Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/KRefFYXKlIzwgLe6X2u3LKd7yyE.roa
File: KRefFYXKlIzwgLe6X2u3LKd7yyE.roa (raw, json)
Hash identifier: Du136c+HIMkTr5Ejm95v2mfyMSLoNOYcvMzlhfMYQBg=
Subject key identifier: 29:17:9F:15:85:CA:94:8C:F0:80:B7:BA:5F:6B:B7:2C:A7:7B:CB:21
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 01A0E8377643E45C968B4E33D2376D99983D
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/KRefFYXKlIzwgLe6X2u3LKd7yyE.roa
Signing time: Mon 28 Sep 2026 13:32:23 +0000
ROA not before: Mon 28 Sep 2026 13:32:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47348
IP address blocks: 185.143.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:37:76:43:e4:5c:96:8b:4e:33:d2:37:6d:99:98:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Sep 28 13:32:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29179f1585ca948cf080b7ba5f6bb72ca77bcb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:45:04:87:c7:17:7e:aa:ca:e3:38:09:9c:
98:f4:00:47:7c:ca:c7:5c:03:8a:6c:a5:11:04:be:
18:15:d9:2a:60:66:4c:a2:5c:f5:da:91:90:52:65:
ae:ee:b6:55:20:c4:9c:74:46:be:3c:80:5d:e3:8e:
04:11:42:a5:2a:6c:c0:58:2f:af:64:d4:4a:cb:a2:
3c:a4:0a:c8:3d:0b:5f:77:45:88:4e:c0:42:54:77:
24:1f:70:60:ac:6a:6f:c1:7e:a2:67:f6:ed:d1:74:
c3:11:19:c0:8e:f5:6a:27:96:58:ae:4e:6c:52:c9:
17:db:c6:e9:89:a6:cc:9e:13:a1:71:28:b3:bc:f1:
ed:9a:9b:e3:09:d6:f3:87:69:4d:f4:07:30:3a:1d:
94:2c:10:e3:37:dd:31:a5:ae:fb:c7:16:73:93:b8:
88:1f:84:13:39:36:76:4a:91:12:97:6a:32:b1:0e:
e4:41:f5:cf:d2:b2:f0:25:f7:8f:e1:a9:60:5e:19:
3c:f1:86:a3:fa:a6:b0:54:05:31:bd:7f:a1:3b:c3:
9a:39:06:14:6a:34:0c:a8:a4:ab:b7:0b:c2:8b:3e:
b9:5f:ae:d9:a3:4f:61:f4:1f:78:ec:41:c3:c6:52:
d3:f6:d5:52:0c:54:74:d2:29:3b:83:41:3a:45:c6:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:17:9F:15:85:CA:94:8C:F0:80:B7:BA:5F:6B:B7:2C:A7:7B:CB:21
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/KRefFYXKlIzwgLe6X2u3LKd7yyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.32.0/22
Signature Algorithm: sha256WithRSAEncryption
84:86:53:82:b7:84:4d:fd:89:3b:24:4b:da:e0:a3:c6:ed:43:
bd:bf:d5:b6:4d:5a:c0:ac:5d:f2:2f:6f:88:6b:6d:41:c0:4a:
ff:a1:f4:e0:68:52:44:77:eb:88:5d:20:07:98:48:25:65:8f:
29:85:7f:f1:79:a4:bf:80:17:04:16:84:81:a3:c6:0d:51:dc:
9c:5b:96:c3:f6:02:fb:b7:4a:7c:7b:92:27:10:b5:6f:91:f8:
9e:e7:25:e7:8e:05:53:b1:e7:71:8c:2d:00:f9:ba:b3:95:0e:
35:49:ce:72:9d:bf:8a:22:fb:7a:c4:9e:f5:d6:35:f8:65:23:
10:90:ff:9e:20:78:b4:05:aa:ee:c8:06:13:b0:49:21:49:e8:
53:19:78:f0:7f:d9:e2:97:8a:7f:a9:90:bb:02:27:71:30:5f:
72:ed:74:e0:a1:4d:e1:84:1b:d6:50:bd:f7:72:a4:3e:b2:b1:
a1:4c:b4:d0:e2:d2:73:20:51:d5:9f:77:27:c4:0c:6b:cf:08:
ca:04:7f:cb:53:d6:29:72:58:f2:6c:73:49:c8:9b:d6:f1:09:
2b:4f:20:d6:d3:49:01:32:ff:4e:6d:43:b9:e4:28:14:9b:e3:
ed:14:d5:ef:9b:f8:d6:5c:03:02:c3:dd:69:91:c8:51:cd:83:
3f:e6:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 20:42:47 2026 by rpki-client