Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/KD1T37rBD1mdbuhwYzQ3lu95Qdg.roa
File: KD1T37rBD1mdbuhwYzQ3lu95Qdg.roa (raw, json)
Hash identifier: u5ZlddFSl4jtgRZ+O1bJZW7EJNoYKmcnlz1h7PQrlfQ=
Subject key identifier: 28:3D:53:DF:BA:C1:0F:59:9D:6E:E8:70:63:34:37:96:EF:79:41:D8
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A0C4043E45C0290F45327C57D0D4C45433
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/KD1T37rBD1mdbuhwYzQ3lu95Qdg.roa
Signing time: Mon 21 Sep 2026 12:50:07 +0000
ROA not before: Mon 21 Sep 2026 12:50:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.143.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:04:3e:45:c0:29:0f:45:32:7c:57:d0:d4:c4:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 21 12:50:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=283d53dfbac10f599d6ee87063343796ef7941d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:7d:44:0b:30:4e:40:b5:4c:05:ec:19:23:
bc:df:71:33:c1:4e:f3:0b:47:6a:04:92:bf:0e:33:
13:45:93:44:95:12:13:ec:0c:fe:b7:78:0d:d4:8a:
38:4b:8f:40:de:38:f0:82:2e:8d:68:d4:f9:a5:26:
37:b2:36:dc:7a:44:d1:76:0e:66:7f:56:29:8b:43:
32:4b:86:32:2d:5e:0d:43:8d:e7:9d:6d:8d:aa:10:
34:f7:0b:01:f2:c4:c5:e5:bd:14:ea:0b:ec:78:03:
30:e0:0b:9a:93:e8:a9:97:db:b3:d7:e9:c0:4b:19:
4e:3e:e5:d2:e0:4a:91:d5:c9:2d:96:81:87:9d:ec:
a9:57:63:e4:09:26:63:85:1d:bf:33:25:28:f7:a5:
6c:5c:85:59:d0:ab:ab:d5:c7:98:42:c7:cb:e7:73:
67:8c:80:4d:33:fe:10:dc:20:86:b9:84:17:52:85:
49:02:ca:15:e8:d8:72:61:7e:83:63:ed:c2:e1:2a:
76:3d:18:2a:b8:25:d5:24:68:28:a1:f9:88:d5:24:
ff:17:39:f0:14:d6:d3:85:07:56:60:fc:d8:ef:40:
21:27:b8:6a:2b:4c:c9:84:f0:ea:e7:f5:77:31:d6:
5e:87:97:b3:30:72:e9:cd:d5:cd:6f:88:ec:1a:a6:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3D:53:DF:BA:C1:0F:59:9D:6E:E8:70:63:34:37:96:EF:79:41:D8
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/KD1T37rBD1mdbuhwYzQ3lu95Qdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.8.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f4:af:63:43:7b:fd:79:41:da:b7:d2:ac:15:01:6e:35:77:
77:40:a0:23:15:33:8d:8b:9b:29:dc:74:14:81:d0:04:c6:6e:
25:7e:4b:33:b2:c5:7c:0d:1b:ac:e3:ab:2b:90:1b:ca:d8:8c:
76:3f:8b:83:68:db:b6:5e:35:67:e0:9d:bc:52:82:59:47:98:
6c:36:cf:2b:52:e4:09:28:43:40:c0:b1:55:4b:b5:58:1d:d5:
8b:ff:6b:75:04:09:53:0d:b5:a7:45:18:eb:a9:87:35:57:e6:
1c:48:98:70:cf:50:08:5d:bf:7e:8a:81:94:e8:c5:e6:65:ad:
ea:9b:a1:09:d6:d9:d3:d1:e1:a7:9a:a0:7e:7e:e1:f9:d1:cc:
75:b3:b3:8d:28:e1:af:bb:ad:f0:b2:58:82:a1:b6:12:aa:16:
e3:a2:cc:0f:aa:13:a7:c4:35:33:ea:3e:5b:eb:94:c5:57:a3:
75:0c:b6:f2:64:e3:be:9d:3a:8e:b3:14:f5:93:71:84:10:86:
4e:e3:06:33:5b:5e:4e:33:6d:4d:8f:54:60:c5:3c:fe:4d:8a:
7d:c9:ff:b2:31:e5:bb:29:24:1d:96:0c:47:95:3c:0a:a0:12:
16:98:5d:e0:b1:0b:66:d8:d9:d6:b9:a9:89:d0:34:31:9a:a6:
da:42:ba:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDEBD5FwCkPRTJ8V9DUxFQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0
NjExYWQwHhcNMjYwOTIxMTI1MDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODNkNTNkZmJhYzEwZjU5OWQ2ZWU4NzA2MzM0Mzc5NmVmNzk0MWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhql9RAswTkC1TAXsGSO833EzwU7z
C0dqBJK/DjMTRZNElRIT7Az+t3gN1Io4S49A3jjwgi6NaNT5pSY3sjbcekTRdg5m
f1Ypi0MyS4YyLV4NQ43nnW2NqhA09wsB8sTF5b0U6gvseAMw4Auak+ipl9uz1+nA
SxlOPuXS4EqR1cktloGHneypV2PkCSZjhR2/MyUo96VsXIVZ0Kur1ceYQsfL53Nn
jIBNM/4Q3CCGuYQXUoVJAsoV6NhyYX6DY+3C4Sp2PRgquCXVJGgoofmI1ST/Fznw
FNbThQdWYPzY70AhJ7hqK0zJhPDq5/V3MdZeh5ezMHLpzdXNb4jsGqatGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCg9U9+6wQ9ZnW7ocGM0N5bveUHYMB8GA1UdIwQY
MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct
YzVkODk1MDgxOGVjLzEvS0QxVDM3ckJEMW1kYnVod1l6UTNsdTk1UWRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj
LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8IMA0G
CSqGSIb3DQEBCwUAA4IBAQBy9K9jQ3v9eUHat9KsFQFuNXd3QKAjFTONi5sp3HQU
gdAExm4lfkszssV8DRus46srkBvK2Ix2P4uDaNu2XjVn4J28UoJZR5hsNs8rUuQJ
KENAwLFVS7VYHdWL/2t1BAlTDbWnRRjrqYc1V+YcSJhwz1AIXb9+ioGU6MXmZa3q
m6EJ1tnT0eGnmqB+fuH50cx1s7ONKOGvu63wsliCobYSqhbjoswPqhOnxDUz6j5b
65TFV6N1DLbyZOO+nTqOsxT1k3GEEIZO4wYzW15OM21Nj1RgxTz+TYp9yf+yMeW7
KSQdlgxHlTwKoBIWmF3gsQtm2NnWuamJ0DQxmqbaQrqo
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:47:57 2026 by rpki-client