Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/KhkSS7SsuPahDMyQ6p0fpBlg65U.roa
File: KhkSS7SsuPahDMyQ6p0fpBlg65U.roa (raw, json)
Hash identifier: 0trZB/QVKU0LWD92RiD0AbJlBwU0A/bvATUQLsilyoU=
Subject key identifier: 2A:19:12:4B:B4:AC:B8:F6:A1:0C:CC:90:EA:9D:1F:A4:19:60:EB:95
Certificate issuer: /CN=274232efb2062dd5347037cac80884bc822cdcea
Certificate serial: 01A158AE356C0AE773EF16E8F327600EC33F
Authority key identifier: 27:42:32:EF:B2:06:2D:D5:34:70:37:CA:C8:08:84:BC:82:2C:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/KhkSS7SsuPahDMyQ6p0fpBlg65U.roa
Signing time: Tue 20 Oct 2026 09:39:34 +0000
ROA not before: Tue 20 Oct 2026 09:39:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31115
IP address blocks: 185.198.96.0/22 maxlen: 24
193.104.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:ae:35:6c:0a:e7:73:ef:16:e8:f3:27:60:0e:c3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274232efb2062dd5347037cac80884bc822cdcea
Validity
Not Before: Oct 20 09:39:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a19124bb4acb8f6a10ccc90ea9d1fa41960eb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:3e:6b:63:bc:70:1f:12:da:fb:f7:f4:aa:
b5:5e:95:18:80:9d:e1:4d:35:3b:a4:43:ab:77:ff:
ab:d6:83:8f:17:fa:64:de:c3:c8:1e:e0:34:27:df:
e6:65:36:67:2e:1a:3d:76:2b:49:f8:86:e0:4d:9f:
40:50:13:94:8a:a2:df:36:06:18:7c:25:ef:90:76:
88:a7:af:d1:1f:fd:54:95:7e:75:ac:de:49:cc:31:
48:db:ce:8a:33:ee:b9:e2:c2:d1:3c:67:15:96:43:
0e:b8:95:35:96:53:76:d2:19:df:2b:a5:2b:61:00:
dc:dd:f0:86:54:41:49:7a:11:12:69:aa:b2:4d:25:
82:60:a8:49:df:a5:89:44:fd:2c:e8:60:8f:fc:c6:
c0:e5:d2:4f:82:5f:7f:b6:7d:cd:0f:4f:55:d2:62:
1e:bd:06:c1:2b:33:10:68:e4:21:4d:f0:1e:59:ea:
41:7d:2d:c4:4b:34:cb:bf:b1:89:5a:d1:83:3a:d6:
c7:d1:85:2b:9c:86:3a:27:8c:57:71:ae:cd:b9:f8:
b7:13:f2:59:89:8e:ac:33:64:d9:ff:80:8e:b8:73:
a9:26:bb:3b:b6:9f:68:d3:6b:a7:93:a2:ad:3e:fe:
1b:ac:7a:4f:73:f5:df:61:1f:d3:7f:7b:b4:ab:88:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:19:12:4B:B4:AC:B8:F6:A1:0C:CC:90:EA:9D:1F:A4:19:60:EB:95
X509v3 Authority Key Identifier:
keyid:27:42:32:EF:B2:06:2D:D5:34:70:37:CA:C8:08:84:BC:82:2C:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/KhkSS7SsuPahDMyQ6p0fpBlg65U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.96.0/22
193.104.86.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:4e:37:28:5f:37:7f:de:47:ad:4a:5b:7e:89:e9:c8:b6:9a:
85:44:42:aa:a3:f1:4c:ef:8d:32:00:11:e2:6f:5f:f0:49:27:
41:6f:29:05:31:5f:c1:58:a8:be:02:d3:5c:01:52:0e:72:e9:
7b:b5:05:09:c6:f3:22:36:19:22:90:d4:44:75:ff:bd:ae:92:
bc:da:ed:ba:57:6a:4d:88:9f:6b:42:9e:52:67:03:f0:ee:c6:
89:da:4c:56:d2:09:f3:eb:83:6d:78:0f:6a:3c:81:33:24:77:
6e:48:c4:cf:fc:46:4a:54:3d:7b:59:04:4c:33:5a:20:67:e4:
82:c9:2e:a1:7f:38:76:e3:a6:b9:06:a3:bb:31:8e:31:0f:1c:
89:cb:2b:cc:c6:74:cb:00:08:36:21:ea:b5:a0:06:e3:ed:17:
e4:37:ca:de:96:34:09:78:c9:df:79:89:d7:a2:98:83:f1:80:
50:b2:a0:4f:f3:58:2b:1a:95:63:04:be:2b:f6:20:7c:d3:9e:
ea:33:36:f9:2d:20:ae:65:39:5d:88:12:37:2b:6d:a2:34:42:
68:bb:30:77:dc:ba:17:38:5b:5c:b0:d9:15:45:35:cd:cf:90:
b5:9a:16:5a:cc:a2:4a:6e:48:66:02:27:1f:6e:be:ef:e8:f7:
1f:6c:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:28 2026 by rpki-client