Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rmysuEOnJ_ski7g34iy5TwVcnjk.roa
File: rmysuEOnJ_ski7g34iy5TwVcnjk.roa (raw, json)
Hash identifier: tC1jrL9JsOL/vT4quWjc3cAFtCXbvog/hpWVqp5x/bI=
Subject key identifier: AE:6C:AC:B8:43:A7:27:FB:24:8B:B8:37:E2:2C:B9:4F:05:5C:9E:39
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A05C87B7C8DC55AAF6631C7D49629C2CB0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rmysuEOnJ_ski7g34iy5TwVcnjk.roa
Signing time: Tue 01 Sep 2026 10:33:13 +0000
ROA not before: Tue 01 Sep 2026 10:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 82.197.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:87:b7:c8:dc:55:aa:f6:63:1c:7d:49:62:9c:2c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 1 10:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae6cacb843a727fb248bb837e22cb94f055c9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:a5:1e:4f:8a:0e:7e:17:c1:a3:37:17:18:
53:4d:14:43:d4:22:d1:31:32:a5:5e:d5:c3:b2:34:
e7:88:5f:d0:d1:b4:2e:cd:3b:e5:2f:b2:ef:08:b5:
b3:f2:ac:2f:1c:62:69:74:14:35:6a:dc:93:12:9f:
e7:d5:eb:d3:57:18:1d:61:52:ea:b2:30:e7:74:3a:
3f:1f:4d:f1:fc:7b:44:cb:22:25:56:4c:b8:b2:b0:
e3:a1:66:02:bc:e1:51:5a:3c:a4:b2:df:a3:1c:a8:
f3:72:ed:9c:0d:3e:8c:c3:a5:51:ec:16:7e:7b:58:
b9:27:b9:bc:dc:37:16:4e:5b:70:6d:55:19:d8:c5:
97:2f:b1:5b:78:0e:5b:4a:94:40:2b:66:25:5f:2e:
59:0d:8d:fd:3e:0a:2a:5c:35:a4:9b:cc:3d:35:3d:
6b:07:fe:5d:4c:11:f0:e0:8a:e7:16:d8:3d:d0:fb:
ba:1d:06:6f:64:8b:fe:89:73:45:59:09:47:b9:64:
08:c3:cb:44:b0:88:10:b1:54:21:f8:42:3d:84:cf:
1b:3b:c7:57:45:c9:13:5e:51:d4:21:10:4a:80:54:
f4:e5:2b:e8:41:d0:6d:05:9b:ad:ec:f7:f8:bc:98:
39:05:12:6f:76:5a:fc:0a:1d:4a:b7:8c:74:c8:b6:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6C:AC:B8:43:A7:27:FB:24:8B:B8:37:E2:2C:B9:4F:05:5C:9E:39
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rmysuEOnJ_ski7g34iy5TwVcnjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.201.0/24
Signature Algorithm: sha256WithRSAEncryption
41:99:60:3d:e5:06:b5:fc:ea:39:e0:09:1a:6b:3a:0b:b0:d0:
88:df:17:1f:c6:10:94:5e:a6:08:78:0f:d5:ca:a1:96:ef:93:
2b:40:98:0d:3c:9e:3e:68:bb:4f:66:81:4b:0c:a4:77:f8:4e:
f3:2c:1d:bb:1c:b4:59:98:78:88:c4:13:cb:6c:f6:47:66:87:
05:d3:12:3d:00:16:7e:de:ac:f8:2a:5a:d5:13:64:f6:00:e7:
50:9f:88:b7:07:94:1f:7d:ab:b4:3c:4e:b6:21:3a:7a:f9:6b:
a9:54:7a:ec:dd:44:76:32:ae:c3:57:12:a5:34:e1:59:32:ca:
3d:01:1d:f3:f7:31:f0:e4:78:87:d3:82:60:34:de:51:2a:c9:
1b:02:28:2a:d6:cd:97:60:cb:6d:15:2a:f4:12:7e:80:e4:bc:
6b:52:0c:c0:88:ed:56:48:31:97:e3:7e:a0:7d:4d:b9:b1:a9:
b0:39:e5:26:10:13:9a:d8:3d:d1:0b:00:19:dc:b1:03:63:f8:
9e:f6:57:45:16:82:d8:13:36:ca:fb:e5:56:a8:f1:bd:62:4a:
3c:1c:ca:30:6d:71:aa:5b:d3:53:23:33:5e:43:61:d9:ce:11:
1c:87:ac:0c:43:c7:62:ef:d3:ec:39:0f:29:5e:c2:2a:a9:31:
f2:99:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:15:43 2026 by rpki-client