Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/_KOoXuIy-JpSDDCszJO9wC3Bn4o.roa
File: _KOoXuIy-JpSDDCszJO9wC3Bn4o.roa (raw, json)
Hash identifier: ev27sZHARHUebbK4YGLxKKHuyDx3oCAJQZgHXUBVYKk=
Subject key identifier: FC:A3:A8:5E:E2:32:F8:9A:52:0C:30:AC:CC:93:BD:C0:2D:C1:9F:8A
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019FB9FDA61094A5B474FFEB5C6AD8E48BFC
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/_KOoXuIy-JpSDDCszJO9wC3Bn4o.roa
Signing time: Fri 31 Jul 2026 21:03:55 +0000
ROA not before: Fri 31 Jul 2026 21:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219284
IP address blocks: 46.20.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 17:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:fd:a6:10:94:a5:b4:74:ff:eb:5c:6a:d8:e4:8b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jul 31 21:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fca3a85ee232f89a520c30accc93bdc02dc19f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:d5:34:96:b7:48:3d:0f:78:2e:53:3c:f7:
90:48:87:86:97:e0:2a:e2:3a:1e:93:4f:88:7f:2a:
d9:19:32:52:b0:44:28:c3:8d:e6:16:9b:1d:0d:cf:
0b:ea:d1:79:23:bd:20:e3:bc:23:2c:87:af:24:cd:
97:01:0d:5d:34:bc:ec:d4:66:4e:71:53:d7:4d:10:
b7:37:58:43:0c:0c:1f:ae:88:99:e9:b1:a6:79:75:
85:00:93:f7:fd:50:7d:85:d7:09:e4:b4:f2:9b:dd:
8f:ac:e0:26:88:3d:d5:1b:f6:91:43:18:36:89:e1:
4b:75:3b:e5:f5:c8:e0:00:e3:5e:b0:88:ff:4f:0d:
49:a0:93:96:b3:c6:99:48:a4:2c:02:59:1c:96:1e:
27:5b:2f:d9:79:35:b9:0b:66:16:ff:8b:c1:53:9d:
69:9d:84:0b:db:8e:87:16:2e:6d:ed:ff:e5:2c:54:
7f:fd:6c:03:4c:d2:69:e0:83:de:60:4f:96:99:35:
87:52:63:6d:f1:b7:2e:85:b4:2f:19:c0:e7:06:7e:
51:58:19:da:fb:f9:e3:2f:4d:39:b4:25:3e:82:6f:
0e:84:16:81:fa:ca:1a:2d:2a:dc:9f:b6:ac:eb:da:
6b:67:cd:27:c6:23:22:60:d8:49:1e:b8:9b:52:71:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A3:A8:5E:E2:32:F8:9A:52:0C:30:AC:CC:93:BD:C0:2D:C1:9F:8A
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/_KOoXuIy-JpSDDCszJO9wC3Bn4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.105.0/24
Signature Algorithm: sha256WithRSAEncryption
66:48:85:1c:5a:66:fb:1a:2d:b2:a5:41:7c:5d:43:d0:9c:72:
ae:2b:9a:46:92:9b:3f:31:35:90:0e:57:91:20:5e:33:d2:f6:
11:80:da:4d:44:f7:d8:c1:cb:93:9a:ee:f1:32:cc:1d:dd:41:
5d:6d:cc:0b:40:e5:c9:53:1e:78:38:d6:16:5e:88:bb:9e:95:
5f:a6:76:0f:ff:3e:95:c3:19:f2:bd:06:e7:1f:09:ab:3f:39:
e9:9d:60:1e:80:44:a5:2d:a2:dc:87:01:53:25:89:18:eb:95:
41:c1:95:af:85:23:23:a9:e8:ef:43:9a:c8:69:ea:e2:01:9f:
3f:f8:7b:fb:db:ac:f6:3d:a6:67:c3:0a:eb:9d:ed:71:b3:49:
34:ed:12:eb:f3:4b:01:22:fd:6b:ee:4b:af:29:a2:c3:4a:9e:
4c:25:8f:e3:ef:c2:d2:19:b7:c6:e7:0a:65:9e:93:1c:16:81:
c1:38:af:bf:bf:38:be:a1:e3:67:90:27:57:f5:7c:dd:71:b9:
2f:51:ec:94:53:5a:6c:e5:4a:90:6b:f6:a2:1d:0a:c9:58:df:
aa:3d:39:bd:17:a5:09:73:96:ab:3b:e0:59:21:ce:f7:31:7e:
1d:23:2e:71:a9:50:80:51:84:48:00:41:b2:c7:44:b6:51:0f:
12:f1:41:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 02:12:41 2026 by rpki-client