Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/R0_kceYfRxNkC07z5_goD7lcpms.roa
File: R0_kceYfRxNkC07z5_goD7lcpms.roa (raw, json)
Hash identifier: FEoDIQ7PdmBYSR8wJzuRGgdrz3q9v6cQLPAXPSKQRAc=
Subject key identifier: 47:4F:E4:71:E6:1F:47:13:64:0B:4E:F3:E7:F8:28:0F:B9:5C:A6:6B
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 01A0635E9DED8446EBC47039D8DF5A5050E5
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/R0_kceYfRxNkC07z5_goD7lcpms.roa
Signing time: Wed 02 Sep 2026 18:25:40 +0000
ROA not before: Wed 02 Sep 2026 18:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57797
IP address blocks: 81.27.84.0/24 maxlen: 24
131.162.144.0/21 maxlen: 24
209.131.64.0/21 maxlen: 24
2a12:8ac0::/29 maxlen: 48
2a12:8ac0::/40 maxlen: 48
2a12:8ac1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:5e:9d:ed:84:46:eb:c4:70:39:d8:df:5a:50:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Sep 2 18:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=474fe471e61f4713640b4ef3e7f8280fb95ca66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:ec:a1:30:99:93:7d:0b:f1:cf:e6:15:e2:
a4:41:4e:10:9e:c1:c0:fd:ef:e0:1c:b6:56:e8:04:
d0:0e:da:77:72:a5:88:29:45:00:bc:d1:f2:a4:6f:
b7:42:ab:a9:bf:b8:c3:d8:b8:b5:6f:ac:62:09:f8:
e3:90:89:24:4b:b6:ae:d2:11:57:4f:00:0e:f9:06:
e9:79:71:a9:da:a2:11:ff:92:28:7f:3f:e9:82:1b:
8b:a6:c1:98:d0:3f:52:e6:ba:fe:95:d2:54:95:51:
cc:62:31:8f:aa:ed:25:08:6f:e5:76:47:39:a3:92:
47:39:9b:2d:49:68:a7:68:94:a6:41:7e:5c:4a:45:
26:31:b0:83:4c:bb:43:96:67:20:a4:55:36:7c:80:
5f:f7:c3:2f:fd:2c:5c:61:42:1b:c8:b0:b1:36:1a:
68:89:3a:71:eb:51:78:01:91:14:45:a1:01:36:ef:
c9:9d:02:1f:07:b4:50:6b:23:fb:ea:b7:7b:a9:8e:
a2:86:ae:3e:e4:5d:fc:e0:64:80:9a:4c:90:82:37:
39:2e:f8:6b:3c:4a:52:74:c5:34:8e:c0:38:33:e8:
93:63:54:47:50:7b:99:a3:69:cd:9e:03:90:a4:3f:
fe:73:8b:c4:86:38:ef:5c:e6:e5:25:4c:db:20:c8:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4F:E4:71:E6:1F:47:13:64:0B:4E:F3:E7:F8:28:0F:B9:5C:A6:6B
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/R0_kceYfRxNkC07z5_goD7lcpms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.84.0/24
131.162.144.0/21
209.131.64.0/21
IPv6:
2a12:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
76:92:8c:7e:fc:c5:21:66:fd:4c:b2:ea:7a:ab:8b:7d:0e:a2:
4a:c3:93:c2:98:3e:fa:09:3f:ca:e1:a1:f4:d5:e0:36:b6:81:
e5:63:fa:6b:8d:5e:e4:fc:84:68:c1:56:2f:9c:61:39:2d:e7:
1f:e9:69:9b:a4:71:5b:2d:22:3a:a9:90:d8:8b:35:7d:13:d0:
23:66:28:b5:5a:de:59:a2:01:dc:40:a0:57:69:7e:49:f0:6f:
ff:49:8f:47:9f:a2:54:d2:d0:ff:45:3f:2c:99:40:a3:15:ab:
7d:b4:f9:67:d6:0f:ce:7a:98:b7:20:0a:09:43:b2:d2:3c:ba:
3e:e9:ef:06:ac:30:fc:19:f1:ae:9a:b1:52:b8:0e:9d:09:52:
f7:30:2b:ed:d8:35:5a:c9:f6:ac:0d:e5:06:9f:ed:6a:6e:ef:
29:2b:e7:d0:65:93:ea:b9:4e:68:6d:a7:62:f3:ec:56:f9:9c:
3d:fd:67:ca:21:b9:eb:e9:21:71:b4:65:4c:66:5c:22:91:5c:
81:ac:b9:8b:d7:cf:df:f1:98:c9:bb:c8:61:c1:2e:de:05:2d:
d1:19:95:f6:7e:20:42:a3:be:b6:1b:8b:14:30:bb:a2:87:1e:
59:0f:ef:41:eb:8a:38:7c:7c:9b:83:cd:6a:94:8f:7e:e8:73:
41:bb:cc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:38:31 2026 by rpki-client