Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/amKRTQFVPInnM8un2R1rHwO2uIo.roa
File: amKRTQFVPInnM8un2R1rHwO2uIo.roa (raw, json)
Hash identifier: eLlvai01huixic9/fb3Owzvg09hZPVDDV9WHUekeUD4=
Subject key identifier: 6A:62:91:4D:01:55:3C:89:E7:33:CB:A7:D9:1D:6B:1F:03:B6:B8:8A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019CD180E4D56957DA137CBDB60BD8E48B19
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/amKRTQFVPInnM8un2R1rHwO2uIo.roa
Signing time: Mon 09 Mar 2026 07:30:11 +0000
ROA not before: Mon 09 Mar 2026 07:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 193.93.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:80:e4:d5:69:57:da:13:7c:bd:b6:0b:d8:e4:8b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 9 07:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a62914d01553c89e733cba7d91d6b1f03b6b88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:df:0f:0e:5e:52:fb:65:e6:ae:dd:97:fe:
45:80:2d:ca:c4:8a:42:40:5d:85:42:d2:20:06:19:
17:9b:1a:fd:d1:e5:4c:5d:90:79:f6:7f:87:50:48:
8c:44:10:f5:e9:2a:ad:31:a3:d6:11:bb:72:8c:9c:
fa:b3:75:4d:1e:ca:24:ff:78:68:a0:d5:10:48:03:
e4:32:65:77:f7:dc:65:ce:06:1c:96:3a:47:b4:45:
50:dc:fd:97:79:29:6b:fe:b1:5f:e6:77:81:7a:13:
56:1d:e4:a8:16:73:b2:be:02:fa:34:0d:e4:63:eb:
ba:76:df:f0:77:74:95:8d:96:cd:2e:95:d7:36:54:
28:e3:4c:7f:a0:82:d5:a9:df:b2:de:af:fa:9f:69:
12:2f:59:cf:00:7a:6a:56:51:45:a6:fb:85:ca:26:
05:16:f2:2c:c4:e4:3c:76:02:b4:cd:d3:d2:da:40:
61:56:99:80:ca:36:1f:28:43:ac:bd:aa:aa:05:5d:
2e:2d:61:b0:93:6c:fa:4b:34:f2:59:7d:d6:2a:02:
3c:37:81:04:ca:cf:db:f4:19:78:89:8c:7f:35:cd:
c4:c1:70:18:e3:e4:fc:cf:fd:60:78:d9:d3:8e:d5:
4d:31:da:ce:45:d0:bc:24:6b:95:49:a7:b4:07:25:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:62:91:4D:01:55:3C:89:E7:33:CB:A7:D9:1D:6B:1F:03:B6:B8:8A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/amKRTQFVPInnM8un2R1rHwO2uIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.54.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c2:96:7d:88:23:e1:4e:1d:94:99:66:b4:92:9f:1c:f3:b4:
20:4c:e6:23:01:e3:8a:c1:1b:66:e4:a6:7c:60:32:06:10:4a:
43:3e:e1:d8:5c:06:a1:80:89:f5:36:25:8e:fa:4a:78:c7:66:
c9:87:2a:15:ad:d1:46:95:74:eb:c8:db:39:4d:93:e1:b9:37:
e9:14:63:1b:62:fe:37:64:cb:38:34:fb:54:64:76:68:46:e7:
39:03:57:d0:f7:80:af:3a:ba:b0:29:c2:82:41:9d:27:02:11:
50:c0:1d:ca:f4:28:75:33:e4:71:9e:b6:48:f9:4c:1e:fa:6a:
af:91:5f:5d:03:69:e5:a7:2f:0b:c6:ba:65:a6:57:10:a1:42:
f6:a7:4c:80:97:e7:b5:85:ae:13:dc:62:31:8c:2c:e6:66:d8:
5d:ff:aa:26:9a:e5:a3:66:61:22:3c:a4:81:b0:ce:3d:fc:42:
57:a1:ed:db:b5:3e:72:f3:75:55:6f:8f:b8:32:16:d6:93:a0:
5b:a5:da:6a:1a:1f:10:15:72:88:48:ce:8b:60:92:8d:7f:22:
d1:aa:05:40:fa:d2:25:69:25:a3:10:57:43:f3:ef:f6:82:4e:
86:f2:fb:c8:ba:36:c3:23:38:57:a2:b9:d7:61:43:f3:d4:2e:
49:74:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:14 2026 by rpki-client