Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/051whJcuht8buEuoUwK20hmy5t8.roa
File: 051whJcuht8buEuoUwK20hmy5t8.roa (raw, json)
Hash identifier: xNrVAkSYVARyl4cQpdTNHHdB3ZuAtPb8vVxc4zWq/iY=
Subject key identifier: D3:9D:70:84:97:2E:86:DF:1B:B8:4B:A8:53:02:B6:D2:19:B2:E6:DF
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 01A081B5F31CFBC5601980991B3B0716B0C4
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/051whJcuht8buEuoUwK20hmy5t8.roa
Signing time: Tue 08 Sep 2026 15:49:40 +0000
ROA not before: Tue 08 Sep 2026 15:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48729
IP address blocks: 194.242.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:b5:f3:1c:fb:c5:60:19:80:99:1b:3b:07:16:b0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Sep 8 15:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d39d7084972e86df1bb84ba85302b6d219b2e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:a8:a6:68:15:87:0e:a6:07:3e:1f:68:e3:
2b:fa:c1:d2:8b:a3:a5:4f:b4:67:84:d0:b4:28:20:
cd:bb:6d:12:8b:b5:de:58:6c:d5:15:36:77:b6:21:
70:d7:e1:12:19:81:23:0f:04:32:0c:a0:4f:00:27:
99:1c:28:fe:88:9d:6c:b5:83:2c:79:fd:59:de:58:
ac:f9:64:50:c9:bf:07:1d:81:1f:dc:7f:26:94:f6:
11:cc:e3:f5:47:be:32:20:56:af:02:08:64:dd:3e:
61:8a:9c:b0:b4:8a:77:85:62:a6:ca:f1:a6:32:22:
e7:ec:09:13:cf:80:aa:ff:0a:1a:73:aa:3a:5a:ec:
f0:36:81:a5:17:f4:eb:9d:82:40:95:c4:c0:94:80:
99:39:1a:ee:48:c8:05:4d:03:0a:46:b1:db:fe:1c:
c1:ad:e5:18:67:90:b0:d1:92:30:a1:32:fb:92:75:
e5:53:67:2d:50:f7:80:4c:43:80:19:98:e9:b3:f1:
5b:3c:dd:26:e8:18:aa:d6:40:ca:dd:d0:13:b8:3e:
c9:b5:55:ca:0a:6f:73:c7:43:15:fa:8c:d4:57:0b:
a0:f1:bf:7b:58:e4:7a:16:7a:14:68:cb:6f:cd:5f:
84:5b:48:65:1d:ef:1a:3d:cc:60:38:a1:1e:cc:b5:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9D:70:84:97:2E:86:DF:1B:B8:4B:A8:53:02:B6:D2:19:B2:E6:DF
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/051whJcuht8buEuoUwK20hmy5t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.127.0/24
Signature Algorithm: sha256WithRSAEncryption
79:25:d1:a2:a8:e4:f7:83:90:17:a9:a6:6b:23:f9:9a:da:d0:
87:c6:87:da:7d:ae:4e:3d:aa:66:1b:88:b4:73:56:3f:ce:31:
ae:ae:09:5b:b9:44:6f:9d:16:06:ec:06:f9:a5:88:c0:cf:41:
cc:39:9f:57:ab:cc:16:22:8e:79:9b:70:ef:0d:a2:fe:f5:04:
1d:42:c9:da:fa:fa:fe:a3:5e:f5:d9:6f:f7:91:89:b9:90:25:
9e:1b:9b:a7:8e:8f:c3:81:a6:6a:73:70:d4:d2:72:68:b0:e2:
d4:aa:99:8b:16:10:18:d9:53:3c:bf:f4:f1:97:32:f3:c7:95:
07:44:5f:3c:be:64:db:84:61:9a:c4:e0:e9:54:68:a9:84:11:
c4:1a:68:00:8c:3e:6f:18:e1:c7:27:a1:f6:f9:19:66:33:c1:
12:e3:7f:f0:ad:f2:d7:f8:ff:63:90:4e:70:d6:b0:a2:bf:75:
52:6c:ab:ec:bf:7f:62:d3:c0:c4:d2:ef:55:61:70:05:26:0d:
60:3a:8b:58:ea:12:04:19:f3:02:d5:06:66:8d:86:c0:4f:07:
39:62:05:28:09:4d:b4:03:93:5b:21:33:58:85:08:cc:94:60:
49:d2:d4:85:c9:6c:3e:32:1c:25:8d:fe:7d:e8:9f:b2:4b:c5:
dc:01:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:42:04 2026 by rpki-client