Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/rkBhirDw6cwGmYoKR4iC3hOackU.roa
File: rkBhirDw6cwGmYoKR4iC3hOackU.roa (raw, json)
Hash identifier: YwBhd1vKI0Ytq6+5JsB0zVmdhHIcO9WNEw9TuJr99XA=
Subject key identifier: AE:40:61:8A:B0:F0:E9:CC:06:99:8A:0A:47:88:82:DE:13:9A:72:45
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019F148879EB6373ADD81B638180B0D297A6
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/rkBhirDw6cwGmYoKR4iC3hOackU.roa
Signing time: Mon 29 Jun 2026 17:58:36 +0000
ROA not before: Mon 29 Jun 2026 17:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59848
IP address blocks: 138.16.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:88:79:eb:63:73:ad:d8:1b:63:81:80:b0:d2:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jun 29 17:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae40618ab0f0e9cc06998a0a478882de139a7245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:5b:02:d1:b3:f8:94:7b:c4:88:cf:f6:bf:
63:5a:fc:98:a0:26:9b:32:0b:f3:b7:05:46:a6:04:
70:ae:e0:73:04:c7:1b:93:4a:8c:9e:ce:81:eb:93:
96:5c:40:90:52:4b:ba:25:8f:ad:a5:60:1b:e4:f3:
08:51:6f:59:de:27:ae:58:1e:1b:40:a2:46:c7:6c:
31:3a:15:6a:78:dd:ed:c0:8f:4a:b8:32:00:f6:fc:
e7:2f:25:0a:27:4f:ab:85:6c:9a:91:ea:3b:5f:bd:
f1:20:07:62:c2:6c:0c:24:1f:cf:13:45:8c:3c:9e:
6f:a4:ef:89:c0:8c:54:47:60:19:d9:2d:88:ca:91:
c4:38:7c:e7:7b:2b:aa:2a:25:6c:fe:e2:c2:75:27:
a5:b2:27:d3:50:19:7b:e0:cc:9d:e5:d9:30:ea:01:
11:88:aa:13:9e:ec:7f:ca:c8:e9:87:e4:4c:87:c3:
74:54:32:07:9e:8d:4b:c7:9f:30:a0:a8:0a:6c:84:
99:5e:f8:03:8e:f8:32:5c:e7:7d:3d:81:b9:f6:3b:
a3:57:4d:e6:f0:62:78:0e:2b:61:db:d9:d5:1b:9f:
00:f0:cd:2e:38:34:58:87:4f:19:50:80:ef:12:f6:
fc:33:d8:de:ff:54:fa:8b:99:77:bc:c7:78:d7:2d:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:61:8A:B0:F0:E9:CC:06:99:8A:0A:47:88:82:DE:13:9A:72:45
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/rkBhirDw6cwGmYoKR4iC3hOackU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.16.131.0/24
Signature Algorithm: sha256WithRSAEncryption
57:50:2d:1d:a3:9a:9f:09:cc:4c:58:21:13:b2:52:52:d2:9c:
70:38:32:84:d6:e4:ec:ad:4f:91:ac:7c:09:09:86:27:d0:b0:
2f:85:fc:a2:b7:90:a0:a0:d5:60:54:93:12:a0:e0:65:79:1f:
bf:44:be:8c:f2:cf:a5:a4:fe:b4:09:52:17:6f:fc:3e:2e:8b:
9b:b9:7f:4d:bb:22:c5:08:ef:b6:6a:f8:b3:ac:6b:f1:fc:f9:
c1:bf:c3:7e:83:25:8b:b4:78:fb:11:23:37:64:b2:d4:f1:cc:
e9:c6:2b:2b:69:bf:33:63:02:f8:61:20:64:e6:f4:e7:0f:8c:
5c:ca:c1:44:5c:33:75:5f:0d:8d:89:28:6d:f9:51:de:7b:d6:
cc:cf:bf:52:df:ed:0e:2d:d1:c7:0c:fa:46:2e:6a:83:c7:55:
03:0c:41:14:07:da:d2:6f:4a:e3:2e:b5:35:89:cf:22:00:8b:
db:40:f7:bd:fa:8e:53:23:3b:19:74:db:a6:99:6a:37:72:b6:
24:83:e1:95:2d:f2:37:4a:e3:a7:3f:a2:56:a5:ef:1e:0d:bf:
cb:20:33:49:1b:44:c2:09:fc:ee:72:26:18:54:f9:96:17:ac:
c4:2f:95:38:58:28:16:af:c8:f4:99:12:74:02:33:22:8e:ed:
ab:9c:36:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:24 2026 by rpki-client