Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/777069-c077-4682-8890-b06a0b69be9b/1/RcKyrDh41gVDJ-tOldEpKpfJjO4.roa
File: RcKyrDh41gVDJ-tOldEpKpfJjO4.roa (raw, json)
Hash identifier: hs2sgfrkyyTu12fY7HvNp1TsZXI9+e8PIAQYThqMrO0=
Subject key identifier: 45:C2:B2:AC:38:78:D6:05:43:27:EB:4E:95:D1:29:2A:97:C9:8C:EE
Certificate issuer: /CN=eed6b0e87a65780a0a1996b5c5f5152596e12270
Certificate serial: 01A08FA97A89E30BC5D94DDD5F82FA2BF3B4
Authority key identifier: EE:D6:B0:E8:7A:65:78:0A:0A:19:96:B5:C5:F5:15:25:96:E1:22:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7taw6HpleAoKGZa1xfUVJZbhInA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777069-c077-4682-8890-b06a0b69be9b/1/RcKyrDh41gVDJ-tOldEpKpfJjO4.roa
Signing time: Fri 11 Sep 2026 08:50:43 +0000
ROA not before: Fri 11 Sep 2026 08:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199003
IP address blocks: 193.17.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777069-c077-4682-8890-b06a0b69be9b/1/7taw6HpleAoKGZa1xfUVJZbhInA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777069-c077-4682-8890-b06a0b69be9b/1/7taw6HpleAoKGZa1xfUVJZbhInA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7taw6HpleAoKGZa1xfUVJZbhInA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:a9:7a:89:e3:0b:c5:d9:4d:dd:5f:82:fa:2b:f3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed6b0e87a65780a0a1996b5c5f5152596e12270
Validity
Not Before: Sep 11 08:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45c2b2ac3878d6054327eb4e95d1292a97c98cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:d5:22:dd:38:34:25:d5:3d:f0:dc:62:d6:
03:42:8c:9d:72:a8:c8:69:3f:9e:54:f9:55:5c:19:
1d:81:cb:40:75:48:af:05:2e:5d:79:a6:85:70:2e:
f2:84:3b:17:09:ef:9f:96:71:99:9a:00:32:c3:23:
d3:9b:2a:95:bd:d2:4b:13:de:27:31:08:3c:70:7b:
17:1c:60:f9:98:b5:09:44:b8:79:69:75:15:6c:fe:
c6:56:8a:40:be:c0:40:80:4e:08:f2:3d:ab:a5:bb:
f5:62:74:d6:74:ca:ab:cd:b4:2d:bd:63:f5:c0:22:
43:2a:0e:e8:40:18:d2:21:61:2c:48:61:94:57:04:
9c:02:dd:bf:92:a3:d2:99:23:6b:0e:bf:5b:d1:9f:
90:e2:75:6c:3f:bc:dc:ea:f3:68:5b:00:cf:5c:f0:
c2:2c:59:aa:4c:2a:ab:d7:a7:0e:b2:5c:2c:ce:67:
6f:bf:fa:94:f2:65:ba:70:c6:d3:d4:01:6a:3c:9e:
be:b8:a4:bf:ca:26:0c:ae:7c:86:a2:7d:a0:74:fd:
53:c5:4f:49:09:17:fe:60:12:83:b8:7c:77:5c:04:
f0:8b:c7:72:83:20:b6:93:78:52:bc:97:ca:69:06:
de:37:6a:ee:ed:57:ce:ce:1f:35:00:4d:77:6e:d7:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C2:B2:AC:38:78:D6:05:43:27:EB:4E:95:D1:29:2A:97:C9:8C:EE
X509v3 Authority Key Identifier:
keyid:EE:D6:B0:E8:7A:65:78:0A:0A:19:96:B5:C5:F5:15:25:96:E1:22:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7taw6HpleAoKGZa1xfUVJZbhInA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777069-c077-4682-8890-b06a0b69be9b/1/RcKyrDh41gVDJ-tOldEpKpfJjO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777069-c077-4682-8890-b06a0b69be9b/1/7taw6HpleAoKGZa1xfUVJZbhInA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.199.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4d:51:36:a7:6d:ef:91:64:3f:e1:07:31:0e:1a:07:3e:6e:
cd:ed:25:50:08:24:af:d5:2e:c2:e4:3d:91:0e:e7:44:8c:d1:
58:1c:6b:cf:c8:80:ca:41:74:e4:50:d2:6d:08:2a:d5:e3:4a:
28:62:02:03:ae:34:95:da:92:3f:5c:0a:53:99:97:01:ae:2f:
9b:02:4b:c7:d9:22:89:ce:f1:08:a5:7e:e8:f5:ac:79:b6:23:
d5:5f:65:62:bb:54:75:9a:37:09:cd:2c:bc:a8:dd:7d:11:ac:
85:d5:ef:62:9a:8f:ce:51:72:6b:76:ec:21:8c:e3:69:82:3a:
82:15:b1:13:63:58:73:95:d9:d1:a9:f3:1a:a1:77:1c:32:66:
59:79:28:93:24:68:72:bf:d0:b0:68:67:b5:61:e2:65:17:7a:
22:c0:94:60:99:02:e9:d5:47:90:39:43:7d:a6:86:e5:01:b3:
fe:34:06:15:c1:35:c0:0e:0d:9c:64:7d:10:6d:dc:19:ba:6a:
76:d4:ba:13:da:74:3c:76:81:b5:c2:de:30:f7:de:7d:89:0f:
0a:bd:22:e7:76:46:85:7d:0d:a1:d6:ee:33:21:e3:1c:ec:3e:
51:57:21:88:e7:2e:fb:a2:87:a8:64:eb:d2:5e:06:a1:58:42:
51:88:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:08:07 2026 by rpki-client