Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/_OnMtKa4M3rA_lRdBELxutSV0uo.roa
File: _OnMtKa4M3rA_lRdBELxutSV0uo.roa (raw, json)
Hash identifier: nXl2d7gRZOJK+bXCe9fLKd9xuwgYc8iLGZcegetvThY=
Subject key identifier: FC:E9:CC:B4:A6:B8:33:7A:C0:FE:54:5D:04:42:F1:BA:D4:95:D2:EA
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F5B6C2E81D82BE630986F7D7C31EF5BC2
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/_OnMtKa4M3rA_lRdBELxutSV0uo.roa
Signing time: Mon 13 Jul 2026 12:20:44 +0000
ROA not before: Mon 13 Jul 2026 12:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 192.144.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:6c:2e:81:d8:2b:e6:30:98:6f:7d:7c:31:ef:5b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 13 12:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fce9ccb4a6b8337ac0fe545d0442f1bad495d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:59:90:e4:6a:a5:a3:83:7a:e3:1f:4f:e9:
c9:62:be:5d:ac:10:96:6b:65:65:e6:77:40:6a:b5:
54:75:d3:f0:be:88:a5:fb:04:cb:f4:f0:22:cf:bb:
45:25:92:0e:38:cd:25:3d:eb:94:00:0b:8c:06:77:
d0:26:5b:1b:fe:0f:12:91:95:7c:b8:05:af:72:2c:
c2:bb:34:cb:19:ff:14:70:bf:80:38:b4:53:e9:d0:
80:37:fb:8f:6d:5a:02:66:21:f5:a5:9a:fc:aa:20:
ce:a8:b4:0a:23:7c:69:d0:38:13:2e:a2:ac:9d:09:
41:fe:9e:01:c7:e4:69:ae:5a:4f:d7:07:bb:77:43:
dc:0c:f2:f9:05:a6:66:83:a5:cb:1e:b4:44:76:e8:
1d:ec:28:b3:5b:12:3d:c9:31:8e:c1:36:cd:56:3c:
53:e4:32:19:e6:10:c0:e4:6e:e2:d8:d2:3d:8d:7d:
41:d1:73:7c:1d:bc:42:6c:d0:e3:bd:a9:5e:3f:4b:
ae:72:02:99:cb:d1:3f:71:16:62:fc:87:c2:49:55:
60:61:82:af:65:b5:ca:02:cb:df:da:58:ff:09:4c:
1d:29:2b:b6:40:a1:f7:f3:5b:e6:4c:cd:a9:f0:e0:
9d:38:96:22:7b:df:59:55:1c:09:25:ee:1c:bb:c2:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E9:CC:B4:A6:B8:33:7A:C0:FE:54:5D:04:42:F1:BA:D4:95:D2:EA
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/_OnMtKa4M3rA_lRdBELxutSV0uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ca:3d:7c:7d:dc:a9:a7:ba:df:e7:30:1e:b5:b2:7f:ed:04:
7f:2d:d7:39:6f:74:d7:1c:db:dc:3c:ff:f2:4a:6e:70:7d:1f:
46:3b:ef:ea:94:e3:f4:7a:0d:88:82:75:77:18:05:d4:d0:f6:
1d:9b:8b:c4:ee:f4:a8:19:38:1f:ea:5b:cf:2a:79:1f:35:86:
c6:83:e1:df:a7:04:69:96:33:8e:f4:2d:11:4f:f2:93:7d:d7:
be:93:8d:2d:5c:b6:a1:8c:b2:b2:9b:fa:29:3c:2b:93:05:95:
28:17:82:82:a8:6a:6c:3f:4a:c5:08:b0:26:32:ce:e3:1c:2c:
9d:c5:16:9e:15:bf:25:06:b0:35:42:b0:74:b4:a1:f9:4a:20:
32:fa:aa:a8:36:60:41:e3:fb:b0:47:d3:94:b9:d8:41:18:c2:
14:e4:82:8a:59:d1:cf:9c:ee:4f:97:dd:90:18:a3:eb:61:43:
26:e1:7b:49:ee:2d:64:0c:df:b6:b9:cc:20:49:e9:fe:46:9a:
a8:ae:59:c6:af:f2:06:6e:0e:ea:35:5e:f8:61:29:08:2a:83:
14:73:d5:58:ea:c7:a5:b3:a9:78:e2:bb:d7:5c:42:02:d5:a7:
98:35:e9:ef:07:d5:74:f2:77:b7:47:e2:57:73:58:38:4b:ef:
d2:11:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:26 2026 by rpki-client