Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/kKczWo-3YbCcWORgD8y9IyNeRV8.roa
File: kKczWo-3YbCcWORgD8y9IyNeRV8.roa (raw, json)
Hash identifier: LVH9yAsyNks89sVKmghut1GryJminUwWlqe58gmKuq4=
Subject key identifier: 90:A7:33:5A:8F:B7:61:B0:9C:58:E4:60:0F:CC:BD:23:23:5E:45:5F
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019CFC817BA771D33F9215F0997BE206CFBA
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/kKczWo-3YbCcWORgD8y9IyNeRV8.roa
Signing time: Tue 17 Mar 2026 15:54:29 +0000
ROA not before: Tue 17 Mar 2026 15:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49181
IP address blocks: 176.96.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:81:7b:a7:71:d3:3f:92:15:f0:99:7b:e2:06:cf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Mar 17 15:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90a7335a8fb761b09c58e4600fccbd23235e455f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:8a:f0:15:93:b2:79:5c:73:d0:df:1d:47:
87:22:f7:81:78:10:9a:ee:fa:51:c8:8f:60:97:af:
6b:98:e8:f6:f0:6f:31:0c:08:48:de:4f:de:d9:f0:
74:4c:e7:dc:5d:d8:8e:05:f9:89:3f:50:08:30:91:
4e:c2:89:40:a8:ab:87:f2:b0:34:ee:a9:34:21:30:
a5:b8:87:7a:b7:6d:80:9f:83:43:9a:3b:d3:ed:88:
9c:ad:ca:7a:2a:02:2f:12:a3:97:90:2e:45:c9:cf:
48:2f:18:c3:dc:f6:02:d5:76:76:65:bd:04:5e:34:
51:a6:65:3e:3b:70:e5:fa:0b:b9:4d:d4:ca:f9:c8:
a6:32:62:21:8e:0a:63:36:4e:36:ce:25:b6:5c:5f:
15:ac:9e:51:ef:d9:32:31:5c:0b:c0:de:e2:24:1e:
b2:32:e6:46:04:db:09:5e:97:0a:f5:e1:05:69:52:
5c:6c:73:9f:0c:9b:41:5b:95:91:da:e8:70:2d:c5:
3f:3e:44:a3:d5:73:a2:26:fd:f9:ee:e5:02:f7:8d:
07:bd:6a:5c:88:73:80:8e:a6:c0:56:85:3c:59:65:
d2:c6:3c:df:0b:7d:4d:c3:27:5a:b2:ac:e4:b9:7c:
fd:e0:8c:ff:47:c3:33:c8:c7:59:2c:53:64:62:5f:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A7:33:5A:8F:B7:61:B0:9C:58:E4:60:0F:CC:BD:23:23:5E:45:5F
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/kKczWo-3YbCcWORgD8y9IyNeRV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.226.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e1:cc:14:12:8f:39:27:d1:0e:26:74:8a:59:48:8f:00:50:
76:eb:bd:29:5a:32:be:56:fb:08:a6:89:41:86:b9:69:27:94:
00:16:da:e6:b3:3c:a0:57:f4:f4:48:fa:58:e5:2f:91:12:96:
08:3f:4e:19:0f:fd:a1:3c:42:42:3b:a8:dd:e2:a0:39:7f:59:
52:99:15:b4:76:fa:1c:98:b2:9c:d9:a7:7c:70:be:cd:15:79:
c2:57:63:9e:25:37:39:53:77:bb:7b:a4:b8:7f:16:db:ed:f6:
74:0d:d7:29:8f:cc:c0:b8:f8:b2:c4:de:11:5f:ec:b5:2b:0a:
49:78:6e:89:db:99:5c:59:d8:61:ef:32:c6:13:ed:73:dc:9e:
1a:29:d9:61:0d:6a:32:a8:8f:ca:11:96:7c:87:26:22:24:a2:
c6:52:1a:ca:d1:1d:e2:0b:6c:2a:fb:24:46:ce:1e:83:93:b2:
83:33:18:9f:80:a0:07:79:2f:26:7a:dc:95:21:a5:48:b1:8d:
8e:c8:8c:80:0b:ec:e9:e2:25:77:86:af:81:43:a8:08:e6:6b:
e6:6b:76:04:46:8f:af:65:db:0c:7f:62:ee:2e:6f:03:c8:66:
0f:d9:2b:01:0a:82:10:de:a4:b3:6b:01:95:13:5b:29:5a:03:
8a:74:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:43 2026 by rpki-client