Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/kaLgu1ajbWbRTIp64nkveQ0sPI0.roa
File: kaLgu1ajbWbRTIp64nkveQ0sPI0.roa (raw, json)
Hash identifier: QLfMEkLnzmR9asmQ0kW7bwtEoo2GEXf4te2IsruVAL4=
Subject key identifier: 91:A2:E0:BB:56:A3:6D:66:D1:4C:8A:7A:E2:79:2F:79:0D:2C:3C:8D
Certificate issuer: /CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Certificate serial: 019D8FAC953541A321419263FF8D7118C66D
Authority key identifier: 3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/kaLgu1ajbWbRTIp64nkveQ0sPI0.roa
Signing time: Wed 15 Apr 2026 05:45:45 +0000
ROA not before: Wed 15 Apr 2026 05:45:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9064
IP address blocks: 194.102.93.0/24 maxlen: 24
194.102.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:ac:95:35:41:a3:21:41:92:63:ff:8d:71:18:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8586e27e45368d39101fe2fcf534aed1c46a50
Validity
Not Before: Apr 15 05:45:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91a2e0bb56a36d66d14c8a7ae2792f790d2c3c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:75:ec:c2:b7:df:d7:34:07:98:be:5f:1f:
89:84:2c:51:c3:61:41:58:d8:b1:62:ab:34:75:ad:
58:e0:5a:39:ac:40:5e:1a:68:c9:19:cb:6f:fd:22:
b3:78:1f:de:19:fe:cf:50:9e:79:fd:79:01:35:bb:
ad:f1:38:8a:7e:25:ed:b2:e4:e7:d5:d3:e3:99:ef:
69:d4:d8:fe:f7:69:4d:37:bf:a9:a8:76:ee:9f:70:
dd:b4:18:53:80:c1:8d:ff:6b:da:85:72:5d:72:fa:
ec:7b:a2:62:d0:10:ba:b6:16:ac:81:5c:54:66:0c:
df:a6:a9:2e:f8:f0:14:d6:68:39:2e:55:52:21:aa:
97:e4:31:34:af:11:0c:a8:5c:f6:b4:34:9b:a9:66:
47:4e:77:e6:9d:3a:b5:c2:1b:3a:5d:76:c5:b3:24:
96:66:e7:fa:46:46:a1:c5:25:fc:07:2a:97:00:6e:
da:01:33:ff:85:6a:1a:03:32:26:ab:fe:8b:b2:59:
4a:c2:75:6c:1b:06:ad:3d:c6:75:e7:08:71:7d:ca:
3c:0e:e3:87:68:4c:1c:5b:d0:64:2c:ae:bb:c4:de:
f3:00:ad:b5:f8:ce:de:9b:e8:12:c6:5a:f4:ff:77:
be:0b:eb:7a:94:25:85:b6:b3:19:6b:33:ae:a2:de:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A2:E0:BB:56:A3:6D:66:D1:4C:8A:7A:E2:79:2F:79:0D:2C:3C:8D
X509v3 Authority Key Identifier:
keyid:3B:85:86:E2:7E:45:36:8D:39:10:1F:E2:FC:F5:34:AE:D1:C4:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4WG4n5FNo05EB_i_PU0rtHEalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/kaLgu1ajbWbRTIp64nkveQ0sPI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b553ff-f4e6-45c6-b642-28b5037919d8/1/O4WG4n5FNo05EB_i_PU0rtHEalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.93.0/24
194.102.118.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b1:29:a3:43:d2:51:97:d3:33:ef:8b:1a:db:1c:10:02:33:
38:38:e4:cd:6f:7f:0e:ed:fd:d3:59:94:43:f7:42:c4:39:8f:
b6:b6:65:fe:96:4e:08:bb:73:66:b3:22:6c:a1:b6:8e:e7:4c:
d8:52:5e:9b:14:50:33:b7:71:a8:5c:44:00:73:1a:ed:18:b2:
5c:34:7d:93:ce:a6:7a:64:52:2b:16:df:0d:b0:75:38:9e:18:
f3:43:ae:e7:28:7b:9a:bd:a9:3f:b7:30:64:96:df:fe:04:5a:
35:c8:3a:78:88:7d:68:dc:7a:e4:65:21:68:66:b8:71:39:03:
7b:c8:34:d6:f7:1e:0d:cb:44:d0:f8:77:5c:e9:af:e5:56:ed:
d7:75:3e:5d:e2:66:aa:6e:79:34:f5:35:92:b3:ac:ce:b3:d3:
17:72:d6:11:31:67:a4:1b:2c:1a:aa:46:c6:fe:b4:04:19:83:
e6:76:de:96:bc:c4:91:d7:44:b2:88:b6:8a:8c:2d:29:c9:87:
14:a3:8d:d0:89:fe:c4:e5:8f:4d:15:bc:cf:b4:7b:b8:d5:38:
bf:31:3e:c3:c6:11:89:38:ff:61:fd:50:a7:59:80:d5:35:41:
bc:bb:d5:1d:fc:b0:02:b3:0a:dc:4e:55:3e:7e:1c:65:b9:54:
7b:2b:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:13:34 2026 by rpki-client