Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/o-kRSexcG6BvGHuz1I4FYxptMok.roa
File: o-kRSexcG6BvGHuz1I4FYxptMok.roa (raw, json)
Hash identifier: swg2FIpOYDdICIo3fGEwx+XmOqu16nxFgGzQoO+wISA=
Subject key identifier: A3:E9:11:49:EC:5C:1B:A0:6F:18:7B:B3:D4:8E:05:63:1A:6D:32:89
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A1B17889BE3A9583D0D935CA0E793A8894
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/o-kRSexcG6BvGHuz1I4FYxptMok.roa
Signing time: Fri 06 Nov 2026 15:27:09 +0000
ROA not before: Fri 06 Nov 2026 15:27:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 193.233.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:78:89:be:3a:95:83:d0:d9:35:ca:0e:79:3a:88:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 6 15:27:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3e91149ec5c1ba06f187bb3d48e05631a6d3289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:9e:2b:57:6d:48:be:7a:5c:e9:65:21:75:
79:21:b5:e8:54:d0:ff:81:6f:fc:31:f2:55:0c:0c:
81:ee:8c:cc:b0:b0:e9:ee:ac:bf:e3:70:e9:74:73:
6c:0e:fc:32:69:98:c5:84:da:8a:68:5d:ab:44:05:
75:a4:72:0b:44:59:46:33:33:0a:23:5c:94:86:51:
2e:49:43:b5:00:1a:dd:a9:2f:57:1b:f3:38:ba:54:
20:06:6f:c4:2a:8c:d1:e4:a0:fc:1b:af:1c:0b:02:
ed:52:3d:bd:1d:a1:40:79:7a:84:39:a2:44:0d:b1:
21:13:fd:9b:02:d9:a7:e2:c5:61:78:47:26:c0:41:
1a:03:10:03:1b:36:e9:65:70:65:04:eb:50:b7:ff:
a6:3e:de:1c:5b:89:46:80:6b:59:c7:3d:a4:4a:e5:
6c:58:a4:e5:54:f6:6f:84:7c:fc:28:f4:44:03:02:
1e:21:24:0a:de:b0:88:d3:1b:82:f2:22:31:42:6b:
90:7b:d7:2a:d0:61:85:56:b5:fe:8e:c6:5e:2a:e4:
07:7a:e4:b1:23:14:c0:5b:a3:fb:28:14:18:5a:fd:
1f:83:a1:d1:6a:b3:b3:26:9c:59:2b:27:b0:ac:e7:
55:40:42:89:36:7c:f6:77:43:fe:1c:e8:cb:38:8f:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:11:49:EC:5C:1B:A0:6F:18:7B:B3:D4:8E:05:63:1A:6D:32:89
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/o-kRSexcG6BvGHuz1I4FYxptMok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fe:f0:14:de:4c:ac:1e:c1:da:e1:87:77:d6:ff:c8:94:a8:
7f:fe:e0:00:36:f0:7b:54:f3:9a:5e:62:c4:5e:68:6e:42:4e:
56:1e:6c:52:9e:81:cb:b4:37:cd:c8:42:43:73:45:81:64:23:
04:a1:c3:09:c5:41:c4:1c:7a:89:83:32:a2:cc:1e:8f:ac:70:
fb:0c:7a:94:a5:9d:8f:9d:fd:e0:51:a9:4b:3a:02:34:06:31:
0f:c7:9e:08:a3:b6:7c:2e:60:df:d7:d2:3b:63:df:06:7e:e4:
f3:e8:d3:0e:10:dc:a4:7c:d5:7f:49:4c:11:aa:e0:f1:0d:0b:
cd:16:ce:20:ad:01:cf:4d:f3:81:ed:aa:28:32:24:08:f3:0a:
bd:8c:5d:11:0a:3b:8e:c6:54:03:12:50:7f:72:cc:26:b1:96:
b3:f0:91:55:e1:69:3d:be:0c:83:f1:59:7f:16:73:c7:ab:47:
26:6b:a4:00:84:2c:33:36:28:22:66:20:f6:aa:77:51:a0:9b:
64:b3:05:92:7c:c6:f9:72:c0:b8:3b:5f:c4:76:96:cd:90:68:
e2:7f:52:fb:df:d0:43:8a:21:74:87:56:6a:32:79:a0:5f:f8:
34:56:53:b2:0a:a5:5d:c6:cd:15:2e:a1:b3:00:32:7f:72:a4:
bb:eb:d4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:34:42 2026 by rpki-client