Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/k95nSKzfyj7oyf3hxhJggwkYbzM.roa
File: k95nSKzfyj7oyf3hxhJggwkYbzM.roa (raw, json)
Hash identifier: qGRzMQRX6JUJIZPjW/27YDaPV7jnrL30iowtpo5onJ8=
Subject key identifier: 93:DE:67:48:AC:DF:CA:3E:E8:C9:FD:E1:C6:12:60:83:09:18:6F:33
Certificate issuer: /CN=be619eab16474fed6da09d147b3025df5b7497ca
Certificate serial: 019F2368A1CDC248F9E6CD215AE53C940529
Authority key identifier: BE:61:9E:AB:16:47:4F:ED:6D:A0:9D:14:7B:30:25:DF:5B:74:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/k95nSKzfyj7oyf3hxhJggwkYbzM.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 553
IP address blocks: 141.69.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a1:cd:c2:48:f9:e6:cd:21:5a:e5:3c:94:05:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be619eab16474fed6da09d147b3025df5b7497ca
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93de6748acdfca3ee8c9fde1c612608309186f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:b4:8f:cd:90:c1:5b:d8:f0:6e:f6:c8:e5:
2a:e4:fd:08:63:20:dd:5e:47:6e:43:3c:48:b4:6f:
14:f2:a3:82:a5:a9:d8:b7:1b:54:59:20:14:46:7a:
23:d4:05:49:d0:bf:cd:51:56:dc:db:df:5d:c7:da:
35:3c:1d:c4:86:e0:06:63:69:a9:3b:54:9e:4f:e3:
ae:e4:d4:c8:d9:d5:4e:59:b6:c3:47:3b:ab:35:03:
2b:ac:30:fa:36:10:00:25:8f:9e:83:d4:54:7f:c7:
ed:9f:f4:6b:df:f0:cd:d8:71:2a:fd:fc:45:f5:fa:
e0:84:60:24:52:d4:d6:9f:59:23:dc:6e:19:df:1f:
cc:1d:bd:d6:2a:e0:51:80:b0:41:a4:fc:f4:64:8b:
22:d6:ff:40:47:f6:b2:3f:33:83:4c:21:4e:eb:d0:
50:8e:06:a0:ff:f3:54:c5:55:f3:f4:87:72:f5:54:
08:ed:24:1a:b7:c0:f9:2b:2b:04:17:4a:1d:42:12:
e0:f3:c3:ff:3d:d3:59:a3:60:f3:70:2c:15:37:ce:
7c:22:54:bd:96:94:52:44:aa:ad:1a:63:99:9f:93:
75:ff:72:ff:6f:89:ab:49:48:76:cc:ce:15:3c:00:
c6:08:00:01:e3:cb:6e:51:26:6e:2f:fc:a8:77:39:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DE:67:48:AC:DF:CA:3E:E8:C9:FD:E1:C6:12:60:83:09:18:6F:33
X509v3 Authority Key Identifier:
keyid:BE:61:9E:AB:16:47:4F:ED:6D:A0:9D:14:7B:30:25:DF:5B:74:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/k95nSKzfyj7oyf3hxhJggwkYbzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:08:a4:5e:65:9e:01:0f:83:eb:50:37:ab:4f:04:2f:e2:48:
02:c8:11:75:44:84:0f:15:b7:12:84:f6:c1:a1:43:03:f3:35:
e0:cc:66:ec:59:6f:64:c9:b7:67:d9:41:d4:ef:ad:9b:54:bf:
d5:80:13:ae:3d:2a:93:ef:3a:8c:32:8d:b3:66:46:12:be:d3:
09:0d:a7:16:aa:ef:3b:49:38:8c:be:d5:07:ad:ca:21:86:56:
17:96:6d:67:2c:8c:ef:06:95:3c:d6:75:ce:cb:75:6d:3f:15:
4d:a7:7f:92:8e:ec:aa:dc:a7:e0:e3:37:6c:d4:9a:45:a5:d4:
96:35:a6:71:a2:ff:e6:3d:5c:23:ba:41:8e:b4:3a:df:c2:c1:
2a:09:85:3c:5d:50:85:eb:bb:3b:90:06:e7:e1:32:0c:33:9b:
ca:1f:de:3c:8a:51:8a:70:dc:f8:dd:0e:eb:0f:23:3c:c7:03:
8b:12:bd:ab:8b:e1:0b:0e:44:6e:62:54:67:0e:9c:37:be:68:
95:b7:5a:75:1b:d6:29:e6:cc:75:f7:59:9c:93:d5:79:de:86:
6d:26:4c:a4:81:ad:c6:2f:db:38:9e:a9:bf:fc:c3:f0:42:06:
a0:d3:72:f7:e8:0b:c1:e4:86:a0:2c:f0:cd:22:2c:f7:7d:de:
5a:2d:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:43:00 2026 by rpki-client