Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kZUdjyeFOYizNVfxhISn1MVpKds.roa
File: kZUdjyeFOYizNVfxhISn1MVpKds.roa (raw, json)
Hash identifier: hG16ssCRxDIP3XCCGj3umxt7ViUD86jhV7mpk+Ppk+4=
Subject key identifier: 91:95:1D:8F:27:85:39:88:B3:35:57:F1:84:84:A7:D4:C5:69:29:DB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A18E61A44B4668851C3C40E52415C81F18
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kZUdjyeFOYizNVfxhISn1MVpKds.roa
Signing time: Fri 30 Oct 2026 19:55:25 +0000
ROA not before: Fri 30 Oct 2026 19:55:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219122
IP address blocks: 9.247.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:61:a4:4b:46:68:85:1c:3c:40:e5:24:15:c8:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 30 19:55:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91951d8f27853988b33557f18484a7d4c56929db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:12:6c:c3:63:c0:4c:48:6a:df:88:90:22:
d4:5d:9e:cc:f6:be:27:1f:0a:25:d5:7e:8f:12:b8:
64:50:72:ff:36:be:81:7e:f5:ee:51:d4:92:94:fd:
af:5a:35:5b:fb:26:3e:4a:f5:78:fc:ac:e7:04:b5:
a6:1a:7a:38:a0:6d:17:b0:b1:31:96:ae:a1:93:41:
dc:3a:47:18:02:6c:62:a4:74:80:f3:e5:fd:82:d3:
19:f5:a0:24:ac:1c:d9:c3:4b:de:c2:9a:f3:ad:f3:
31:2f:f8:81:55:c9:86:ce:5c:9d:ea:9b:c9:45:2d:
11:7b:76:46:13:a1:8a:3f:cc:aa:ae:0b:7d:ae:6d:
ac:21:4f:01:e4:6d:3d:04:a8:f6:1f:86:35:da:30:
f4:35:b6:19:0f:ef:c5:a7:7d:34:75:5a:e0:83:77:
0d:a9:9a:63:33:a3:e3:2a:6d:8d:7f:3f:e4:fd:89:
c1:5a:6e:2c:a6:5c:ee:7c:c5:79:94:03:de:eb:77:
69:c7:ce:cc:51:6f:b4:bc:66:89:50:92:20:49:67:
74:a8:29:6b:1e:0c:60:c4:f6:74:4c:d9:44:a8:48:
03:53:c7:2f:73:c7:26:bf:20:68:7e:51:f7:7e:49:
c2:5d:f1:37:d7:da:bb:ee:cb:d7:39:1e:4a:2c:8a:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:95:1D:8F:27:85:39:88:B3:35:57:F1:84:84:A7:D4:C5:69:29:DB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kZUdjyeFOYizNVfxhISn1MVpKds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9f:50:d1:8e:02:92:b1:15:e1:71:9f:8c:c5:ae:1a:a8:11:
bd:9c:df:93:ae:1b:36:78:e6:f0:3f:1c:ac:17:ff:5f:18:02:
71:5c:c2:0c:ad:da:89:a0:ea:0f:d2:3a:68:95:66:ff:e2:00:
b2:a2:23:2e:b7:c2:c9:67:18:ba:3c:5e:79:9c:8d:e1:33:6d:
22:4d:98:73:e5:94:f1:e9:00:b3:a5:03:25:1e:87:21:84:e9:
a7:3f:fa:33:a2:e7:51:e3:5e:e7:e9:33:76:ef:c6:33:d4:c8:
bd:b5:76:7f:97:2a:14:b5:91:6f:2f:bc:26:0a:7c:f9:d4:32:
90:a0:64:97:a7:0f:1c:e8:9a:20:ab:af:0b:02:01:9f:74:9e:
a3:3b:ba:2b:f4:c3:a4:ad:d7:9c:c2:15:d1:09:0f:b9:90:e3:
8a:62:f1:d6:1a:c1:8e:8d:34:0a:eb:75:3b:f1:48:9d:d7:ad:
d5:e1:21:1d:ca:8f:db:d8:36:77:40:ac:f2:f1:a9:fc:95:c4:
bd:59:74:37:11:3b:a6:4e:11:9f:15:4f:91:dc:a4:75:3a:bc:
92:11:b7:9d:55:94:4c:0e:53:b7:7c:70:1e:86:15:53:94:7e:
98:b9:1d:a8:bd:86:06:22:76:d7:79:47:f4:7e:3b:2b:e8:85:
a3:19:c9:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGOYaRLRmiFHDxA5SQVyB8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMDMwMTk1NTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTk1MWQ4ZjI3ODUzOTg4YjMzNTU3ZjE4NDg0YTdkNGM1NjkyOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwycSbMNjwExIat+IkCLUXZ7M9r4n
Hwol1X6PErhkUHL/Nr6BfvXuUdSSlP2vWjVb+yY+SvV4/KznBLWmGno4oG0XsLEx
lq6hk0HcOkcYAmxipHSA8+X9gtMZ9aAkrBzZw0vewprzrfMxL/iBVcmGzlyd6pvJ
RS0Re3ZGE6GKP8yqrgt9rm2sIU8B5G09BKj2H4Y12jD0NbYZD+/Fp300dVrgg3cN
qZpjM6PjKm2Nfz/k/YnBWm4splzufMV5lAPe63dpx87MUW+0vGaJUJIgSWd0qClr
HgxgxPZ0TNlEqEgDU8cvc8cmvyBoflH3fknCXfE319q77svXOR5KLIrPFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJGVHY8nhTmIszVX8YSEp9TFaSnbMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEva1pVZGp5ZUZPWWl6TlZmeGhJU24xTVZwS2RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACfeQMA0G
CSqGSIb3DQEBCwUAA4IBAQB6n1DRjgKSsRXhcZ+Mxa4aqBG9nN+Trhs2eObwPxys
F/9fGAJxXMIMrdqJoOoP0jpolWb/4gCyoiMut8LJZxi6PF55nI3hM20iTZhz5ZTx
6QCzpQMlHochhOmnP/ozoudR417n6TN278Yz1Mi9tXZ/lyoUtZFvL7wmCnz51DKQ
oGSXpw8c6Jogq68LAgGfdJ6jO7or9MOkrdecwhXRCQ+5kOOKYvHWGsGOjTQK63U7
8Uid163V4SEdyo/b2DZ3QKzy8an8lcS9WXQ3ETumThGfFU+R3KR1OrySEbedVZRM
DlO3fHAehhVTlH6YuR2ovYYGInbXeUf0fjsr6IWjGcnn
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:37 2026 by rpki-client