Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/kI6O0uFJPftBH4xW35fguwVIj3w.roa
File: kI6O0uFJPftBH4xW35fguwVIj3w.roa (raw, json)
Hash identifier: Y0KF9po9o55fM0XpVubG9yoHKNbR7AYN/MNkbuUq+D0=
Subject key identifier: 90:8E:8E:D2:E1:49:3D:FB:41:1F:8C:56:DF:97:E0:BB:05:48:8F:7C
Certificate issuer: /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial: 019B79ECE9562B9D005D7AC0B63C4C7C3FE8
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/kI6O0uFJPftBH4xW35fguwVIj3w.roa
Signing time: Thu 01 Jan 2026 14:18:47 +0000
ROA not before: Thu 01 Jan 2026 14:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201910
IP address blocks: 79.170.144.0/23 maxlen: 23
79.170.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:e9:56:2b:9d:00:5d:7a:c0:b6:3c:4c:7c:3f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Validity
Not Before: Jan 1 14:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=908e8ed2e1493dfb411f8c56df97e0bb05488f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:f0:2d:45:ed:a5:ab:52:28:9e:d6:33:da:
e2:5e:f3:28:62:ef:c3:f8:6d:10:ec:65:ba:19:2a:
83:e8:a8:93:d8:f8:33:9c:93:f8:69:f6:93:04:03:
1c:df:b3:33:03:34:39:e9:9a:16:8f:39:2a:9a:76:
47:7b:1d:29:9d:30:c5:f3:de:19:3f:4e:7c:da:d4:
21:38:f8:e0:5b:46:40:65:9e:53:90:19:19:a2:c3:
ab:ff:5a:02:34:e3:21:bb:7b:ec:5f:e3:96:80:1f:
e4:89:08:5e:10:12:e0:5a:8e:1e:ef:ab:62:cd:79:
7e:9b:3d:3a:81:96:d1:9c:32:a6:b6:aa:96:9c:59:
0e:99:11:a5:9e:02:cd:4f:45:0e:f8:20:aa:0d:32:
f0:17:05:28:5f:74:8f:a5:17:7d:b2:c2:e4:e2:bd:
0f:e3:7e:af:4e:53:33:95:7a:9c:19:67:83:59:90:
da:16:69:20:7b:80:98:d5:cf:19:b0:52:b1:93:48:
de:fe:8c:61:dc:74:a3:c1:a4:7a:f2:8d:2c:06:dc:
99:ee:0d:e8:17:1f:98:62:df:09:b9:b2:a1:c9:bc:
25:b5:b4:ca:da:ab:a0:dc:a1:42:7f:b5:67:43:a3:
65:e9:83:a5:22:14:47:19:23:67:0d:c0:24:b3:42:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8E:8E:D2:E1:49:3D:FB:41:1F:8C:56:DF:97:E0:BB:05:48:8F:7C
X509v3 Authority Key Identifier:
keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/kI6O0uFJPftBH4xW35fguwVIj3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.144.0/22
Signature Algorithm: sha256WithRSAEncryption
94:59:8d:b1:01:df:02:9b:cf:a3:a1:50:ab:fd:c1:16:0d:9c:
e8:de:8a:e6:9d:9a:cc:ee:1a:1b:a7:e1:65:e4:e1:17:dc:26:
89:ad:29:1d:56:51:43:eb:20:5e:53:dd:aa:78:6c:1e:88:1b:
5a:bb:94:ee:a6:6c:54:ba:5c:31:b0:29:ab:72:31:91:4d:ca:
b0:1c:ac:ed:16:7a:42:64:79:b9:9c:4e:c0:f1:a2:80:a4:fe:
d7:72:43:85:c5:d0:09:0b:04:72:e0:b4:71:fb:2d:91:e8:d6:
f5:2b:7d:21:2f:b4:f4:29:e3:a1:cc:0e:36:5b:b8:fc:7e:05:
f6:b3:e9:7b:c5:fe:1b:6a:c1:f8:a1:ef:3c:2d:f9:20:c6:c2:
36:32:81:28:4e:b9:98:d6:e2:8e:fc:ae:b9:b2:aa:5a:a5:ae:
cb:d6:a7:65:1c:f5:f5:6b:fc:e1:78:9f:e5:b3:85:9c:a8:8b:
04:a8:a3:c0:5c:07:14:bf:b9:7a:e4:4f:3d:da:79:c7:a7:c8:
85:28:f9:0b:8a:f2:f2:c7:dc:78:19:79:3e:db:17:b3:e4:38:
fa:0a:fc:5c:5d:f8:92:f3:23:8f:9d:e7:02:3c:e5:ae:10:25:
9d:39:fe:d2:0c:03:f8:e5:4e:7b:9b:70:9b:c9:92:74:fa:fd:
b6:6a:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:57:22 2026 by rpki-client