Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/Krz6hVFxqFgsNPyr2dbpuBo4uJY.roa
File: Krz6hVFxqFgsNPyr2dbpuBo4uJY.roa (raw, json)
Hash identifier: T29vDO/mciNR8VKJe759tO1ECzxEqaKEfFJO65KDSPs=
Subject key identifier: 2A:BC:FA:85:51:71:A8:58:2C:34:FC:AB:D9:D6:E9:B8:1A:38:B8:96
Certificate issuer: /CN=f93948d71efd855791b09abf3f6f70689ac3a84d
Certificate serial: 01A0E6B4E7D4C96F63C41A9CD1682755409C
Authority key identifier: F9:39:48:D7:1E:FD:85:57:91:B0:9A:BF:3F:6F:70:68:9A:C3:A8:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TlI1x79hVeRsJq_P29waJrDqE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/Krz6hVFxqFgsNPyr2dbpuBo4uJY.roa
Signing time: Mon 28 Sep 2026 06:30:10 +0000
ROA not before: Mon 28 Sep 2026 06:30:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15694
IP address blocks: 193.109.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/1-TlI1x79hVeRsJq_P29waJrDqE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/1-TlI1x79hVeRsJq_P29waJrDqE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TlI1x79hVeRsJq_P29waJrDqE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b4:e7:d4:c9:6f:63:c4:1a:9c:d1:68:27:55:40:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93948d71efd855791b09abf3f6f70689ac3a84d
Validity
Not Before: Sep 28 06:30:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2abcfa855171a8582c34fcabd9d6e9b81a38b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:c8:c3:f6:1f:d7:a1:4a:9d:3b:03:2d:83:
b4:13:e5:d5:e5:b7:56:77:9c:5b:b3:6e:51:00:ce:
9a:c3:dd:19:e6:44:0c:02:5d:7b:7f:46:d4:c6:e0:
6e:81:f4:dd:37:27:56:a7:7a:1a:57:4e:b8:51:ca:
00:0a:1c:08:ed:83:3e:f2:68:57:2a:7b:3b:fd:e2:
8d:e4:72:43:01:b6:75:f9:f0:95:17:c3:2d:ee:d2:
26:6b:7a:ce:f2:c9:e1:97:db:44:a6:c0:d4:69:1a:
cc:67:f3:be:b2:30:69:ae:d8:87:e4:e8:55:ad:f6:
96:c5:7c:29:44:c8:04:44:56:57:25:6e:10:5e:1d:
a1:b6:cb:ad:0e:00:20:57:0f:a0:e7:da:0f:58:c4:
3b:0f:3d:3d:f2:8d:e6:1d:fd:b8:d9:18:dc:ba:6e:
36:20:fb:6e:14:ba:52:6b:1d:ea:db:09:68:7b:b2:
57:88:bb:d9:9d:45:82:5c:1d:73:19:11:5d:2c:5a:
b8:9d:c0:b6:cd:a6:47:18:de:5b:3b:d5:5c:f7:e6:
75:2e:4e:6c:af:12:ca:e8:b3:ef:d1:5e:4a:ac:2c:
30:51:a7:4e:34:7f:70:02:75:7d:e9:1d:c8:f2:d5:
72:58:e1:2c:f1:3b:9c:c4:63:83:00:6d:27:a2:38:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BC:FA:85:51:71:A8:58:2C:34:FC:AB:D9:D6:E9:B8:1A:38:B8:96
X509v3 Authority Key Identifier:
keyid:F9:39:48:D7:1E:FD:85:57:91:B0:9A:BF:3F:6F:70:68:9A:C3:A8:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TlI1x79hVeRsJq_P29waJrDqE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/Krz6hVFxqFgsNPyr2dbpuBo4uJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/1-TlI1x79hVeRsJq_P29waJrDqE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.123.0/24
Signature Algorithm: sha256WithRSAEncryption
75:89:2d:17:c4:ad:23:c7:88:77:50:08:55:18:22:ee:ad:09:
e4:3a:48:5a:35:f8:11:dd:a1:99:e4:78:50:0c:11:90:81:3e:
c6:d3:80:8a:5e:7b:e5:1f:8c:c3:44:b0:d4:63:35:2c:56:5f:
7a:28:8d:6f:e0:b1:f0:0f:49:2c:cb:cf:28:f2:66:b4:9c:79:
47:97:1f:c6:ab:b0:43:82:ee:86:6f:62:a5:ef:aa:1e:f1:e0:
81:e4:21:50:fd:c3:a6:c4:29:5a:5e:f8:5b:af:73:80:dc:9c:
2c:84:a2:40:7b:e4:3e:7c:52:7c:db:2a:1c:7c:c5:d9:51:10:
92:1e:6b:8e:65:e0:a4:3b:6d:a8:39:76:81:a1:56:d3:7d:67:
18:d2:fe:f9:ee:1f:f3:0e:c9:d5:bb:c0:8f:01:f3:a5:3e:d5:
bd:03:a6:bf:75:98:0b:89:2b:ae:f9:92:ec:14:53:59:46:ef:
d3:9c:1f:40:d7:ab:b8:f0:49:2c:7c:ec:9d:c7:0b:2c:1b:e0:
6b:1e:6c:fc:9e:3e:47:61:0d:44:19:87:7d:46:47:e6:76:e0:
71:fd:65:76:79:a5:97:57:23:51:24:a5:a0:96:d0:de:13:ad:
b8:f3:85:48:64:e0:21:7b:6a:95:bb:90:36:93:79:ff:ab:01:
21:62:83:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:31:41 2026 by rpki-client