Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/ks4rcCnYGbAZseomOd2Yfr0zDxU.roa
File: ks4rcCnYGbAZseomOd2Yfr0zDxU.roa (raw, json)
Hash identifier: jhqTfs4Y7TCVLQDf9QvU6rDDBDK9avjiClsJAwUoI4s=
Subject key identifier: 92:CE:2B:70:29:D8:19:B0:19:B1:EA:26:39:DD:98:7E:BD:33:0F:15
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A0856DE90B5E16E7082332E09877B4994B
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/ks4rcCnYGbAZseomOd2Yfr0zDxU.roa
Signing time: Wed 09 Sep 2026 09:09:27 +0000
ROA not before: Wed 09 Sep 2026 09:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3254
IP address blocks: 62.244.0.0/18 maxlen: 18
62.244.48.0/22 maxlen: 22
193.193.192.0/19 maxlen: 19
193.193.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:6d:e9:0b:5e:16:e7:08:23:32:e0:98:77:b4:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 9 09:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92ce2b7029d819b019b1ea2639dd987ebd330f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:7f:e8:3d:7f:ad:f4:93:32:fd:ac:52:91:
a0:7b:26:12:0a:17:d4:54:ef:fd:28:18:f3:4f:5c:
03:bc:54:fd:f5:62:e2:90:fb:57:df:eb:23:7f:2e:
5a:41:f0:1d:9c:74:9a:3e:d5:8c:21:04:b7:9e:55:
2f:a6:1e:83:94:58:7c:7d:aa:07:63:ac:82:3b:59:
a7:6f:7d:8c:28:ab:e1:b8:ae:29:ca:ea:38:fd:73:
5a:b6:34:b6:0d:99:d4:0b:8d:79:cf:62:a5:cd:bf:
52:84:bf:1c:00:12:c0:93:de:ae:c2:88:0c:1f:9f:
ae:44:cd:53:4b:41:57:85:a3:d6:6f:43:61:da:93:
c3:01:4a:dd:f6:a8:33:ea:19:cc:15:67:ef:7b:20:
7c:cf:28:d4:53:a3:5c:b2:87:1e:fd:85:52:78:36:
bc:1c:18:a3:55:ab:67:92:d6:08:6d:af:d1:73:f4:
56:a8:02:e2:cc:68:bc:44:b1:f3:02:08:34:0b:4a:
7a:fb:9c:d4:a7:af:75:16:7c:85:dc:9e:03:f7:f3:
f2:61:3a:1f:7f:cd:e2:40:4c:63:0f:6c:a1:c9:41:
41:6a:6e:1e:a5:31:ad:4c:4a:95:40:1a:12:03:d7:
95:73:17:36:e8:10:75:e3:07:1f:30:32:6b:95:56:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CE:2B:70:29:D8:19:B0:19:B1:EA:26:39:DD:98:7E:BD:33:0F:15
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/ks4rcCnYGbAZseomOd2Yfr0zDxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.0.0/18
193.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
61:b0:55:0b:63:75:ba:c1:4f:4b:0b:ed:ba:8e:2e:8e:49:88:
ed:e0:ac:a0:68:32:f2:2d:0d:a9:8d:15:08:cf:60:40:94:fb:
25:8b:d7:1f:38:d8:27:a9:15:eb:08:3d:2c:4c:fb:8a:3e:ba:
9c:20:e6:19:10:fe:26:87:18:17:4f:5e:9a:41:55:40:01:57:
62:f8:70:ca:75:98:d9:89:35:6b:56:62:76:f9:60:6d:36:76:
2b:5b:1f:f7:85:f2:cb:ef:6c:aa:a7:1f:8a:05:7c:03:93:be:
2d:95:6f:fe:46:6f:68:04:8b:6c:2b:62:1f:a4:32:d6:55:fa:
32:be:c4:16:b6:ad:14:dc:cb:86:31:88:83:58:9c:23:1d:b5:
42:f0:d2:fd:70:8e:dd:95:48:fb:23:76:24:f6:33:12:0d:c9:
30:e3:a4:c0:07:90:05:3f:44:6f:f2:08:b0:89:b6:75:30:fc:
4c:9e:3e:96:55:7e:fc:fa:f8:d1:e7:c7:bc:a0:ad:65:33:1b:
80:fa:cc:1f:d9:a1:1f:a8:9c:1a:d1:a6:ff:3f:6b:88:fc:c2:
73:bf:d1:61:73:0c:51:ee:1d:16:ec:64:1f:9f:fe:5d:dd:f2:
52:ea:9d:b7:32:a0:8c:54:6c:4a:5f:8d:09:f9:9c:81:b7:7e:
ff:fc:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:51:47 2026 by rpki-client