Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/rKGPDDgAmm0jy0GhkccjKLiXojs.roa
File: rKGPDDgAmm0jy0GhkccjKLiXojs.roa (raw, json)
Hash identifier: /ngy0l+rqctd6Mbdou0y+Yjl9wuMb3tI7k2GAfzkDvE=
Subject key identifier: AC:A1:8F:0C:38:00:9A:6D:23:CB:41:A1:91:C7:23:28:B8:97:A2:3B
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE8BFD4391B06CAFBF9D25D277216
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/rKGPDDgAmm0jy0GhkccjKLiXojs.roa
Signing time: Tue 15 Sep 2026 21:49:30 +0000
ROA not before: Tue 15 Sep 2026 21:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 142.228.182.0/23 maxlen: 23
198.33.12.0/23 maxlen: 23
198.33.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e8:bf:d4:39:1b:06:ca:fb:f9:d2:5d:27:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aca18f0c38009a6d23cb41a191c72328b897a23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:09:89:7a:a4:25:b5:76:58:e3:0a:ab:96:
0e:a9:c9:90:27:02:6b:49:0e:29:b2:d0:d8:da:23:
7a:83:ab:d4:35:0a:35:a6:07:16:3e:9c:e5:7a:6b:
bf:a6:5b:78:26:1c:2b:91:42:ee:4a:21:2c:35:84:
20:eb:e8:46:60:52:8e:67:93:70:44:ca:92:40:e1:
47:31:9e:a3:64:23:3c:e5:0e:b9:de:28:fb:37:c9:
d5:f5:f6:16:ab:76:23:96:f7:aa:2f:1d:af:14:5f:
0a:69:eb:05:6d:4e:54:0b:84:61:53:19:13:b0:78:
5c:fb:ac:0b:91:09:bd:e1:d7:58:9d:86:0c:9f:62:
3f:96:ee:95:e3:a8:a6:ef:af:5f:7e:2c:aa:6e:6a:
90:f2:02:9c:59:c1:b8:87:cf:7b:29:bd:f9:04:aa:
d0:72:3e:ad:42:23:16:ad:ff:c7:54:6b:f7:3b:f4:
d9:b4:fa:eb:37:b3:d6:d8:74:ac:f5:c3:56:d9:c4:
a5:3e:44:fb:f6:47:79:55:2a:b5:91:c7:3a:f4:de:
6c:ca:a7:7e:33:9e:26:ab:3e:77:a9:5b:2c:21:34:
87:ed:bc:de:38:48:2a:88:3a:48:73:2b:ff:bf:b1:
43:af:11:c3:65:10:0e:2d:81:5c:44:28:a0:8b:f5:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:8F:0C:38:00:9A:6D:23:CB:41:A1:91:C7:23:28:B8:97:A2:3B
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/rKGPDDgAmm0jy0GhkccjKLiXojs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.182.0/23
198.33.12.0/23
198.33.42.0/23
Signature Algorithm: sha256WithRSAEncryption
43:65:d7:e7:c8:7d:25:e4:8b:a8:ab:72:5e:33:ff:8a:26:68:
36:8b:1d:57:35:4c:70:6c:af:56:70:32:3e:ee:9e:de:52:35:
bd:78:b2:19:7c:01:c6:fe:f0:59:cb:59:67:43:8d:61:f4:05:
18:96:e4:2e:dc:90:12:42:84:35:00:f9:00:73:23:35:1b:4a:
7a:e2:ae:c3:6b:40:83:3f:d5:b5:8b:ef:9c:3e:02:cc:e8:92:
05:e7:1c:55:f1:ca:16:db:a5:8d:38:72:f2:88:52:3b:85:b3:
15:90:8d:40:9b:ea:3f:14:57:70:72:08:c8:08:05:f3:f8:19:
04:e8:24:69:dd:c1:d1:98:9f:4b:5d:79:0f:fc:7b:72:f3:62:
98:8b:ac:6e:82:2e:60:13:64:27:44:84:f8:ab:3a:fd:b5:d6:
15:ab:36:db:15:27:9f:9e:3e:c7:81:3a:e4:1f:04:b3:e3:de:
f2:9d:35:fa:ba:d8:31:0d:a1:f1:20:22:2b:34:ce:35:92:36:
5c:dd:aa:9b:bc:5a:a1:ef:11:9e:30:84:fe:68:48:10:56:63:
ff:16:13:be:ca:61:8b:12:e5:0b:cd:0e:cd:99:36:89:9d:0b:
9d:e4:21:47:53:13:6e:1f:cd:f6:4a:fb:35:04:fa:3b:7c:6d:
76:3c:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:53 2026 by rpki-client