Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/v--KWi9c_gTJTGx4ObZg6igF2lA.roa
File: v--KWi9c_gTJTGx4ObZg6igF2lA.roa (raw, json)
Hash identifier: A5pOth6AiPSf+BfwZbD8LFkBhTRFY58pXDdLsve2Vm0=
Subject key identifier: BF:EF:8A:5A:2F:5C:FE:04:C9:4C:6C:78:39:B6:60:EA:28:05:DA:50
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A16326294949B638C2ED290E08B9B772CB
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/v--KWi9c_gTJTGx4ObZg6igF2lA.roa
Signing time: Thu 22 Oct 2026 10:26:47 +0000
ROA not before: Thu 22 Oct 2026 10:26:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213908
IP address blocks: 194.62.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:26:29:49:49:b6:38:c2:ed:29:0e:08:b9:b7:72:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:26:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfef8a5a2f5cfe04c94c6c7839b660ea2805da50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:3e:60:57:5e:44:2b:b5:be:f9:1f:69:a0:
a0:54:d8:f1:b9:15:c4:f3:17:cd:26:ad:7a:03:4b:
a1:de:8e:cd:12:3d:84:cb:2e:8d:5c:26:8c:68:cd:
d4:e4:82:17:29:9d:6a:54:d6:4a:c7:ad:94:f5:93:
15:c5:d9:e1:11:2b:a5:0c:b7:25:fd:b8:5b:1f:4f:
a8:cb:8e:61:87:6a:50:90:83:d8:5c:72:42:37:72:
5c:1d:88:63:87:43:a6:83:66:21:9e:26:8c:e2:93:
4f:e7:1e:2f:83:1b:4c:a3:41:9d:27:26:ff:3c:70:
2d:aa:ff:3a:95:d0:ac:b9:da:4c:49:72:d3:5d:7b:
3c:b5:8e:1c:28:db:db:49:66:70:20:f1:7b:bc:30:
59:d6:b8:d0:b5:c1:e9:0a:90:ff:cc:b8:58:68:5c:
17:0c:23:87:c5:3d:05:e0:13:fa:77:74:5c:c6:6d:
94:71:b9:94:94:65:45:4d:0b:10:f4:c0:85:43:1d:
81:c0:fd:7e:35:f4:d8:8b:bb:5a:8f:0b:2c:0b:4b:
9d:8a:1d:90:3d:4c:0e:a2:25:f5:74:fe:cc:40:e1:
27:f6:58:15:b2:7f:3d:93:8f:5c:ed:66:3f:8c:e3:
9c:47:d0:f5:af:31:00:3c:eb:a6:89:d8:47:14:7b:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:8A:5A:2F:5C:FE:04:C9:4C:6C:78:39:B6:60:EA:28:05:DA:50
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/v--KWi9c_gTJTGx4ObZg6igF2lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:c2:43:5c:bb:98:8b:da:6a:31:c6:70:92:81:47:1d:03:f1:
54:0a:f4:2d:d6:66:61:34:ff:38:8c:8d:43:5a:a9:cd:9c:fa:
4c:8b:7d:50:66:1e:be:32:42:f8:7d:11:69:1c:00:38:79:5b:
d4:12:9f:0e:ae:e5:bf:29:b5:37:18:9a:dc:67:af:24:bb:b4:
9f:83:e3:f5:eb:c6:c8:6e:52:79:2a:fc:64:1c:93:ff:8f:96:
e5:08:8c:f0:5c:0b:54:39:61:4c:a1:1d:a4:46:17:37:3d:a9:
79:07:8a:b8:5a:13:57:dc:6f:e6:10:6f:7f:a6:6e:d1:2a:19:
9c:3d:cd:c1:a1:93:5c:71:10:ce:0e:10:2e:76:49:52:2c:bb:
b1:aa:cc:a7:5b:bb:af:5f:68:41:12:7a:0e:17:00:20:8a:09:
f1:71:43:6e:cf:63:7e:90:30:ce:ac:15:80:98:d3:4c:11:da:
aa:97:b7:ca:83:d3:bd:2e:c6:fb:fc:72:92:40:cf:40:ef:9f:
a7:a0:73:cd:18:89:bf:f1:42:5f:bb:69:d4:25:1b:50:0d:23:
b9:0a:0b:07:27:0a:52:8d:4d:3b:e9:47:7e:ca:18:0e:f4:97:
0f:79:d3:c3:39:d8:dc:bb:6e:ef:df:12:69:83:85:58:f9:fc:
5d:55:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:42 2026 by rpki-client