Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/kD13SPr3aIXKSIne4Qp6tVrf0ZM.roa
File: kD13SPr3aIXKSIne4Qp6tVrf0ZM.roa (raw, json)
Hash identifier: pEw/S9jOxpWQLVzYTg3rhlxmJoczWXUHF2pKiEgawmk=
Subject key identifier: 90:3D:77:48:FA:F7:68:85:CA:48:89:DE:E1:0A:7A:B5:5A:DF:D1:93
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 01A0B431F152B6E65506F4A6D0FEC3AB955E
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/kD13SPr3aIXKSIne4Qp6tVrf0ZM.roa
Signing time: Fri 18 Sep 2026 11:06:07 +0000
ROA not before: Fri 18 Sep 2026 11:06:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13287
IP address blocks: 178.255.224.0/24 maxlen: 24
178.255.225.0/24 maxlen: 24
178.255.226.0/24 maxlen: 24
178.255.227.0/24 maxlen: 24
178.255.228.0/24 maxlen: 24
178.255.229.0/24 maxlen: 24
178.255.230.0/24 maxlen: 24
178.255.231.0/24 maxlen: 24
2a00:a220::/32 maxlen: 32
2a00:a220::/33 maxlen: 33
2a00:a220:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:31:f1:52:b6:e6:55:06:f4:a6:d0:fe:c3:ab:95:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Sep 18 11:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=903d7748faf76885ca4889dee10a7ab55adfd193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:7f:d9:fd:6d:7f:a0:67:8b:28:ed:29:a0:
56:e8:7a:70:17:c2:c8:26:fe:fe:6c:5a:b6:b9:a3:
70:a9:a9:9a:4c:33:05:ae:29:6a:2a:86:88:8e:e0:
c3:0f:db:b5:6e:6c:73:a0:6b:63:d8:56:a2:89:78:
a5:d0:1b:cb:4a:28:f7:e9:50:cb:d0:05:00:54:b7:
b9:c5:24:79:3c:7c:f9:4f:04:12:46:b0:72:bc:55:
1b:66:cc:dd:38:ea:d6:26:4a:91:c6:12:22:17:a9:
1b:16:08:62:23:41:3b:7a:29:0a:f9:c0:d3:fd:de:
f3:c2:15:ab:f5:23:b7:d9:52:7c:50:8b:69:4e:9d:
c2:f1:a5:12:5a:f6:97:1c:91:2c:6b:ee:a6:9e:91:
e6:f5:8a:90:58:95:ae:a7:e1:60:9e:a4:92:a8:a7:
29:17:a7:53:e6:87:e6:d7:cf:a1:73:e8:65:09:e6:
76:92:ad:ca:ac:9e:f0:e9:3b:29:cd:20:6f:ef:91:
c2:e8:8f:5b:85:ac:21:c6:38:2f:58:21:ee:83:67:
df:86:d3:bc:4a:a6:82:dc:7f:c2:89:1c:0a:61:dd:
65:24:40:2f:bf:c7:35:e6:f1:62:c4:52:4a:92:0f:
c7:9a:e7:ae:f8:2c:ed:42:77:b7:60:3d:1e:d0:92:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3D:77:48:FA:F7:68:85:CA:48:89:DE:E1:0A:7A:B5:5A:DF:D1:93
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/kD13SPr3aIXKSIne4Qp6tVrf0ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.224.0/21
IPv6:
2a00:a220::/32
Signature Algorithm: sha256WithRSAEncryption
9c:22:f5:99:62:4e:25:1b:11:34:f6:64:72:72:32:af:4b:e9:
75:2d:af:93:f3:93:1b:f5:f1:b7:9d:d2:f7:90:1b:44:4b:43:
5c:82:d8:59:50:24:45:4c:6f:08:6b:3b:cb:45:27:1d:9b:3d:
da:b8:c4:57:05:d9:1d:ee:d1:17:64:16:ed:f7:cb:a1:b8:52:
d7:18:e3:ff:ad:e1:ed:db:35:26:5f:34:a3:23:b8:43:08:8b:
4c:6f:40:9a:65:9c:5f:bd:78:6e:46:ad:06:9d:6b:d4:de:8f:
9e:35:82:ea:47:52:f9:59:20:4f:fd:72:3a:2e:fb:74:91:d6:
af:07:5b:b6:cc:4c:ae:fd:55:61:82:01:5a:07:b1:08:ae:56:
13:d7:0e:eb:37:09:c6:73:45:29:cf:5f:6e:43:15:2e:1f:4a:
f9:5e:e9:d0:1b:20:72:1b:8c:fd:c2:0a:da:69:8a:fb:12:98:
38:09:57:dd:e9:d1:98:a4:3d:c2:c9:33:0b:56:16:63:aa:e2:
3b:93:4b:5c:54:0f:7f:8a:a8:3c:23:92:9c:c9:0f:47:db:11:
5f:79:0a:a0:20:8b:c7:ad:ef:7c:fe:a0:d8:5c:e9:6b:d8:33:
ac:58:0a:c5:bf:ea:a1:47:3e:79:ca:11:e7:b3:76:09:94:0e:
b4:43:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:10 2026 by rpki-client