Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KjcyZqBRs-oN5PdCZNjkqgRRPx4.roa
File: KjcyZqBRs-oN5PdCZNjkqgRRPx4.roa (raw, json)
Hash identifier: Fn0hY62EWBWO5TRY3JHMqxXLCZBkebfoCAGcdzBkljg=
Subject key identifier: 2A:37:32:66:A0:51:B3:EA:0D:E4:F7:42:64:D8:E4:AA:04:51:3F:1E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789185EF2B0683D8B8AF2FD445F2D3DB
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KjcyZqBRs-oN5PdCZNjkqgRRPx4.roa
Signing time: Mon 26 Oct 2026 14:16:05 +0000
ROA not before: Mon 26 Oct 2026 14:16:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203796
IP address blocks: 141.98.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:91:85:ef:2b:06:83:d8:b8:af:2f:d4:45:f2:d3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:16:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a373266a051b3ea0de4f74264d8e4aa04513f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:53:bd:eb:4f:d4:ea:e2:23:ab:fc:29:f8:
3b:1f:21:b5:a3:60:9b:12:49:53:20:50:e7:3e:f6:
e5:27:4a:5a:29:1b:16:2c:52:b6:4e:f1:1f:03:13:
da:7d:db:04:c0:34:2e:01:0d:47:42:b6:ad:b9:c0:
ce:b2:6c:cc:50:57:e1:75:d1:11:5d:a1:33:8d:74:
b1:bb:f5:98:80:88:fb:0e:df:60:0a:35:d5:d2:9a:
5e:b1:4a:d3:fd:79:86:30:35:26:68:e9:6e:2d:05:
de:3b:ff:b0:e7:ac:e3:22:32:b7:69:f7:01:9b:c4:
88:6a:93:60:73:31:04:b5:f0:a2:97:0c:b7:c1:12:
82:54:4f:c7:fb:07:13:21:e3:a1:36:85:a5:13:4f:
fc:44:c2:51:78:56:8c:fc:95:e5:26:07:5f:71:5e:
d8:eb:73:e6:ff:3d:4f:26:fb:dd:ae:ed:76:4a:5a:
8b:44:da:9a:0f:a9:76:01:b0:33:01:89:2d:c7:83:
9c:f9:c8:d6:f9:65:e0:14:c6:78:0d:03:29:d3:04:
de:3f:a4:dd:ca:15:3e:2b:a7:a3:d2:f0:73:ab:87:
a8:ee:fe:52:b3:aa:91:77:2f:a4:da:a9:56:53:b2:
e0:db:40:65:cc:4b:2b:2e:da:01:d5:bb:e1:d4:a4:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:37:32:66:A0:51:B3:EA:0D:E4:F7:42:64:D8:E4:AA:04:51:3F:1E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KjcyZqBRs-oN5PdCZNjkqgRRPx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5e:cb:af:ff:e0:e1:f3:68:cf:5b:6e:f3:ed:c1:78:2f:48:
06:5d:bd:5c:01:10:8f:f1:13:d0:82:3a:d6:ab:5c:a7:c9:81:
fd:f1:ef:00:06:80:cd:4c:17:35:e8:a7:94:4a:23:aa:dd:06:
e0:53:93:40:27:e6:82:c7:a7:dd:f9:f4:72:a9:be:2e:cb:cb:
99:96:2a:74:c3:91:fe:d4:f5:2e:8e:c9:0e:ce:40:20:f6:4d:
50:47:6e:c3:24:6f:bf:be:d0:b9:42:4f:73:36:a3:28:ab:58:
5b:59:80:0b:14:be:cd:cf:78:00:f6:df:1a:50:7d:08:c2:1d:
cc:31:44:15:e6:8e:40:67:5b:d8:f3:42:b4:e4:36:59:f8:1f:
be:c6:71:b8:97:37:23:30:fa:b9:58:74:7a:6b:5b:67:ed:7c:
3f:88:3c:2d:2c:3a:20:07:c1:2a:2d:97:c4:6b:5f:0c:1e:cb:
f9:ee:db:47:f4:52:e1:f4:37:37:16:24:11:00:8e:10:28:b6:
7b:c8:b2:a4:d4:cf:31:96:41:0f:c8:6f:ee:d0:9c:76:3f:77:
5c:df:00:9a:b3:2c:c4:0d:e1:21:75:33:5a:35:2f:e4:1b:0e:
21:e4:d2:d1:f9:4f:50:95:50:e8:a4:59:75:5c:a0:43:77:df:
46:30:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:43 2026 by rpki-client