Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/kdWxwdb3--Gp8fSsVOp_pQmv_K4.roa
File: kdWxwdb3--Gp8fSsVOp_pQmv_K4.roa (raw, json)
Hash identifier: 2aE+DR6z8Nipyh7a4rYx1FZfn1tSWOEnntH0xVl6zkI=
Subject key identifier: 91:D5:B1:C1:D6:F7:FB:E1:A9:F1:F4:AC:54:EA:7F:A5:09:AF:FC:AE
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 01A1C947EDE7AA255FA24A87ADD74F99E906
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/kdWxwdb3--Gp8fSsVOp_pQmv_K4.roa
Signing time: Wed 11 Nov 2026 06:24:56 +0000
ROA not before: Wed 11 Nov 2026 06:24:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 193.148.247.0/24 maxlen: 24
195.93.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:47:ed:e7:aa:25:5f:a2:4a:87:ad:d7:4f:99:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Nov 11 06:24:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91d5b1c1d6f7fbe1a9f1f4ac54ea7fa509affcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:f3:77:a2:ab:30:5e:7e:a2:6c:f2:79:3f:
69:a8:33:e7:55:02:e2:a4:ac:48:55:06:92:ec:49:
8f:d4:2d:2e:5b:e2:6b:b3:0f:cb:18:cb:a6:5f:75:
27:74:35:b9:a8:8a:1a:4c:24:cb:b1:c8:5a:4d:1d:
5a:f3:5a:fa:35:af:85:a1:a2:ad:f6:dd:2d:1e:19:
41:0e:d9:08:78:8a:9d:86:47:bf:ac:2b:84:bd:53:
a3:13:9d:3f:27:e5:d9:ed:68:18:82:17:8b:95:05:
d0:1e:2a:3f:41:79:bd:ef:d9:e1:77:f3:f4:6c:03:
93:fa:db:38:a5:f6:30:74:49:39:a2:30:1e:ff:39:
20:b0:d1:ec:c2:4d:6a:63:7a:94:09:da:fa:6e:53:
2e:c6:d5:60:a9:b8:51:a7:08:5b:65:52:27:1c:4e:
fb:cc:8a:be:34:44:3a:0d:91:9b:93:b9:83:cc:a9:
af:73:b1:65:83:f8:12:90:dc:69:8e:7f:c1:c1:54:
9d:95:c3:6b:95:ee:22:0c:f3:77:de:b8:68:19:a3:
cc:4d:ec:a6:f0:de:1f:a6:71:52:8c:2b:5d:42:17:
de:62:fb:ad:c5:fc:47:b6:e4:1f:58:b9:2a:b4:c3:
42:e2:0b:c2:97:81:1f:f2:83:a5:01:38:40:49:76:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:B1:C1:D6:F7:FB:E1:A9:F1:F4:AC:54:EA:7F:A5:09:AF:FC:AE
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/kdWxwdb3--Gp8fSsVOp_pQmv_K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.247.0/24
195.93.245.0/24
Signature Algorithm: sha256WithRSAEncryption
54:68:dc:aa:52:8a:58:00:09:1e:ff:e3:dd:a1:9e:1b:4c:2d:
9f:6a:5b:ae:ad:8c:f5:9f:12:05:d4:7d:83:e5:7a:04:08:ee:
ec:e5:2f:ab:4e:e6:1b:95:76:d5:fc:4f:32:56:91:68:f6:d7:
8f:e6:4c:1f:34:99:e7:ec:29:e1:b4:88:db:1b:d3:b1:7c:8b:
0a:fb:13:e1:a7:14:19:33:03:71:e2:42:ff:58:01:8b:fa:6d:
1c:24:6a:9e:62:d0:00:d4:fd:ac:8e:fd:c3:f6:fa:7c:9a:6c:
03:fe:7e:88:d4:26:e6:4a:16:e0:48:78:94:52:97:bc:85:00:
b8:f8:14:53:3b:07:73:0c:53:e6:93:04:d9:30:9e:6a:e3:63:
ce:b4:be:d0:c1:6a:39:00:19:1c:2c:61:26:5f:26:d7:b2:9f:
f2:e8:d3:c2:6f:69:2b:1f:0d:0b:35:15:4a:33:c6:24:b5:f7:
1f:2b:b3:e2:60:1e:99:68:1f:4c:99:e8:1b:c1:fe:75:f9:c6:
1c:a8:2a:76:ef:14:65:20:bd:7c:33:f2:ec:5e:8a:31:c6:b0:
b3:8f:23:6a:64:2b:66:4e:db:ad:b8:d8:b6:53:74:6b:1c:30:
13:fe:c3:76:c7:9b:e4:59:5d:72:ea:25:0f:11:fb:ca:c8:eb:
5a:48:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:44:05 2026 by rpki-client