Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/RkFsGSZwNWc6fCft4oxy6erfXpE.roa
File: RkFsGSZwNWc6fCft4oxy6erfXpE.roa (raw, json)
Hash identifier: QQymDKP22fmN9AHABWktknP+IqGC5REgDADPMhikpK4=
Subject key identifier: 46:41:6C:19:26:70:35:67:3A:7C:27:ED:E2:8C:72:E9:EA:DF:5E:91
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 01A162A166ED5603F48F4BF9AFA3C0CE16E0
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/RkFsGSZwNWc6fCft4oxy6erfXpE.roa
Signing time: Thu 22 Oct 2026 08:01:47 +0000
ROA not before: Thu 22 Oct 2026 08:01:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.179.128.0/17 maxlen: 17
92.235.0.0/19 maxlen: 19
92.235.32.0/21 maxlen: 21
92.235.40.0/21 maxlen: 21
92.235.56.0/21 maxlen: 21
92.235.96.0/19 maxlen: 19
92.235.128.0/17 maxlen: 17
185.72.120.0/22 maxlen: 22
2001:678:82c::/48 maxlen: 48
2001:67c:794::/48 maxlen: 48
2a13:e240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:a1:66:ed:56:03:f4:8f:4b:f9:af:a3:c0:ce:16:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Oct 22 08:01:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46416c19267035673a7c27ede28c72e9eadf5e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:bf:5b:ad:9f:d9:cc:04:bf:f5:b1:d5:07:
c5:db:1e:59:15:f1:7a:7d:7d:b6:17:f0:bc:76:66:
e6:3c:84:47:2c:df:5c:a3:2a:5d:0a:32:a9:7b:1d:
d4:d5:50:cf:12:3c:b1:35:13:1a:cb:86:1d:7f:50:
cf:a8:1d:48:78:d7:f1:c2:75:2d:40:73:a7:20:ad:
8a:25:05:e0:6c:41:53:21:d5:7f:55:1d:1c:51:86:
ca:d7:1b:51:3b:3c:61:13:e7:40:ec:15:d9:8f:f6:
5d:e5:6c:e9:0b:34:11:a9:48:9f:80:7b:ff:93:27:
15:0f:4e:31:2e:b7:51:9f:1c:2a:d8:a8:bd:42:af:
4b:93:57:72:80:1d:fd:79:6c:0b:3d:8d:d3:e3:a9:
e7:83:f2:17:d7:d2:f5:9d:31:d1:79:7c:f6:28:59:
19:42:ee:a0:99:14:d8:2e:19:f6:82:51:d0:68:c0:
8a:68:c6:b8:94:56:b7:aa:c6:25:e8:68:83:8b:83:
23:f6:de:1c:bb:dd:e4:18:b2:8e:26:ec:79:54:83:
3e:55:e5:38:1e:ac:e5:b3:51:7f:ba:89:19:45:32:
4e:ab:62:32:7e:58:9e:2b:76:53:6e:e9:19:81:2b:
41:fa:0d:df:46:4d:d1:12:e2:30:0e:7b:08:c9:b9:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:41:6C:19:26:70:35:67:3A:7C:27:ED:E2:8C:72:E9:EA:DF:5E:91
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/RkFsGSZwNWc6fCft4oxy6erfXpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.128.0/17
92.235.0.0-92.235.47.255
92.235.56.0/21
92.235.96.0-92.235.255.255
185.72.120.0/22
IPv6:
2001:678:82c::/48
2001:67c:794::/48
2a13:e240::/32
Signature Algorithm: sha256WithRSAEncryption
4c:98:72:8f:fb:27:41:77:17:7e:fa:bf:c3:9b:03:17:0f:16:
a0:9c:df:83:a3:91:43:4b:6d:5e:b7:0e:d8:73:82:5c:28:67:
82:50:42:e2:ff:c3:e6:05:1b:25:b6:28:ca:54:8c:f6:24:20:
6a:e8:88:fb:58:f9:f0:13:6c:b7:c9:01:97:21:20:64:76:ab:
95:3f:1a:d8:a7:9c:09:2b:71:0f:5b:1a:af:07:38:b9:f4:02:
6a:cb:fa:a8:8d:e6:3a:38:49:47:b1:31:35:f6:7b:d0:74:29:
fa:a8:9e:7c:12:9e:d7:a9:2e:be:0c:7b:94:29:41:69:33:71:
1a:61:8a:f0:6e:13:06:5c:9e:5f:68:c4:1f:f0:1b:7e:ba:a6:
a6:87:3b:16:5c:c2:93:94:5c:8c:61:c7:1b:55:56:5a:29:74:
53:34:69:a2:09:05:3b:b6:e5:6d:d6:c6:3a:7c:2c:5f:7c:83:
f4:ca:27:d5:41:c8:9f:43:af:cd:ec:f3:fe:8e:9c:b4:8c:9c:
47:96:cb:e0:0b:4b:5d:29:a4:09:4e:7b:6e:a1:c7:91:5e:2f:
5d:c8:b2:ab:d8:c7:f1:aa:83:46:ff:81:17:72:58:03:eb:5f:
8b:c7:04:dd:4d:ad:c7:59:dd:5d:31:11:a1:56:cb:f0:4c:33:
ea:0c:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:30:46 2026 by rpki-client