Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/AicKbn9V4_76pgwuedyA5GCzyLU.roa
File: AicKbn9V4_76pgwuedyA5GCzyLU.roa (raw, json)
Hash identifier: DOJ7MbETesSOMJObiYp+iD6VIbQrVHtez3kgGi0aHjk=
Subject key identifier: 02:27:0A:6E:7F:55:E3:FE:FA:A6:0C:2E:79:DC:80:E4:60:B3:C8:B5
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A0B923344A6D7334CDD7AD7BA56C10AA35
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/AicKbn9V4_76pgwuedyA5GCzyLU.roa
Signing time: Sat 19 Sep 2026 10:08:07 +0000
ROA not before: Sat 19 Sep 2026 10:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207590
IP address blocks: 2.56.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:23:34:4a:6d:73:34:cd:d7:ad:7b:a5:6c:10:aa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 19 10:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02270a6e7f55e3fefaa60c2e79dc80e460b3c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:7e:a2:df:be:3f:fd:0b:5c:42:66:10:5e:
15:40:2f:50:53:ca:57:20:6c:9d:7d:7a:a1:26:53:
e6:90:df:a8:1e:3b:05:b3:a2:76:df:cd:bc:ba:c2:
b8:a4:a4:45:80:3c:85:d4:1d:9e:af:72:11:dc:51:
a8:09:34:47:0d:69:1f:08:0d:cc:32:16:15:6d:06:
b3:78:eb:e0:3a:fb:82:c3:eb:b8:39:87:bc:9f:13:
14:95:7c:a7:a9:e1:3f:47:76:86:bc:68:96:58:56:
f0:05:03:dc:59:5f:8f:66:2c:62:65:34:3c:ad:d2:
d2:ca:6b:ce:3d:2b:ae:20:b8:8e:a7:3d:a3:57:88:
29:3a:ba:36:e7:3a:4c:cd:6c:7e:ed:9e:b7:5f:00:
05:13:2a:44:f2:47:a1:fc:62:31:7c:5f:18:dc:80:
65:89:e0:ee:c4:d8:9d:c6:31:20:f4:27:10:e8:39:
62:b5:a1:ba:91:20:bf:b7:78:ae:f3:b3:e5:58:4b:
aa:d0:f9:6e:99:3b:5b:60:36:fa:6b:ad:0f:83:b1:
f1:35:af:54:12:db:17:28:1d:0c:b2:3a:bb:1d:04:
b3:76:8e:98:d9:03:52:b8:61:b9:19:2c:aa:c8:6e:
ed:e6:85:98:92:b6:46:46:d5:28:76:ab:b4:86:49:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:0A:6E:7F:55:E3:FE:FA:A6:0C:2E:79:DC:80:E4:60:B3:C8:B5
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/AicKbn9V4_76pgwuedyA5GCzyLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.2.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1f:0b:c3:17:37:aa:22:eb:df:52:06:81:a1:36:57:02:14:
4b:e1:3f:4d:ed:a6:8e:90:18:42:90:f4:01:1b:6e:f4:2c:7f:
e8:f2:bc:ad:83:10:6a:26:61:7a:a2:bb:0f:42:18:14:d6:7e:
9b:d6:54:25:98:f1:84:60:f9:68:5a:4c:5a:df:bf:d9:a4:13:
be:31:d7:4e:23:fd:e7:ce:54:69:5a:7a:78:67:db:08:08:c7:
c1:5b:cc:61:75:ff:79:34:78:45:9f:20:05:0b:fd:5b:76:62:
5a:a3:dc:e8:c8:7b:eb:71:03:87:c1:d5:62:3b:03:78:33:90:
0c:84:17:21:40:01:bd:f8:cc:ba:02:40:d2:31:d4:a3:76:15:
24:43:e7:8d:b2:d7:6c:4b:a0:e4:af:b7:3f:12:27:b6:1f:c7:
5f:b4:44:de:f1:76:74:16:e8:8a:58:7a:55:1a:d6:b8:cb:54:
34:74:c2:d1:67:41:8d:14:e9:2d:e6:49:96:5b:01:70:43:8f:
7d:6d:80:8d:7b:8f:18:44:df:d6:34:08:ec:db:d9:d3:cd:15:
cd:50:f2:c7:9d:71:6d:13:53:98:21:7b:3e:f0:e7:db:1b:44:
b2:f3:fd:6a:01:0f:0e:a2:67:91:84:40:f4:df:f4:98:d2:6b:
70:6c:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:38 2026 by rpki-client