Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa
File: kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa (raw, json)
Hash identifier: riEmPQV4v2zfq30QZ7AZjXHbnN49xJeD9nNq0fiSPhg=
Subject key identifier: 90:52:8E:C4:A6:3C:55:44:EE:C5:37:FE:C8:A7:E3:1F:3F:16:77:66
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019F3641197DEECB3BD29DEC5931C83E75FB
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa
Signing time: Mon 06 Jul 2026 07:07:43 +0000
ROA not before: Mon 06 Jul 2026 07:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 176.97.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:41:19:7d:ee:cb:3b:d2:9d:ec:59:31:c8:3e:75:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jul 6 07:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90528ec4a63c5544eec537fec8a7e31f3f167766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:7d:5b:c2:3f:90:eb:a5:b9:b8:17:53:ca:
24:37:70:46:12:c5:4d:b5:b0:ef:28:1e:29:c8:3a:
37:0c:31:ba:be:54:29:33:ba:82:d3:b3:70:f1:20:
12:87:8d:e1:51:cf:40:7b:c6:cc:cf:ce:be:4f:4f:
4d:6b:8c:aa:f3:e7:87:73:15:09:41:70:73:0b:e4:
1e:44:b3:c3:11:f2:fa:87:72:bd:21:62:15:39:45:
6f:ab:53:3f:83:f8:83:d3:a5:61:61:38:b0:78:dc:
3a:ef:54:50:9b:ec:0b:a2:c4:db:50:22:9a:90:ca:
b4:b9:6a:5c:36:5d:25:c0:83:60:89:e6:2c:87:4f:
b0:cd:80:5f:b1:96:50:1f:09:18:77:9d:31:29:b7:
7c:e2:bb:75:dc:24:a7:04:62:43:23:50:4e:e5:09:
cd:bc:5a:1e:d8:00:63:5f:e9:ec:95:7c:03:e2:da:
ee:5a:42:1c:6c:f7:3b:79:68:da:10:fe:91:10:f0:
2f:5b:fc:80:d5:63:5d:66:22:90:8a:97:99:af:23:
d0:86:74:e7:2f:6d:60:06:0f:27:12:c9:97:cb:b6:
78:c0:62:5d:d5:61:aa:3b:21:1a:51:18:71:b2:3d:
0f:18:73:46:87:75:0b:3f:43:62:94:b9:76:89:22:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:52:8E:C4:A6:3C:55:44:EE:C5:37:FE:C8:A7:E3:1F:3F:16:77:66
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.1.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e0:c2:2f:76:11:71:52:2e:42:ee:01:34:3d:1d:3e:4a:11:
8e:ef:75:fa:60:e9:ca:84:6e:5d:7f:96:26:88:be:e9:65:4a:
a9:5d:7c:cd:54:fa:fc:32:1e:38:b6:b4:c3:16:e9:02:45:6f:
cb:f9:cd:d1:e1:2b:1e:55:c3:9b:cb:4b:97:65:31:96:28:8c:
0f:e6:5c:fc:39:b5:bb:4b:ac:9b:31:62:c6:4f:e4:25:21:63:
52:3e:b6:6d:2a:fa:1f:ed:1e:b2:9b:3b:56:1a:24:8e:6f:8c:
ca:7a:b9:68:a9:e9:99:30:4b:9a:7c:a3:5b:8f:99:c8:d0:e6:
03:80:9c:e6:c6:6d:af:a7:f3:9e:07:a9:0b:98:75:e8:20:2d:
33:da:76:ac:7e:ab:97:38:01:25:88:d1:41:08:e1:a2:65:b4:
c0:b8:0d:d5:7f:a7:ae:b9:79:cf:2a:01:0a:79:46:e7:cb:bf:
a0:05:59:c4:d4:3c:c7:9d:a4:a9:c2:02:d6:e4:09:b6:d9:ad:
c4:79:16:53:1d:a6:2d:2e:e1:a1:1b:b9:09:0b:b4:79:b7:68:
f1:85:0c:c8:71:fb:8e:15:19:b3:b0:d6:02:8f:66:40:55:8b:
c2:2e:6a:c7:ad:a8:86:ea:ac:6e:9f:78:63:86:e6:6a:e0:ac:
a8:35:6b:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ82QRl97ss70p3sWTHIPnX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh
M2FhZTkwHhcNMjYwNzA2MDcwNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDUyOGVjNGE2M2M1NTQ0ZWVjNTM3ZmVjOGE3ZTMxZjNmMTY3NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWJ9W8I/kOulubgXU8okN3BGEsVN
tbDvKB4pyDo3DDG6vlQpM7qC07Nw8SASh43hUc9Ae8bMz86+T09Na4yq8+eHcxUJ
QXBzC+QeRLPDEfL6h3K9IWIVOUVvq1M/g/iD06VhYTiweNw671RQm+wLosTbUCKa
kMq0uWpcNl0lwINgieYsh0+wzYBfsZZQHwkYd50xKbd84rt13CSnBGJDI1BO5QnN
vFoe2ABjX+nslXwD4truWkIcbPc7eWjaEP6REPAvW/yA1WNdZiKQipeZryPQhnTn
L21gBg8nEsmXy7Z4wGJd1WGqOyEaURhxsj0PGHNGh3ULP0NilLl2iSJ6SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJBSjsSmPFVE7sU3/sin4x8/FndmMB8GA1UdIwQY
MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt
YTZjNDllYjI4Mjg3LzEva0ZLT3hLWThWVVR1eFRmLXlLZmpIejhXZDJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3
LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGEBMA0G
CSqGSIb3DQEBCwUAA4IBAQAT4MIvdhFxUi5C7gE0PR0+ShGO73X6YOnKhG5df5Ym
iL7pZUqpXXzNVPr8Mh44trTDFukCRW/L+c3R4SseVcOby0uXZTGWKIwP5lz8ObW7
S6ybMWLGT+QlIWNSPrZtKvof7R6ymztWGiSOb4zKerloqemZMEuafKNbj5nI0OYD
gJzmxm2vp/OeB6kLmHXoIC0z2nasfquXOAEliNFBCOGiZbTAuA3Vf6euuXnPKgEK
eUbny7+gBVnE1DzHnaSpwgLW5Am22a3EeRZTHaYtLuGhG7kJC7R5t2jxhQzIcfuO
FRmzsNYCj2ZAVYvCLmrHraiG6qxun3hjhuZq4KyoNWun
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:13 2026 by rpki-client