Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/RRKsQC6M9AkjMNnb6Dbgy31a89c.roa
File: RRKsQC6M9AkjMNnb6Dbgy31a89c.roa (raw, json)
Hash identifier: RgVs/FEdPi9iuMl4X4UjocrvDXfBoeU0x5T2+6iJk9Y=
Subject key identifier: 45:12:AC:40:2E:8C:F4:09:23:30:D9:DB:E8:36:E0:CB:7D:5A:F3:D7
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A0AE19485D59497461799A7E8A90D177DE
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/RRKsQC6M9AkjMNnb6Dbgy31a89c.roa
Signing time: Thu 17 Sep 2026 06:41:27 +0000
ROA not before: Thu 17 Sep 2026 06:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.229.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:19:48:5d:59:49:74:61:79:9a:7e:8a:90:d1:77:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Sep 17 06:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4512ac402e8cf4092330d9dbe836e0cb7d5af3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:e8:53:36:f0:4f:a8:2a:53:a1:79:e5:84:
41:c6:83:b8:ef:8a:3a:f7:19:09:b5:37:57:d5:ce:
86:cf:3f:f9:4d:f4:25:da:d0:75:33:47:1f:7d:cf:
61:78:f4:8e:c7:53:3e:97:fa:8c:3c:34:80:7c:70:
7e:d7:44:84:75:81:9b:34:e6:c6:03:3c:4d:ef:ba:
a7:18:de:60:0f:b3:65:d5:2f:a4:75:90:e6:4b:f6:
ce:fc:c5:b1:b0:82:58:bf:86:0c:5a:92:42:00:c7:
c0:a7:e9:cf:9d:b6:82:36:42:8c:c3:65:92:42:7f:
32:2b:4d:f1:63:00:c3:be:ff:91:d2:b7:cc:90:f6:
eb:83:a3:77:f9:1e:79:73:04:97:15:ee:b9:a7:85:
ea:fd:95:ee:b6:95:cf:1d:90:ac:e4:63:d7:11:84:
24:83:a2:50:5d:10:62:dd:ae:e4:7a:ba:4d:fd:82:
7a:96:0f:57:3f:20:cd:57:fb:ee:40:1d:ba:f6:3c:
15:a4:7e:19:53:cd:b2:9f:12:df:25:18:c0:39:f7:
43:c8:4a:d6:9c:81:12:12:d5:68:ec:8a:3b:26:28:
00:64:2e:54:46:7d:74:9b:23:df:de:33:e2:21:85:
87:26:2f:ac:e7:58:4c:26:53:a1:ad:9a:db:3d:54:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:12:AC:40:2E:8C:F4:09:23:30:D9:DB:E8:36:E0:CB:7D:5A:F3:D7
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/RRKsQC6M9AkjMNnb6Dbgy31a89c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
83:01:3a:41:f8:84:2e:ff:f7:96:27:31:03:81:88:cf:a8:e5:
ea:4a:55:55:77:3f:6b:b5:5e:d7:d3:cc:cb:17:76:de:34:4a:
5d:f8:90:f1:05:ac:4a:af:5f:5b:fc:b4:5d:cf:7d:8c:04:97:
1b:19:7b:56:8b:86:e3:9e:ee:ed:62:f8:9e:d6:84:25:bf:3a:
18:74:65:cc:ee:bf:2d:23:57:9d:57:d5:de:1a:c7:3a:7d:09:
ff:4d:68:f0:11:bb:79:0c:c7:53:8d:64:9a:fd:db:a3:ae:5b:
33:97:67:23:9b:1a:86:0f:6b:fd:ac:f4:2d:4d:b8:4f:bc:4f:
c3:5a:50:cd:ac:a5:a9:77:99:d7:26:3f:90:f6:a1:5d:bb:e1:
4f:c2:72:3d:58:3d:83:b5:80:bf:00:ab:b2:36:7a:34:ed:ed:
fa:4c:0f:54:3e:76:09:07:a1:c1:b9:80:88:78:db:ff:0a:e6:
2f:5c:27:cc:8d:b1:ed:3c:38:92:e2:6f:3c:0a:1d:0b:7f:c5:
a0:cb:19:49:4d:80:5e:12:f3:93:51:f3:ec:14:44:9d:c9:e8:
f5:7c:0d:35:73:a5:ca:c5:e2:27:92:52:c8:fa:bf:70:2d:5e:
b8:c1:7d:7a:69:ef:ca:a7:92:93:20:5d:bb:a0:00:d2:fb:b9:
0e:4a:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:38:15 2026 by rpki-client