Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kuZ2d3McOYmYQFN39bnUw1NUivg.roa
File: kuZ2d3McOYmYQFN39bnUw1NUivg.roa (raw, json)
Hash identifier: XuossZ5MAHRorVObAbT82B/8/5QzA3Q77wXFSM24RZw=
Subject key identifier: 92:E6:76:77:73:1C:39:89:98:40:53:77:F5:B9:D4:C3:53:54:8A:F8
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A0BC0C731108A2BB3B052F130D6750D3CA
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kuZ2d3McOYmYQFN39bnUw1NUivg.roa
Signing time: Sat 19 Sep 2026 23:42:07 +0000
ROA not before: Sat 19 Sep 2026 23:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 195.211.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:0c:73:11:08:a2:bb:3b:05:2f:13:0d:67:50:d3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Sep 19 23:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92e67677731c398998405377f5b9d4c353548af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:b7:fb:6c:bc:4a:1f:06:86:1d:ec:8a:c4:
fc:32:75:3f:1d:bf:7f:4e:4b:72:02:c3:df:d3:00:
ad:15:06:de:7a:65:8b:78:98:12:db:07:4d:7a:2c:
be:5e:f7:99:76:81:83:cc:5e:0b:6e:28:94:5f:ae:
1d:7c:5f:5d:36:de:00:f0:cc:18:87:4a:f1:24:d8:
15:10:69:f4:88:bd:45:39:59:69:17:e6:be:a2:a9:
7e:63:fe:a1:62:40:30:41:cb:d0:45:9d:a2:fe:1e:
11:3d:4e:7a:46:b3:cb:60:f9:ac:b5:b2:3e:ac:77:
db:79:51:dd:19:49:26:4d:b9:5c:55:e8:ed:80:28:
28:6a:05:69:57:c7:1d:59:b9:4f:2f:aa:fb:43:8f:
7a:fd:50:1b:c0:04:f2:bf:70:76:ff:8c:83:9c:e0:
67:8e:e2:16:53:c7:fe:64:b1:a4:e2:bc:5b:a4:40:
95:d4:32:92:46:39:01:d5:b9:c4:60:f4:52:8d:1a:
72:a9:bc:94:9e:87:00:5e:4b:b3:52:dd:8a:9a:5f:
fc:28:b6:71:55:32:c3:84:16:10:0d:6e:dd:0a:92:
26:72:1e:fb:71:5f:5c:b8:26:79:fe:6c:a1:a0:be:
77:75:05:cb:1d:a3:8b:63:25:45:48:77:aa:cd:03:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E6:76:77:73:1C:39:89:98:40:53:77:F5:B9:D4:C3:53:54:8A:F8
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kuZ2d3McOYmYQFN39bnUw1NUivg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.55.0/24
Signature Algorithm: sha256WithRSAEncryption
90:df:74:af:61:11:39:04:5b:67:64:76:bf:d1:79:8f:c8:3d:
51:46:0a:ce:d0:ab:32:4e:76:cc:d0:f9:45:eb:6e:57:12:d0:
6f:56:cd:a6:28:c8:73:8a:23:19:d8:aa:a2:9e:44:46:9a:4b:
04:3b:89:aa:97:b0:62:cd:18:b7:aa:2b:dd:d7:03:54:74:af:
09:51:2e:39:a6:8c:ee:1d:d1:df:80:65:57:76:69:8e:b7:81:
8d:cd:17:d7:58:19:ea:f3:a2:a3:5b:28:f1:eb:b9:1e:70:0e:
b2:fb:35:63:64:90:1a:07:89:e8:05:c2:d2:b9:ce:8c:58:93:
3a:43:a0:6a:74:5c:ea:31:2c:9b:f6:ab:3b:13:be:77:0f:30:
db:cc:27:2a:fb:d8:ac:13:03:a5:b8:11:d4:76:69:ec:bb:2e:
d5:d6:db:b3:ff:a1:21:bc:12:0b:3d:11:e3:fa:fd:0e:f1:b7:
d6:26:e3:2c:65:78:1f:74:fd:1f:89:ba:be:2e:0f:e7:22:96:
37:aa:cf:56:11:3f:50:d1:54:d1:1f:b0:d9:4b:e2:41:df:f4:
2c:1b:b3:81:21:52:b6:14:91:ce:c0:70:04:7d:f5:5c:e3:23:
02:a7:d8:6d:f4:a3:65:19:45:64:30:1c:85:0b:39:4c:c2:78:
f1:7f:33:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC8DHMRCKK7OwUvEw1nUNPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjYwOTE5MjM0MjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmU2NzY3NzczMWMzOTg5OTg0MDUzNzdmNWI5ZDRjMzUzNTQ4YWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwu3+2y8Sh8Ghh3sisT8MnU/Hb9/
TktyAsPf0wCtFQbeemWLeJgS2wdNeiy+XveZdoGDzF4LbiiUX64dfF9dNt4A8MwY
h0rxJNgVEGn0iL1FOVlpF+a+oql+Y/6hYkAwQcvQRZ2i/h4RPU56RrPLYPmstbI+
rHfbeVHdGUkmTblcVejtgCgoagVpV8cdWblPL6r7Q496/VAbwATyv3B2/4yDnOBn
juIWU8f+ZLGk4rxbpECV1DKSRjkB1bnEYPRSjRpyqbyUnocAXkuzUt2Kml/8KLZx
VTLDhBYQDW7dCpImch77cV9cuCZ5/myhoL53dQXLHaOLYyVFSHeqzQM/zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLmdndzHDmJmEBTd/W51MNTVIr4MB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEva3VaMmQzTWNPWW1ZUUZOMzliblV3MU5VaXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9M3MA0G
CSqGSIb3DQEBCwUAA4IBAQCQ33SvYRE5BFtnZHa/0XmPyD1RRgrO0KsyTnbM0PlF
625XEtBvVs2mKMhziiMZ2KqinkRGmksEO4mql7BizRi3qivd1wNUdK8JUS45pozu
HdHfgGVXdmmOt4GNzRfXWBnq86KjWyjx67kecA6y+zVjZJAaB4noBcLSuc6MWJM6
Q6BqdFzqMSyb9qs7E753DzDbzCcq+9isEwOluBHUdmnsuy7V1tuz/6EhvBILPRHj
+v0O8bfWJuMsZXgfdP0fibq+Lg/nIpY3qs9WET9Q0VTRH7DZS+JB3/QsG7OBIVK2
FJHOwHAEffVc4yMCp9ht9KNlGUVkMByFCzlMwnjxfzO0
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:29 2026 by rpki-client