Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KrJ9atQ55Xcc_M6osKEmIQnWvAM.roa
File: KrJ9atQ55Xcc_M6osKEmIQnWvAM.roa (raw, json)
Hash identifier: Mf0UmwU6IJTnSTC9y8ePh7ucpvgSo3TyDCf+fnNMBWk=
Subject key identifier: 2A:B2:7D:6A:D4:39:E5:77:1C:FC:CE:A8:B0:A1:26:21:09:D6:BC:03
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A16326289CBAAEA7D10F20132FC4A08BD8
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KrJ9atQ55Xcc_M6osKEmIQnWvAM.roa
Signing time: Thu 22 Oct 2026 10:26:47 +0000
ROA not before: Thu 22 Oct 2026 10:26:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204876
IP address blocks: 194.62.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:26:28:9c:ba:ae:a7:d1:0f:20:13:2f:c4:a0:8b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:26:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ab27d6ad439e5771cfccea8b0a1262109d6bc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:cc:cb:43:54:6f:f6:8b:31:8b:4a:d7:10:
1e:e2:2c:a8:09:9d:86:6e:ef:27:2a:c0:28:83:23:
48:58:84:e9:1e:48:51:f6:cd:83:54:a2:61:13:a1:
19:4c:7f:14:1d:38:10:98:55:ab:89:25:c0:9e:7a:
ba:95:8d:46:e5:cd:70:74:46:bc:84:31:7c:04:61:
3d:42:0e:8a:b0:09:ed:a8:5f:57:17:61:20:93:97:
23:c5:96:99:95:96:67:80:7c:3d:65:e1:03:aa:0c:
2b:89:0e:7a:85:18:c2:bd:b7:10:51:7c:7c:94:25:
88:5b:0d:1a:04:a6:5b:77:b6:9b:28:12:77:22:d0:
36:62:99:d9:1a:ab:9d:28:8b:4b:e7:99:b7:8b:ea:
af:93:00:6a:37:e9:cf:66:b3:cf:54:2c:0d:79:fc:
22:c4:ee:5e:31:54:ff:41:39:da:04:2c:9e:8f:21:
05:e7:f4:48:6a:3c:45:0d:4d:15:de:35:f3:b4:92:
b4:79:50:c7:e2:57:ca:1f:f5:6c:0e:5f:16:bb:a5:
ec:8d:c3:4f:00:35:b9:c6:c6:38:84:fb:e7:a3:b1:
93:bb:11:a1:42:d4:a3:64:7f:b3:dd:55:c3:7d:3e:
3b:16:00:0f:0d:6d:1a:0e:00:49:40:3d:68:cc:74:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B2:7D:6A:D4:39:E5:77:1C:FC:CE:A8:B0:A1:26:21:09:D6:BC:03
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KrJ9atQ55Xcc_M6osKEmIQnWvAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fe:4b:7e:64:ad:0a:ef:ce:e0:63:07:e4:77:e6:d0:ef:ea:
7b:a6:bf:8c:0a:c2:54:05:55:90:52:8f:13:e8:67:99:58:a0:
ba:a4:19:1b:fe:1f:92:5e:85:7f:e4:ce:38:f5:f8:cd:ed:a2:
12:10:af:fa:27:e9:cb:80:0c:29:42:89:20:6f:ea:a0:1d:9f:
05:00:5c:dd:e8:21:33:0b:1a:56:51:b9:e8:96:d6:a5:0e:61:
55:c0:12:f7:21:13:93:52:ad:78:1e:5f:58:bb:b0:eb:18:3a:
34:1b:fc:1a:77:d9:8b:80:a9:64:dc:06:aa:a9:c8:26:50:09:
05:10:5b:54:04:64:03:98:b8:3f:b1:cd:2b:46:e4:11:b2:f4:
36:9f:be:45:f9:e1:6e:d2:02:e8:86:09:44:1e:3a:f8:05:83:
73:93:a9:1d:4f:02:2e:6b:c2:e3:b1:16:92:9f:3f:8b:05:58:
ea:46:57:f9:b4:ad:50:77:bc:6a:94:1d:91:a5:1b:3c:6e:ed:
be:58:80:2f:1c:11:ba:ab:72:24:f8:23:3d:9d:01:06:5c:3e:
aa:49:73:59:e7:4d:8e:65:44:69:81:67:bd:e5:f2:4c:5d:cb:
50:f8:55:44:cb:5b:ff:d9:18:92:f7:cf:32:cd:30:34:e8:83:
a5:72:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 10:12:36 2026 by rpki-client