Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/kjHXW8vauzCuo-9Ga5vkf2LvfBs.roa
File: kjHXW8vauzCuo-9Ga5vkf2LvfBs.roa (raw, json)
Hash identifier: nMWSXjyhyxXgusKdou/8sfu2TMwgZlwVJi6zwp1S97s=
Subject key identifier: 92:31:D7:5B:CB:DA:BB:30:AE:A3:EF:46:6B:9B:E4:7F:62:EF:7C:1B
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 01A0BF228ACB16D4A6847EF7A8B29F0AD294
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/kjHXW8vauzCuo-9Ga5vkf2LvfBs.roa
Signing time: Sun 20 Sep 2026 14:05:07 +0000
ROA not before: Sun 20 Sep 2026 14:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:22:8a:cb:16:d4:a6:84:7e:f7:a8:b2:9f:0a:d2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Sep 20 14:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9231d75bcbdabb30aea3ef466b9be47f62ef7c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:cf:e5:9b:df:26:24:87:8b:9a:e0:58:d6:
19:63:28:46:c3:a0:62:0c:61:3b:93:40:d7:71:11:
23:bd:65:cc:d9:62:be:e5:5b:af:ab:3f:34:d0:f5:
07:aa:ff:35:57:ab:8b:21:5d:a6:3d:b3:ff:ce:e4:
ab:2e:95:98:36:bd:0b:f4:91:90:1e:24:fa:77:73:
87:95:0f:c4:60:13:60:fe:95:bd:5c:3f:99:cc:d6:
72:f2:4b:14:b8:21:a2:e7:50:52:48:14:84:a8:23:
79:3e:8a:ab:21:a8:5d:2c:f8:e7:d0:dd:3e:39:13:
b8:5b:47:3b:d2:28:c1:c9:77:e0:f0:c9:f7:bd:f4:
e1:b7:a0:01:52:d4:00:db:2d:8c:b7:ad:dc:c6:0c:
db:37:9e:a2:d3:71:15:f2:9d:1b:19:03:6e:0e:17:
df:9e:24:4a:d2:27:2f:64:7f:a2:0e:f6:c7:8f:af:
dd:01:d0:6e:39:2a:73:a6:b4:6e:48:eb:cd:aa:38:
44:da:bf:1b:68:35:0c:83:00:36:cb:ca:7b:f0:4b:
97:a5:34:62:58:dc:f3:94:1a:73:1a:af:86:03:7a:
22:fc:58:c3:3d:25:5a:6f:4b:42:54:92:90:48:58:
1d:fe:74:86:aa:46:81:b2:08:3d:ba:d0:19:dd:32:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:31:D7:5B:CB:DA:BB:30:AE:A3:EF:46:6B:9B:E4:7F:62:EF:7C:1B
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/kjHXW8vauzCuo-9Ga5vkf2LvfBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
47:83:e3:88:b8:a4:1f:c2:8f:80:0d:c7:98:28:86:cd:ae:f5:
99:e4:09:79:ff:f9:a5:ea:1c:4c:5f:91:cc:71:d1:84:00:29:
5e:c4:49:9c:ed:67:00:6b:ec:69:27:05:0d:1e:8e:b2:86:df:
e6:eb:71:7f:f4:76:36:0c:95:ba:e2:5c:8e:54:e5:80:00:ab:
b6:1b:fe:98:7a:9e:71:f7:63:5a:ac:16:fb:e4:fe:9d:17:8c:
b5:06:65:7b:44:36:06:40:c5:eb:22:6d:5e:ab:a1:ce:5e:53:
b5:d4:79:80:98:6f:64:04:55:cc:53:3f:a8:41:c4:86:be:d2:
0a:cd:91:5c:5d:3e:24:f0:5c:ea:b3:6d:5b:37:b2:76:92:1e:
dc:bc:c3:68:b8:25:d8:01:7d:a3:c8:b2:85:ce:ed:66:c4:c8:
5f:3f:47:a9:5e:eb:32:83:7f:c4:ac:72:36:e1:79:3c:89:e2:
fc:e0:b7:5b:62:b9:74:44:42:91:04:34:a0:48:02:0c:6a:bd:
24:e7:5f:06:93:94:b4:5c:8b:d9:57:3d:60:3b:eb:ce:dc:69:
94:37:da:a1:77:27:51:c5:07:53:b4:e9:a2:06:96:97:42:93:
8c:0c:8e:e1:b8:36:be:75:53:e5:1d:3e:d9:4d:5b:4a:19:29:
67:5d:32:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:23 2026 by rpki-client