Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa
File: Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa (raw, json)
Hash identifier: ipV86oOkjGzli6pzk5Ar8vQYROabIbZnZILhX3gNwHo=
Subject key identifier: 2A:7D:5F:76:93:23:5A:78:5C:3B:F7:B5:5C:E4:AA:E5:0F:D2:A8:EA
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 019EAE43AE6D7D76B98D11B0408799602826
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa
Signing time: Tue 09 Jun 2026 21:22:11 +0000
ROA not before: Tue 09 Jun 2026 21:22:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198219
IP address blocks: 109.95.186.0/24 maxlen: 24
109.95.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:43:ae:6d:7d:76:b9:8d:11:b0:40:87:99:60:28:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Jun 9 21:22:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a7d5f7693235a785c3bf7b55ce4aae50fd2a8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:62:2e:d0:50:a6:37:32:ab:85:98:9a:15:
86:13:d8:22:52:91:60:86:68:fe:22:37:ca:db:22:
f1:31:76:ff:d1:75:fb:03:52:71:ef:f6:3c:f8:ec:
6d:f3:ed:20:74:7e:0d:12:1a:94:24:dc:ea:d1:3c:
83:18:82:00:71:85:3a:0c:3f:15:6d:17:d9:48:68:
37:78:fa:96:83:ca:78:96:59:7c:29:74:78:34:82:
7d:a3:d2:75:3e:4a:09:cb:aa:f4:2e:29:ce:e4:5e:
f9:3d:2b:0b:81:ae:a9:21:32:17:34:2e:74:2c:c3:
4b:7b:ab:86:ae:7d:ab:fc:8c:15:78:46:fa:ae:ec:
96:e6:e0:da:85:30:3d:f7:c3:3b:51:32:88:53:1b:
ff:9b:cc:3c:00:66:11:12:c4:43:7c:ce:c6:8e:87:
b2:b7:f2:92:83:ca:df:e8:10:ae:79:d7:33:2b:e3:
14:f5:67:f2:ef:b8:e0:1c:e5:e9:b7:ec:88:23:d9:
cf:fa:d1:55:82:4e:0e:15:3a:56:fb:1f:68:a9:2a:
5e:26:e7:99:b9:60:8d:6d:36:9c:a9:8a:49:06:2e:
6f:4f:a9:65:28:ad:c9:3f:de:0a:06:6a:81:06:1d:
04:8b:81:eb:30:a1:fe:ae:9f:24:81:52:ee:d0:63:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:5F:76:93:23:5A:78:5C:3B:F7:B5:5C:E4:AA:E5:0F:D2:A8:EA
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.186.0/23
Signature Algorithm: sha256WithRSAEncryption
37:71:78:a0:72:9f:0d:1b:18:30:13:a2:5e:51:5c:a5:4f:ae:
4f:1b:35:60:94:c8:b5:4a:ba:bf:20:96:d1:f9:e4:d0:59:fd:
cd:25:40:f5:91:7e:bb:a4:cd:3b:58:c4:4a:b3:84:dc:3d:04:
71:eb:09:b5:78:76:a1:68:aa:74:81:18:41:99:08:7b:c8:d0:
61:20:d0:ca:36:b4:2f:4e:da:9b:11:33:f4:d9:28:48:e2:ef:
be:50:89:a2:04:84:91:bd:60:a6:83:ea:74:57:73:44:b9:5e:
af:22:37:f8:f8:9a:ad:ab:48:9e:b3:6e:6e:3c:96:d9:c2:f9:
24:7b:b6:0f:6f:6a:f2:b0:21:62:3c:57:98:98:4b:89:7b:fa:
d3:af:34:58:92:63:9a:5d:d4:91:b6:b9:48:6a:65:84:62:a1:
89:ec:cd:39:c3:94:68:03:01:1c:1e:57:01:a2:eb:76:8d:80:
26:1c:c7:53:ef:06:d0:87:e5:b0:4c:ef:34:07:af:52:8e:f4:
90:d3:21:fb:1d:61:6a:09:41:58:b5:64:c9:43:6f:c3:be:9a:
86:36:49:5f:d8:3f:54:d1:d0:6e:c8:9d:eb:e7:fe:37:7f:1a:
d2:f1:23:08:a5:3f:88:1c:45:7c:71:06:b3:d7:1f:5c:67:98:
81:cf:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:29 2026 by rpki-client