5b:38:f0:87:d5:48:eb:56:da:f7:
da:1b:92:5f:fa:e6:ad:19:f6:29:e7:eb:05:f2:82:
ff:c4:eb:92:db:de:77:f4:ec:a2:7b:4a:4c:40:76:
3a:eb:42:ee:fd:98:74:c7:c8:b4:0b:cd:db:3d:14:
aa:64:6b:85:70:15:be:cc:12:4e:8c:5e:83:7c:71:
80:f2:8e:9a:99:5a:88:69:02:77:a0:e1:35:50:d5:
80:e0:75:d8:46:fb:25:fd:f0:67:e7:51:90:74:a9:
8c:0d:ef:87:f0:44:c8:70:99:98:b4:c0:fb:4d:30:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3A:09:AC:DB:37:FB:CF:18:C3:1A:CC:AA:7C:37:D6:0E:DD:C6:2B
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/kToJrNs3-88YwxrMqnw31g7dxis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.251.0/24
IPv6:
2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc2::/48
2a12:5bc3::/48
2a12:5bc4:2::/48
2a12:5bc5::-2a12:5bc6:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc7::/48
Signature Algorithm: sha256WithRSAEncryption
0e:8f:69:06:3b:e1:e0:fe:7d:19:fd:32:13:9b:22:3d:86:3f:
1b:91:76:48:c8:59:af:a6:a6:ab:ef:7b:71:bc:2d:c8:7c:8a:
be:12:a4:16:fd:ac:40:fe:02:fe:40:52:e7:79:47:98:11:d5:
a3:bb:40:7e:e2:45:45:ec:32:c4:a5:be:70:43:8c:ec:93:f7:
6a:9c:e9:9b:10:ac:c3:8d:38:77:ad:80:2d:d6:67:61:01:33:
e1:0d:e1:a1:56:49:af:cf:19:87:2f:ee:df:98:58:2c:79:47:
69:0e:95:a6:05:cf:77:4c:a9:30:97:bc:b2:e1:f4:44:1e:c6:
3f:d7:23:f3:dd:5c:f7:6e:5c:95:bb:5a:cd:e8:d9:3f:51:fb:
7d:ab:22:49:85:09:8f:a5:e8:08:54:55:a3:ea:ab:0c:3e:64:
ad:f0:48:a4:3e:a1:b1:b0:89:4d:92:0d:e0:c4:21:1b:b6:66:
89:9e:8b:7a:8f:46:4f:ca:86:10:d5:83:d8:64:90:64:a9:25:
37:48:71:80:84:d3:51:1d:2d:01:be:9e:5d:62:bc:a2:6e:f8:
8c:81:f1:e0:05:75:c2:53:4c:db:94:c2:58:0e:df:eb:7d:ce:
f2:39:46:39:62:a0:c4:6d:d0:01:8c:58:61:1e:3b:ae:05:6f:
68:42:7d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:59 2026 by rpki-client