Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/v4kmBvl3Gmv_1CvY_1woQbEvV7Y.roa
File: v4kmBvl3Gmv_1CvY_1woQbEvV7Y.roa (raw, json)
Hash identifier: WS0Dfrj5q1nqN7rCabYXb0Yik3SLnJSFAFs8MEsTHPc=
Subject key identifier: BF:89:26:06:F9:77:1A:6B:FF:D4:2B:D8:FF:5C:28:41:B1:2F:57:B6
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A042A959B65A019BF5AE69578AEF35FF17
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/v4kmBvl3Gmv_1CvY_1woQbEvV7Y.roa
Signing time: Thu 27 Aug 2026 09:59:49 +0000
ROA not before: Thu 27 Aug 2026 09:59:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215314
IP address blocks: 109.196.96.0/24 maxlen: 24
185.42.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:a9:59:b6:5a:01:9b:f5:ae:69:57:8a:ef:35:ff:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 27 09:59:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf892606f9771a6bffd42bd8ff5c2841b12f57b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:a6:22:20:8a:44:64:a2:69:e2:87:ab:09:
0b:b3:91:87:75:24:47:81:45:24:3b:54:14:31:a3:
51:dd:5b:b9:0d:34:8b:54:08:21:81:c5:15:5a:ab:
2c:a0:ef:6a:d1:92:45:cd:c5:46:fa:ad:37:fb:bd:
b1:18:4e:6d:73:f5:e5:56:e9:d8:62:49:1f:65:cc:
ab:6d:ac:be:eb:db:d1:d8:dd:ad:d2:84:27:6e:e4:
6b:72:58:eb:0a:92:57:41:76:62:4f:a1:27:3b:9c:
37:76:cb:f8:7d:15:9f:f2:41:8f:34:af:9f:be:ed:
de:9e:6e:1b:a6:2e:10:ad:6a:f9:ca:2b:04:60:ec:
82:7a:c5:d0:ab:63:e6:35:10:f9:64:62:13:6b:e1:
1d:c3:39:02:b9:d2:4f:2e:8b:91:fd:37:8a:45:2a:
5f:0e:3c:c6:78:58:81:8b:2f:75:6c:da:39:a8:99:
be:16:3d:53:d6:4f:42:02:bf:95:2a:26:c6:32:12:
d5:82:10:98:42:24:44:b9:ab:11:35:be:0c:43:6a:
bc:7e:f2:fb:46:ea:0a:30:d2:98:b6:51:de:72:42:
f2:15:b1:a2:28:7d:2d:70:f5:5e:6a:d1:dd:19:36:
76:10:c1:e6:d0:cf:2c:35:55:27:12:ed:66:1f:d1:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:89:26:06:F9:77:1A:6B:FF:D4:2B:D8:FF:5C:28:41:B1:2F:57:B6
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/v4kmBvl3Gmv_1CvY_1woQbEvV7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.96.0/24
185.42.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1c:a6:87:54:87:6e:68:a8:33:8b:ac:c3:9e:96:31:54:16:
bb:9f:62:d1:3e:2a:d1:3b:aa:6b:9d:c1:78:f3:ce:7f:61:a7:
b3:30:85:bb:87:38:96:05:7c:57:c8:f9:b7:f2:b5:24:52:9a:
f6:23:2c:70:94:6e:37:fb:bd:53:07:3c:e1:5f:5d:ae:3a:0d:
a8:5f:74:9c:39:99:11:10:70:f0:4d:fc:ec:64:cb:c0:14:e8:
d0:84:a2:bd:7b:d4:85:00:93:45:de:79:b1:19:8e:b4:eb:91:
ac:5f:32:86:ef:ed:a6:e6:b8:3f:4e:62:00:b5:6a:30:38:e9:
2b:b2:c4:4f:5c:17:69:d4:d0:c3:a2:b2:89:fb:f1:75:36:a2:
ab:a1:1d:ac:ba:d5:03:ce:64:bf:83:8d:3e:10:52:49:ad:50:
cc:e3:64:b0:78:6b:9b:4f:78:73:24:91:b1:1c:15:08:0c:52:
86:db:f9:2f:d0:0d:36:a5:a1:dc:6f:1f:95:3b:d8:57:5f:5e:
7a:49:b7:ca:44:62:7e:18:5b:5f:01:dc:e7:34:ff:bf:46:30:
c2:2e:29:b2:89:6c:0d:46:03:d5:c0:94:ca:c2:78:fb:ff:af:
a1:bd:95:ef:88:11:d4:44:79:cc:18:05:c5:39:03:a2:76:7e:
9f:27:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:49:02 2026 by rpki-client