Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/KUQ37WUQpgcgW1CwF5KIxm-P6nQ.roa
File: KUQ37WUQpgcgW1CwF5KIxm-P6nQ.roa (raw, json)
Hash identifier: JjRYuN2C9e3FmXgd3rawWlPycaonaETk3PcTtb+dDKY=
Subject key identifier: 29:44:37:ED:65:10:A6:07:20:5B:50:B0:17:92:88:C6:6F:8F:EA:74
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A0E7E846A658643301AE8ED286674B7140
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/KUQ37WUQpgcgW1CwF5KIxm-P6nQ.roa
Signing time: Mon 28 Sep 2026 12:05:54 +0000
ROA not before: Mon 28 Sep 2026 12:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6260
IP address blocks: 168.199.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:46:a6:58:64:33:01:ae:8e:d2:86:67:4b:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Sep 28 12:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=294437ed6510a607205b50b0179288c66f8fea74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:08:4a:6e:b6:81:23:93:60:02:18:52:4d:
0a:38:4c:c2:22:2f:fb:4c:d8:c6:36:ec:42:33:a5:
56:ee:e0:50:d4:b3:95:bc:6d:99:7f:58:75:01:1d:
18:0a:6f:c4:ff:b4:1c:36:76:44:e1:07:6e:e9:2b:
20:0d:62:90:9b:ed:ed:69:7a:15:42:03:0a:8b:15:
c2:a9:dd:9c:df:cb:1d:f2:5c:6c:af:7a:f2:f5:d6:
2a:8e:c8:ef:b7:59:a5:b1:7e:8e:53:1f:11:e9:06:
64:1a:8b:a7:bd:84:f8:cf:d5:b8:fa:37:6f:00:f2:
dd:a2:7a:24:68:f8:09:ac:70:ec:c9:92:ed:ff:10:
7e:25:37:07:2b:c3:fa:6f:af:d0:ac:12:03:94:04:
dc:fb:39:fc:6d:d4:08:01:d1:68:04:d0:b5:c9:e4:
13:99:d3:31:bd:57:67:7c:aa:33:62:32:0f:a4:13:
ef:9b:95:87:c8:0e:1d:e4:0a:2e:36:d1:41:81:9b:
bb:bd:77:e6:2c:c7:e5:b4:6f:58:38:00:52:99:b2:
6a:04:cc:32:7f:c2:85:73:41:94:65:eb:44:e1:64:
df:fe:1e:30:96:ae:89:64:d2:ea:b9:fb:14:dd:64:
e1:7a:a2:11:95:bb:16:1a:17:2b:c6:ab:df:db:7c:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:44:37:ED:65:10:A6:07:20:5B:50:B0:17:92:88:C6:6F:8F:EA:74
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/KUQ37WUQpgcgW1CwF5KIxm-P6nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4f:0c:57:63:fa:9f:3d:28:2e:80:9a:64:32:9f:49:f6:b0:
46:df:aa:b8:56:05:08:ac:b9:91:29:f1:8c:82:7f:07:ac:15:
ec:25:d2:c8:18:5f:18:a2:4e:15:a3:dd:b2:1e:c9:b5:ad:89:
70:eb:b2:25:91:a8:3a:b5:86:6f:67:84:42:71:a6:a0:cd:84:
33:a7:54:23:08:84:0b:f7:f5:33:b3:60:1d:33:f8:83:e1:8c:
cd:d4:1a:2f:69:e1:92:49:1c:25:b7:ed:4f:3d:fe:be:6c:e5:
80:52:8b:0b:53:47:ae:1d:96:66:58:7b:c0:27:91:2e:5f:19:
5f:08:de:b8:ee:7c:ac:76:ee:2d:5a:be:b7:25:ac:0e:19:85:
a1:f7:c4:9e:ff:13:3c:4a:6a:1d:5d:35:31:50:78:b0:51:78:
ca:88:ec:d6:1b:3e:c1:86:4d:1c:6e:aa:6f:a2:0d:0f:05:1e:
7e:c0:c4:58:ec:b3:a7:06:44:b7:36:88:06:43:1b:92:ea:38:
22:ff:ed:69:ed:12:85:0e:68:b0:bf:78:4e:45:23:68:93:49:
c5:f0:3d:bc:34:e6:74:b6:4f:c5:e2:64:74:ef:97:ea:11:37:
e6:ed:f9:09:32:22:96:79:66:8b:f2:bf:a1:7c:d7:86:94:63:
fa:81:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:23:53 2026 by rpki-client