Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rKjLModjgiDrm1mf4XuQrAD7hS0.roa
File: rKjLModjgiDrm1mf4XuQrAD7hS0.roa (raw, json)
Hash identifier: 5vysk8zK6G5HIODybhEktf29PCH38d1SHPbJ/TL72aA=
Subject key identifier: AC:A8:CB:32:87:63:82:20:EB:9B:59:9F:E1:7B:90:AC:00:FB:85:2D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A1396E02E67BAB9859FC9DD7E172F6238B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rKjLModjgiDrm1mf4XuQrAD7hS0.roa
Signing time: Wed 14 Oct 2026 08:01:13 +0000
ROA not before: Wed 14 Oct 2026 08:01:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 178.253.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6e:02:e6:7b:ab:98:59:fc:9d:d7:e1:72:f6:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 14 08:01:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aca8cb3287638220eb9b599fe17b90ac00fb852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:01:63:90:04:a9:8b:67:fc:a7:45:0e:0d:
0f:ee:0e:fd:a9:e6:04:af:ec:96:aa:09:70:e0:1c:
bf:bd:4e:f8:73:98:50:d5:d3:66:e7:45:2f:23:41:
9c:82:8c:32:10:ea:3f:a2:2a:a2:c2:f2:84:75:be:
3a:8e:5d:7a:8f:35:67:3c:df:27:18:57:05:bb:a0:
a6:e0:2a:51:17:68:5c:96:b2:c4:66:a5:ee:f5:60:
75:91:1b:4c:5d:46:a6:3f:8e:5e:ef:ae:a2:2e:a4:
f7:14:d0:f1:d9:4d:41:02:1f:1b:e5:79:f4:18:e0:
69:9a:75:a4:88:84:d7:5f:62:00:be:f9:74:60:73:
92:d1:f2:8a:e0:f4:80:bb:4b:66:d0:ad:df:55:8c:
e2:46:74:fe:cb:21:89:7e:98:9a:d7:59:66:44:eb:
4a:64:6b:5b:d4:e7:31:ab:2f:e6:a4:5c:9d:ee:b7:
6f:4f:cb:60:44:39:01:a4:83:38:63:36:8f:41:7e:
31:cf:49:1a:43:c1:8d:98:58:08:f3:ec:45:a8:96:
c9:89:07:2c:ec:a4:70:27:b0:59:93:1c:18:60:6f:
36:82:3d:6f:9c:91:87:b6:97:34:c5:16:4e:3e:80:
ac:95:6c:f2:d3:25:d6:02:a7:a0:de:ea:91:77:ab:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A8:CB:32:87:63:82:20:EB:9B:59:9F:E1:7B:90:AC:00:FB:85:2D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/rKjLModjgiDrm1mf4XuQrAD7hS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d7:3d:4e:4f:f1:a5:02:ed:f6:0d:3f:59:85:f7:6f:6d:9e:
b2:09:c4:41:87:ec:4e:95:21:f3:d3:cf:ae:80:2d:c5:30:52:
ae:0d:0e:7b:6e:04:c5:52:a0:45:51:80:39:6a:43:6c:42:b8:
4b:14:9a:f1:a4:aa:32:4c:a9:dd:46:88:88:26:d1:67:56:ee:
7a:aa:7b:7c:48:2b:85:66:9b:49:55:08:02:35:7a:e0:97:2e:
22:65:85:c8:3c:85:bb:6f:61:9a:2f:17:f2:13:57:44:ff:cc:
24:e2:c2:f0:33:d2:7b:2b:33:6f:f7:ac:02:23:42:f7:1f:6d:
b3:b8:5d:32:ed:e0:47:89:55:96:51:d5:69:20:cc:05:70:dc:
2b:f8:f7:9d:67:18:56:39:83:e1:5e:a0:82:2a:47:48:32:17:
22:f3:9e:08:35:cd:01:19:0b:59:69:38:4c:8a:a2:06:5d:83:
a2:01:f5:8e:25:0a:b5:bd:dd:ea:0f:9a:a1:66:9b:e1:53:1d:
c7:3e:6b:00:62:bb:b2:d5:f5:61:8d:f4:be:51:71:f0:87:cd:
6a:0b:8d:56:2e:75:80:17:76:d2:fa:65:d0:b0:d8:13:b8:a7:
5a:4c:ba:ae:60:74:79:da:53:2d:a8:2f:5c:78:4f:db:34:ef:
32:1d:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:14:50 2026 by rpki-client