Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/kU9m1uPjHdJQHAzM0B_yWGwKV1I.roa
File: kU9m1uPjHdJQHAzM0B_yWGwKV1I.roa (raw, json)
Hash identifier: EGiJgt8VQ5zXvij7hsGtCwmd303roJS29ZZoHAGWNvE=
Subject key identifier: 91:4F:66:D6:E3:E3:1D:D2:50:1C:0C:CC:D0:1F:F2:58:6C:0A:57:52
Certificate issuer: /CN=794838864d6805162693bdf249f3b8ac31f680bd
Certificate serial: 01A0251C02330630D9D6900B8E88A1FCA640
Authority key identifier: 79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/kU9m1uPjHdJQHAzM0B_yWGwKV1I.roa
Signing time: Fri 21 Aug 2026 16:16:27 +0000
ROA not before: Fri 21 Aug 2026 16:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136557
IP address blocks: 201.78.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:1c:02:33:06:30:d9:d6:90:0b:8e:88:a1:fc:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794838864d6805162693bdf249f3b8ac31f680bd
Validity
Not Before: Aug 21 16:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=914f66d6e3e31dd2501c0cccd01ff2586c0a5752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:c0:a4:e9:a5:4f:0c:01:65:aa:64:df:f5:
2a:ed:fa:95:24:8e:9c:27:20:8a:36:f5:ad:73:89:
01:53:e2:b2:d5:25:90:99:a9:5b:bf:e1:7b:00:56:
20:7e:f2:3b:38:b5:34:ac:a7:dc:6d:57:20:83:29:
bd:0c:6b:67:60:fa:c5:62:1a:cc:0d:bb:5b:89:35:
15:55:7c:3c:67:fb:c0:53:fa:7d:40:87:c8:9c:4b:
65:d4:82:41:00:d5:06:71:b1:8e:08:54:77:4e:e5:
42:13:3a:27:62:98:30:04:92:c7:1c:de:1a:f0:b6:
a3:1f:b3:db:c2:b1:73:a9:be:90:f2:9a:6f:5f:4f:
23:8b:48:0e:e8:79:b5:32:a2:dd:b8:98:b2:10:61:
5b:2a:c0:47:67:9c:a3:be:c2:af:a3:b4:38:b2:b9:
bc:41:4d:75:3a:69:6b:82:e4:71:a6:45:04:85:90:
92:4b:a5:e1:93:66:21:fe:b7:9c:81:82:63:df:5b:
b9:50:ab:b0:27:d2:a7:6c:e5:55:69:e9:d8:d0:a9:
09:10:fc:81:73:6a:26:6e:9c:79:d4:61:8c:9a:12:
ea:40:85:21:14:1a:6e:fc:0f:eb:f1:d4:f4:46:46:
85:81:d9:e0:d5:2d:26:29:0a:06:7b:6b:64:85:33:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4F:66:D6:E3:E3:1D:D2:50:1C:0C:CC:D0:1F:F2:58:6C:0A:57:52
X509v3 Authority Key Identifier:
keyid:79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/kU9m1uPjHdJQHAzM0B_yWGwKV1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.78.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a9:10:b3:56:90:59:11:8f:00:73:d0:51:3c:fa:94:29:20:
bd:33:91:bc:b3:34:56:ea:db:72:67:ab:04:ed:7f:11:a1:3a:
84:f7:74:e0:40:30:34:5a:77:3a:fb:2b:bf:27:a0:82:1d:3b:
b1:c6:88:1a:2c:20:11:43:a2:e0:c6:07:e7:73:6a:6b:2e:b0:
b0:78:0f:f9:c0:eb:ce:82:63:13:81:1a:e0:c2:6e:2b:b1:25:
ed:1b:e6:ea:4e:96:98:8c:7c:9d:c6:98:12:f0:db:a9:2a:ba:
df:73:98:fc:e9:79:24:c4:b7:75:8c:0a:e1:74:1d:36:45:85:
0c:20:ba:3a:96:86:72:b0:a4:d2:32:19:bf:95:2b:f1:25:ea:
24:c4:04:f0:ee:fe:ec:a7:a6:6d:ae:2b:b0:d1:42:82:04:df:
71:4a:fc:e0:ec:d2:72:43:db:09:64:57:5f:b8:47:0e:ce:de:
72:54:27:c1:87:dc:5f:c8:9d:78:ef:6e:e3:ce:f1:51:e0:e0:
5b:58:74:6b:64:d1:65:c3:d1:ae:42:b7:a0:c8:3e:44:44:58:
e3:89:4b:42:d3:d2:e6:1f:8f:6e:ab:9e:7b:49:09:a0:43:ce:
8a:29:22:15:21:8b:47:b8:aa:45:b8:81:cf:00:47:a5:45:90:
44:1d:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:03 2026 by rpki-client