Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/kcO4BOAkWp3hhCEc94FzIwrWhrI.roa
File: kcO4BOAkWp3hhCEc94FzIwrWhrI.roa (raw, json)
Hash identifier: NrtWTdf0j5FQGw747h0kekrVPakSWiurrTH39n7HJWo=
Subject key identifier: 91:C3:B8:04:E0:24:5A:9D:E1:84:21:1C:F7:81:73:23:0A:D6:86:B2
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 01A14429D4BA7E7427BD3F44447083B9D443
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/kcO4BOAkWp3hhCEc94FzIwrWhrI.roa
Signing time: Fri 16 Oct 2026 10:02:34 +0000
ROA not before: Fri 16 Oct 2026 10:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 84.247.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:29:d4:ba:7e:74:27:bd:3f:44:44:70:83:b9:d4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Oct 16 10:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91c3b804e0245a9de184211cf78173230ad686b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:95:4c:ed:cd:d2:63:68:2c:df:a1:05:8a:
c0:2f:62:e6:71:2d:19:f2:88:d3:2a:cf:94:60:19:
15:7d:93:3d:4c:bb:98:91:35:c6:1b:51:6a:01:cf:
f5:fc:58:70:bb:bb:cf:7a:ee:cc:31:2e:18:bd:a9:
d2:3d:48:56:27:8f:65:cf:ae:70:35:a9:cc:2b:8f:
77:70:ac:e8:43:bf:7a:49:f2:47:b0:70:4c:93:68:
a6:89:52:c4:a2:30:f2:91:6c:db:e9:2f:bc:42:f9:
b9:c1:1e:1c:e4:c3:75:7a:3a:21:af:3b:ad:4d:74:
ad:2a:00:f3:e6:13:6a:eb:77:5a:42:1e:ce:a3:4a:
66:c3:6b:44:b6:81:29:b9:c0:82:7d:6b:e1:2f:ca:
d7:e8:ee:0e:d8:1b:7a:27:cb:30:ab:61:bd:a8:c0:
ed:9f:ef:b2:55:f2:16:94:76:e3:ce:7f:76:6f:be:
1f:71:cd:42:1c:43:3e:05:b9:38:1d:a3:14:b6:2e:
c5:87:c9:48:c5:7f:57:4c:de:86:f8:56:b0:69:6f:
5f:25:06:07:ab:0c:b1:f3:dd:63:77:0f:45:c8:66:
a3:6e:38:9b:80:ed:19:07:31:0e:dc:ee:fc:97:c2:
9d:67:93:90:a7:39:5c:76:43:36:9c:06:fd:a6:47:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:B8:04:E0:24:5A:9D:E1:84:21:1C:F7:81:73:23:0A:D6:86:B2
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/kcO4BOAkWp3hhCEc94FzIwrWhrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.65.0/24
Signature Algorithm: sha256WithRSAEncryption
66:90:66:33:22:1f:73:12:46:1b:e4:ff:2e:e2:e2:30:8b:14:
67:73:95:2f:8d:a3:3e:27:62:a4:a4:28:ab:3a:bf:05:8e:3c:
32:98:90:e1:5b:d4:9a:26:29:37:7a:b1:d0:36:da:27:aa:af:
30:93:6e:64:56:1c:35:32:02:34:66:cd:09:47:2d:f1:7a:36:
4c:82:e4:d6:09:86:4b:6d:e8:94:7c:e2:36:87:1e:c4:19:35:
ab:e1:df:0c:77:89:89:e2:c3:c3:8d:38:e6:52:ad:49:ed:e9:
cc:a2:53:58:31:5d:85:82:90:c8:70:a6:f1:0b:c1:a8:65:bc:
46:c1:bd:18:3a:a9:9d:7c:ec:73:fa:a7:11:2a:81:3d:87:15:
12:26:12:7a:07:a2:3e:cd:4d:36:68:b9:d9:c4:50:ce:51:13:
e1:e4:fb:ad:ac:77:a1:c9:ff:62:bb:50:e6:cb:27:e2:23:b1:
09:fe:0b:47:33:00:49:72:57:bd:f8:44:f7:81:5d:03:e2:ba:
61:8c:ac:e6:7a:94:84:ef:e8:12:a4:a6:0e:a3:e2:f6:cd:5c:
1f:cc:e4:70:eb:a0:e6:39:55:13:4e:82:b6:96:f7:73:6a:fc:
b7:18:6d:79:2c:40:db:24:56:92:c5:af:68:4c:b1:e5:8c:c2:
ec:02:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:09 2026 by rpki-client