Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/Knk4VYHDcIiBaCF1Fb23lu5Bxhc.roa
File: Knk4VYHDcIiBaCF1Fb23lu5Bxhc.roa (raw, json)
Hash identifier: 92P0sRZzCNI5Tycv/hRZey2LUOQu+EgEzREqInMSicw=
Subject key identifier: 2A:79:38:55:81:C3:70:88:81:68:21:75:15:BD:B7:96:EE:41:C6:17
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 019B775882772F9F76A7FA2149A10334FFAD
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/Knk4VYHDcIiBaCF1Fb23lu5Bxhc.roa
Signing time: Thu 01 Jan 2026 02:17:27 +0000
ROA not before: Thu 01 Jan 2026 02:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208727
IP address blocks: 194.48.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:82:77:2f:9f:76:a7:fa:21:49:a1:03:34:ff:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Jan 1 02:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a79385581c370888168217515bdb796ee41c617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:a2:3e:a6:fc:e7:27:e2:b9:fb:69:28:29:
4a:56:d7:57:87:cd:27:60:3d:6d:55:c8:12:ce:7a:
77:de:04:65:7a:51:83:fb:6a:ba:e1:a0:79:01:c8:
46:2c:3b:24:67:e6:46:98:e0:8e:1a:67:d7:b9:ba:
0c:0d:48:6e:22:ba:e7:81:e5:91:47:f6:44:cf:fd:
7d:34:60:e8:db:aa:e9:f9:7f:90:df:d1:b2:dc:15:
02:56:c4:bd:c9:20:60:cf:a1:88:d8:02:2c:bb:b1:
39:62:a8:18:22:bb:7c:d3:c5:77:32:97:df:ab:ec:
31:91:36:19:56:88:11:a9:07:ba:ba:3f:28:a8:64:
da:54:61:4b:19:05:e6:c9:90:60:f7:64:3b:53:f0:
ae:f1:9e:2d:30:7b:35:ca:5a:1e:c3:ec:82:35:1e:
19:7a:2c:e8:ef:15:03:ed:3b:cc:24:69:07:c5:4c:
4a:7e:32:d9:dc:92:07:64:dd:83:dc:ed:d1:b1:70:
52:40:7a:4a:68:8b:96:51:bb:90:26:4b:ea:4c:ed:
77:29:f4:c2:cf:45:eb:38:51:7e:2b:ce:19:a3:c1:
00:28:06:41:d3:ef:a0:1f:b0:21:53:2d:69:2a:97:
93:c0:e8:64:07:c6:eb:07:31:15:e6:e2:58:06:f0:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:79:38:55:81:C3:70:88:81:68:21:75:15:BD:B7:96:EE:41:C6:17
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/Knk4VYHDcIiBaCF1Fb23lu5Bxhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:29:ec:f4:5f:7a:22:f1:d2:ea:40:d0:ab:dc:2e:99:2c:49:
1f:ca:f2:4a:f4:3b:46:42:8e:ea:bd:f5:6f:43:27:02:76:cf:
24:4f:c5:87:0c:c1:11:88:68:18:ef:02:10:31:1c:3f:be:2f:
0d:ad:7e:e4:7a:67:57:21:cd:36:50:78:0b:3d:ef:6c:cd:55:
36:35:97:8b:ec:93:11:64:41:7a:e6:c8:59:79:5f:df:ce:46:
bb:0b:17:d4:c1:22:29:a3:04:b6:01:5c:8d:51:cc:de:0e:91:
4b:59:b1:1f:2d:8c:ae:f7:00:67:c0:5f:c6:1c:8f:fb:ad:41:
cd:e9:e5:1e:d1:d9:df:d9:42:b1:57:d1:11:6a:b6:90:55:8b:
fe:19:11:75:29:11:37:58:21:7c:a4:f1:b4:20:ed:41:c7:52:
c5:8f:e7:31:9c:a9:df:d5:06:42:f4:86:3b:33:d8:a6:9e:83:
44:a8:cd:72:94:6d:19:8b:6b:82:0b:92:87:27:e3:19:48:cb:
aa:40:37:f6:9b:e8:9e:17:68:28:61:01:28:5d:bc:7c:60:92:
15:4c:45:78:d3:8e:25:af:b5:3c:67:e5:a9:9e:5e:eb:bc:f3:
ab:39:cd:d3:69:f6:80:70:2d:1b:4d:be:f9:c8:28:7d:9a:c1:
47:e9:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:51:50 2026 by rpki-client