Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/K7oY9P0OfWkHD6GX0g5pIBjAf_Y.roa
File: K7oY9P0OfWkHD6GX0g5pIBjAf_Y.roa (raw, json)
Hash identifier: yKmgSoE9rg2APN1oH0dQLOoKGASWMZwho6luI43ZQ7U=
Subject key identifier: 2B:BA:18:F4:FD:0E:7D:69:07:0F:A1:97:D2:0E:69:20:18:C0:7F:F6
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 01A10AFDEFC01122C655EFD42AE60D2F2910
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/K7oY9P0OfWkHD6GX0g5pIBjAf_Y.roa
Signing time: Mon 05 Oct 2026 07:36:16 +0000
ROA not before: Mon 05 Oct 2026 07:36:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 94.141.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:fd:ef:c0:11:22:c6:55:ef:d4:2a:e6:0d:2f:29:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Oct 5 07:36:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bba18f4fd0e7d69070fa197d20e692018c07ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:ae:69:98:89:f2:5f:1e:25:3d:44:cb:26:
c7:d4:8a:e2:a6:35:3d:b7:f0:bd:cf:24:fb:ef:50:
85:05:9c:7e:8d:1a:f1:28:28:8a:18:24:94:a8:dd:
40:b3:f2:cc:9d:36:53:5d:25:16:f0:0a:b3:51:62:
c0:0e:86:04:ef:9e:30:c8:97:93:b5:73:4b:e6:0d:
11:eb:14:78:cd:9d:8a:bd:87:a3:76:2c:e4:50:02:
d9:95:e7:04:40:f7:c7:53:27:c6:d7:a8:27:94:59:
cf:bb:45:0e:1f:cf:9d:85:dc:69:ab:7e:e4:de:79:
1f:73:b4:31:02:03:91:54:d1:41:02:cf:8d:5b:e2:
f8:90:a4:ae:3b:88:be:b3:2f:ec:e5:84:3a:86:26:
16:8c:40:89:ce:0b:8a:82:14:c2:ad:7b:ca:24:9d:
c9:01:21:b3:10:28:85:e5:a9:a2:0e:e1:14:56:32:
6c:20:b1:c9:60:9c:ae:39:ec:8f:4d:51:23:ca:7e:
79:59:98:13:49:ce:30:71:8b:a3:6b:2a:f6:39:18:
75:0e:72:ad:0a:b8:16:17:2b:62:db:24:10:05:b3:
82:fe:da:27:85:4d:9f:8a:94:e7:f7:60:3a:cf:98:
30:96:66:2d:6b:85:8d:12:74:44:8c:f1:81:12:b5:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BA:18:F4:FD:0E:7D:69:07:0F:A1:97:D2:0E:69:20:18:C0:7F:F6
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/K7oY9P0OfWkHD6GX0g5pIBjAf_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:66:de:44:f6:0f:33:bb:55:15:96:fc:bf:d6:b9:cd:a1:f9:
90:90:b5:1c:d4:b1:03:a1:73:ce:06:99:87:0b:d6:3d:f2:fa:
b6:81:68:df:ee:e0:bb:d8:d2:75:e5:60:6d:c2:fe:7f:20:3e:
40:92:e3:ae:82:af:b2:06:f2:f3:b0:51:6c:7d:12:13:ff:7b:
db:35:9b:1f:4a:10:16:8a:fc:39:98:e8:98:78:1b:59:2b:07:
7c:e0:5a:f7:ba:88:d5:bc:ed:5d:e3:5b:a6:2b:eb:f7:a9:d1:
a0:14:96:8b:ba:73:64:6b:41:a1:2d:42:62:d2:a0:e3:00:e2:
2d:f6:5b:9f:47:46:39:7e:9a:4f:3e:e4:5b:48:6e:a4:07:f8:
a3:00:8d:80:fe:8d:87:89:18:71:42:57:0f:ea:d5:a5:7b:23:
56:4f:27:94:68:32:5c:41:e0:4f:17:61:f7:f4:ef:e1:77:4b:
e0:0b:87:db:05:83:3e:85:e9:61:54:21:52:0c:88:d6:60:af:
95:e4:14:eb:52:4e:b2:e2:fc:c5:52:8b:03:cb:ec:c8:2c:58:
43:ad:5d:62:94:27:a9:b0:4a:b4:e3:87:ca:a2:74:b5:3c:0b:
f2:f3:b2:03:e4:0e:02:4b:82:65:43:8c:31:ef:4f:8f:d8:39:
09:e7:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:08:26 2026 by rpki-client