Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/kcWsgNsO-zsLi55uxKh_ieb4THg.roa
File: kcWsgNsO-zsLi55uxKh_ieb4THg.roa (raw, json)
Hash identifier: 2DLnfxEucvd1UL8/HjIN87OVJwBqC+8Wb7HGdE5Dovk=
Subject key identifier: 91:C5:AC:80:DB:0E:FB:3B:0B:8B:9E:6E:C4:A8:7F:89:E6:F8:4C:78
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 01A022B4C69BD9BCAB31719CFF6BB32C3ADE
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/kcWsgNsO-zsLi55uxKh_ieb4THg.roa
Signing time: Fri 21 Aug 2026 05:04:27 +0000
ROA not before: Fri 21 Aug 2026 05:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213881
IP address blocks: 94.20.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:b4:c6:9b:d9:bc:ab:31:71:9c:ff:6b:b3:2c:3a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Aug 21 05:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91c5ac80db0efb3b0b8b9e6ec4a87f89e6f84c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:90:ea:48:c9:cb:4b:8b:f1:fd:e6:75:6b:
e5:4a:1f:07:d0:3b:66:ca:68:8c:4a:32:b6:1b:6d:
5b:92:46:72:15:13:34:4c:22:90:a2:c4:3d:22:82:
68:76:a0:59:da:e1:8a:61:d3:17:10:a6:c7:83:6f:
33:6f:df:f8:bb:aa:38:d6:c0:03:00:e9:02:a0:d2:
ec:23:5c:98:e2:45:90:08:95:ac:22:58:9e:2e:e7:
82:5a:d5:69:bb:3e:d3:35:df:e2:39:ff:db:9d:9c:
e3:bf:8b:32:99:3a:20:4d:70:b7:e5:38:68:45:c4:
3c:dd:f5:42:5a:94:07:00:ae:17:68:00:b5:bd:67:
0c:b7:46:1f:e5:3e:ff:e6:d4:2f:c8:ea:7f:79:88:
c2:69:01:ea:9f:57:28:24:e1:2c:81:ba:91:72:66:
38:97:bb:02:74:9f:75:22:5d:92:18:ee:a7:e7:79:
d6:eb:59:78:c8:d3:9b:28:e3:3c:1b:89:f3:51:c9:
56:03:cf:17:2b:ee:8d:9d:50:0b:28:d2:07:13:94:
c4:5e:e0:a9:a7:34:71:06:7d:a8:e1:c9:85:ca:83:
8e:6e:7a:14:2c:ee:5b:b6:2a:2e:86:25:cf:ea:75:
d3:9a:14:a6:e1:37:08:b2:74:5b:a9:68:90:ee:38:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C5:AC:80:DB:0E:FB:3B:0B:8B:9E:6E:C4:A8:7F:89:E6:F8:4C:78
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/kcWsgNsO-zsLi55uxKh_ieb4THg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.20.141.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b1:79:f1:a5:b4:60:24:63:6c:73:9a:de:2c:d2:ab:69:a3:
b1:83:2e:54:8a:40:9e:0c:11:01:01:ed:ba:9f:e0:e0:25:67:
77:62:19:62:f7:0f:d2:a2:2d:ae:15:bd:88:57:7f:9e:2e:8e:
d7:0c:61:fc:e1:0b:ac:bb:f7:fb:f7:98:04:b7:6f:eb:53:59:
be:d1:4b:fa:9e:f3:a3:6c:a1:21:23:c7:09:2d:3c:bd:4c:80:
76:6e:5a:77:d3:54:27:45:83:e5:96:dc:fb:7e:f7:fa:22:c7:
41:fd:20:80:de:77:8c:a4:44:3a:a3:7e:72:c5:2a:76:51:29:
06:1a:8a:a0:40:be:99:d9:70:69:11:02:93:59:87:ed:70:de:
df:da:7d:38:62:49:83:7f:01:54:c1:cb:f3:7a:4a:17:1f:fa:
8b:93:e0:9c:0b:be:ad:c4:9b:b0:aa:9e:5f:df:1d:c2:7e:c5:
90:c6:0f:1c:78:2b:4f:e1:bc:58:f0:2c:8e:d6:e0:7f:78:59:
dc:d4:86:34:8f:af:3d:ec:68:2c:82:19:a9:b2:93:2b:f0:21:
a1:7a:98:1e:45:66:eb:f9:aa:26:a7:eb:1e:ab:94:d2:29:f3:
8e:3e:e0:c5:00:a5:af:08:da:1e:a7:9c:02:f4:e7:47:72:59:
00:11:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:56:00 2026 by rpki-client