Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa
File: kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa (raw, json)
Hash identifier: UX+7yg4TJhnCGO4kiz6ejPDETIdb9Mgqo1XA5XUPupY=
Subject key identifier: 91:60:30:0D:BF:50:5E:ED:E2:42:2D:09:00:93:DC:50:1A:6C:54:E2
Certificate issuer: /CN=86e548ce6666e9394040d97f9a576bd45c720e42
Certificate serial: 019F6098F0D68E94E410DF87F39C67D52994
Authority key identifier: 86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa
Signing time: Tue 14 Jul 2026 12:27:43 +0000
ROA not before: Tue 14 Jul 2026 12:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 194.238.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:98:f0:d6:8e:94:e4:10:df:87:f3:9c:67:d5:29:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e548ce6666e9394040d97f9a576bd45c720e42
Validity
Not Before: Jul 14 12:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9160300dbf505eede2422d090093dc501a6c54e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:86:18:1c:59:52:0d:61:1c:33:06:61:67:
0d:64:f2:f6:16:e4:8a:85:de:91:5d:4a:78:c1:af:
b9:99:42:6c:05:cc:93:0b:9f:a0:50:5c:7d:04:c8:
5b:c9:1f:4b:6a:1a:bf:0f:5e:bf:99:c1:60:e1:46:
2a:f2:b3:a8:3b:2d:d9:dd:32:c1:dc:6b:af:7a:4e:
d5:a9:1f:40:48:9c:4a:38:28:5a:e0:05:a8:32:a1:
e8:ca:24:79:1d:f9:58:4d:4c:a5:c9:bc:98:c7:a2:
64:87:9d:f9:41:fa:d3:cd:40:8f:03:79:59:8b:26:
1c:c6:40:a9:dc:de:a7:c7:ba:e3:db:29:c8:dc:bf:
5a:ff:04:87:04:9c:ef:fd:a2:ed:88:87:2e:ab:fe:
3c:83:b1:ae:2f:6b:97:1f:30:7a:31:8a:aa:bc:56:
f3:29:c6:ea:83:da:a9:c6:83:6c:5a:26:6a:cd:46:
4c:de:9c:94:06:35:e3:c6:b2:ff:a2:3c:02:a4:13:
64:84:e3:d5:f5:b5:f3:3d:e5:c6:d0:bc:da:bc:be:
e4:4e:94:41:28:9b:c2:78:8a:17:fd:7a:b4:3d:bd:
c3:ca:43:ee:6d:63:8a:18:e9:21:15:4c:d4:b0:05:
67:2b:23:95:69:67:30:8c:d4:95:3e:4f:2f:78:2b:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:60:30:0D:BF:50:5E:ED:E2:42:2D:09:00:93:DC:50:1A:6C:54:E2
X509v3 Authority Key Identifier:
keyid:86:E5:48:CE:66:66:E9:39:40:40:D9:7F:9A:57:6B:D4:5C:72:0E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huVIzmZm6TlAQNl_mldr1FxyDkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/kWAwDb9QXu3iQi0JAJPcUBpsVOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/61debe-f56a-433b-950c-c31525ca5196/1/huVIzmZm6TlAQNl_mldr1FxyDkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.73.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bf:09:79:75:66:c1:fa:94:f9:2f:f6:7e:e6:71:4d:0b:09:
6d:12:99:90:e3:5d:33:72:f6:42:60:b6:2c:3a:fd:4c:da:f8:
6b:7c:c4:f3:92:29:dd:b1:64:5b:82:1a:a4:3c:d3:21:83:4c:
c8:66:95:d6:d7:fa:10:ed:db:64:6a:27:ac:17:49:02:90:d3:
d6:dd:72:56:59:bc:0c:fb:d3:bd:86:f7:f9:d5:73:09:9a:89:
6b:b4:7e:c9:6f:a0:ff:81:77:77:36:1e:c3:9b:c3:ac:5d:6a:
e6:39:3d:f1:59:60:f9:d8:d7:e2:61:2a:e6:21:9e:f0:ab:c4:
7f:17:cc:28:03:3d:da:0f:e3:83:be:7f:ce:12:2a:61:af:e8:
b4:68:08:c5:e8:6f:ca:b5:e1:67:76:01:8f:a0:39:15:4a:a9:
bd:c2:3b:bd:80:24:04:40:5f:d1:e8:d1:7f:3a:a6:cc:7a:c4:
3f:fd:24:49:78:aa:e9:bf:c0:0f:35:a6:56:ac:3e:5e:2b:a6:
13:00:e6:41:b4:f2:4c:a4:e1:3a:eb:6a:b2:3b:43:d0:d3:32:
08:9f:44:bb:2c:1b:25:3c:97:bb:8e:db:56:88:13:bc:1b:9a:
45:ab:aa:1a:04:35:df:06:c2:09:ee:87:9f:5a:d3:0b:71:54:
59:4a:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:38 2026 by rpki-client