Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/kyyrT6ssZy3Ua5TyQxZCy03gARA.roa
File: kyyrT6ssZy3Ua5TyQxZCy03gARA.roa (raw, json)
Hash identifier: qHwrzaRvgrVBIzsdcjfeHG6AbWPBUIULHi3BgRMaBqA=
Subject key identifier: 93:2C:AB:4F:AB:2C:67:2D:D4:6B:94:F2:43:16:42:CB:4D:E0:01:10
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 01A0861CC53BC5F59E81181413A92E9D600E
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/kyyrT6ssZy3Ua5TyQxZCy03gARA.roa
Signing time: Wed 09 Sep 2026 12:20:27 +0000
ROA not before: Wed 09 Sep 2026 12:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7310
IP address blocks: 195.50.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:1c:c5:3b:c5:f5:9e:81:18:14:13:a9:2e:9d:60:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Sep 9 12:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=932cab4fab2c672dd46b94f2431642cb4de00110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:2a:8b:ca:43:e1:92:05:0e:8d:7d:fb:6c:
32:a4:63:da:5c:ae:08:6d:da:73:72:b3:cc:00:f6:
2e:ab:d7:a4:3a:47:74:e2:de:b7:07:4b:25:d7:32:
bc:11:a5:6e:b2:60:fc:7c:f5:dd:70:d0:a0:96:cc:
ce:f4:8d:6c:dc:27:23:5e:07:db:9e:93:67:f7:bf:
30:26:a8:88:5c:8c:fe:15:55:a1:f5:49:ea:37:18:
6c:c6:05:8e:2b:6d:d5:55:d0:74:fc:2e:2f:0b:f3:
5c:a6:46:12:61:86:36:47:a6:15:99:58:6f:9e:81:
07:7d:da:b6:56:e2:97:a6:f1:e2:7d:ed:05:ff:a8:
66:e9:87:5b:98:ee:48:ad:d6:44:43:2a:43:c6:9b:
6a:6c:93:2e:57:ce:09:e9:09:ad:b9:19:ae:4e:31:
a4:e4:87:0c:43:3f:dd:22:0c:fb:88:77:25:29:04:
34:d0:51:22:13:82:d2:7b:b8:7a:48:b1:fe:d6:b2:
3e:be:65:78:37:17:66:37:b4:55:c0:a8:36:0f:45:
62:fe:4c:e0:a8:58:80:85:fa:77:8f:b9:06:95:a9:
bd:6c:f3:bb:e2:0b:c3:81:ca:b2:a4:9d:1c:fa:cf:
6c:31:99:7e:a9:2a:d1:c7:23:8c:4d:72:88:d5:24:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:AB:4F:AB:2C:67:2D:D4:6B:94:F2:43:16:42:CB:4D:E0:01:10
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/kyyrT6ssZy3Ua5TyQxZCy03gARA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.50.72.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a2:b4:9c:e8:7e:61:04:a1:89:2a:71:62:ed:c2:f9:6f:fd:
b4:d4:e6:9c:68:06:1c:ee:4f:72:ea:45:91:7f:1d:e9:da:f8:
e1:79:b1:83:07:20:65:35:9c:da:56:77:58:a4:72:e2:79:f9:
f0:bc:1e:78:26:b5:05:6e:c7:57:68:30:30:ef:bb:da:7b:3e:
61:6d:c6:54:12:59:b2:89:06:2e:d4:96:41:11:3f:d7:8e:8a:
e2:e1:70:54:3a:a7:d3:39:5a:3c:1c:83:ff:5f:d4:d1:94:18:
76:4b:79:90:b7:d5:c2:cd:36:86:67:0e:17:59:fe:dc:27:d3:
98:e8:e8:23:49:3c:ab:c2:e8:bb:88:b5:ee:48:62:b0:ca:d9:
60:9f:b9:44:c4:7c:f7:df:ef:cf:4b:ef:63:d1:e6:bd:44:37:
7d:83:5c:b1:ff:6a:e0:bf:16:40:88:de:09:b2:ef:9d:a7:d8:
40:9b:71:cd:c5:71:b8:02:ff:29:9d:d8:c2:ed:ba:04:f1:bb:
e0:d5:ed:d2:23:5c:3f:cb:95:75:9e:a5:59:04:c4:b2:16:8b:
4f:d6:20:28:7a:ae:dd:31:81:79:5b:77:e0:1c:50:bc:c8:4d:
03:15:ea:aa:82:56:13:cf:1e:da:25:3b:32:44:ba:a6:ee:1f:
da:94:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:46:00 2026 by rpki-client