Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kUQdwWr72uIoZ1QTCTfP1bmIM3o.roa
File: kUQdwWr72uIoZ1QTCTfP1bmIM3o.roa (raw, json)
Hash identifier: G4x27X3jwxwxfWz9A+Ix1AWKFbh78N8wR//LYpdq8yA=
Subject key identifier: 91:44:1D:C1:6A:FB:DA:E2:28:67:54:13:09:37:CF:D5:B9:88:33:7A
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A17897049272CEBA86184C7C27FC6DE7F0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kUQdwWr72uIoZ1QTCTfP1bmIM3o.roa
Signing time: Mon 26 Oct 2026 14:22:05 +0000
ROA not before: Mon 26 Oct 2026 14:22:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57397
IP address blocks: 185.231.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:97:04:92:72:ce:ba:86:18:4c:7c:27:fc:6d:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:22:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91441dc16afbdae2286754130937cfd5b988337a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:df:fa:7b:dd:fa:f4:97:5b:10:e9:01:d6:
91:59:b8:36:6d:2b:da:cb:00:df:42:f4:da:ff:f1:
d6:0e:13:88:ca:f1:fa:27:72:bc:29:79:35:2a:de:
58:69:82:96:d6:a2:02:e8:3b:6d:95:64:8a:7b:ea:
fd:0c:ef:7a:4f:3d:8c:fa:ff:23:9b:11:01:23:ff:
3b:24:62:18:4e:cb:62:81:9e:58:0c:7c:c3:42:4f:
87:49:55:d1:7f:c2:9a:16:28:78:b8:f1:d2:87:b7:
29:00:48:65:94:c0:a5:fa:0f:c4:81:06:e9:3c:1b:
1a:d0:ac:13:a7:2e:74:c3:c4:3b:62:89:d7:87:18:
a4:9a:fa:0d:54:06:08:25:3f:2c:e4:0e:c0:d3:3d:
1c:9e:b4:57:77:cf:ff:c7:28:1b:0c:02:ee:a8:5d:
71:42:a2:c6:31:66:47:88:15:4d:44:18:0f:9d:d9:
1e:dd:ab:7f:65:ef:da:a0:51:6f:25:90:a1:7a:47:
3e:69:65:75:51:0b:50:24:d5:53:30:3e:31:1a:d3:
39:92:e3:60:d0:b6:e1:3a:b4:92:3c:e8:b4:38:64:
64:da:7d:a8:19:5d:f2:1e:ef:e0:dc:34:cc:95:5a:
12:f3:34:fe:6e:1d:9e:47:c6:bf:a2:23:67:7a:2d:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:44:1D:C1:6A:FB:DA:E2:28:67:54:13:09:37:CF:D5:B9:88:33:7A
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kUQdwWr72uIoZ1QTCTfP1bmIM3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.224.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e5:dd:31:11:74:9e:11:05:6e:96:49:65:08:a8:64:f6:90:
3a:d6:e3:e5:5b:8c:21:a0:1e:f0:0e:5c:c4:66:e2:03:f5:c8:
fa:cc:7e:84:d8:43:4d:3c:bb:e7:a2:02:85:34:08:75:4e:45:
45:19:bb:a6:62:fe:74:9c:88:4d:23:0b:40:cc:88:06:ab:73:
5d:c7:78:02:04:e9:24:3d:87:c8:05:a9:d7:a4:17:9f:1c:1b:
d6:c6:2f:c2:d2:17:d3:d7:dc:96:53:86:cc:1b:ac:5e:6f:ea:
50:f1:0c:fb:c5:89:ed:6f:23:e9:51:fc:c7:ee:04:24:e1:7a:
80:d2:12:67:85:e1:38:91:89:ab:2e:22:de:6c:73:1b:ac:f1:
0d:39:92:f1:9b:25:05:44:c9:03:97:e8:26:16:d2:c8:af:58:
2f:78:cb:10:69:78:f1:84:a9:74:25:40:31:98:2e:93:4c:13:
bd:03:1a:b9:fc:5f:46:0e:24:f3:a4:67:4b:03:9f:a1:72:b4:
4a:2d:72:e9:63:39:1e:74:17:c8:d9:30:7d:78:73:56:da:33:
2b:f3:a1:a4:b9:0e:b4:d7:25:03:7a:fd:24:9e:1f:cd:5f:98:
91:0a:20:84:de:74:be:09:a0:4f:e7:45:71:08:18:9a:1a:6b:
f6:9e:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:46 2026 by rpki-client