Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/KB0jn6cnbHbc3xLx11hlfZR6Kk0.roa
File: KB0jn6cnbHbc3xLx11hlfZR6Kk0.roa (raw, json)
Hash identifier: NJrsRJbXx5j+YWELHBaWQ7U81Kd5xV2a5EZYIkCe0t0=
Subject key identifier: 28:1D:23:9F:A7:27:6C:76:DC:DF:12:F1:D7:58:65:7D:94:7A:2A:4D
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019F1BF1910E5E881D5B1B3B7005E31F7643
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/KB0jn6cnbHbc3xLx11hlfZR6Kk0.roa
Signing time: Wed 01 Jul 2026 04:30:43 +0000
ROA not before: Wed 01 Jul 2026 04:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214467
IP address blocks: 172.110.208.0/24 maxlen: 24
185.142.30.0/24 maxlen: 24
185.142.31.0/24 maxlen: 24
202.71.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:f1:91:0e:5e:88:1d:5b:1b:3b:70:05:e3:1f:76:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 1 04:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=281d239fa7276c76dcdf12f1d758657d947a2a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:0c:a5:da:af:60:3f:ac:0f:59:67:2f:1a:
14:25:3c:29:49:ab:d1:95:61:fa:3c:b8:a6:d4:6d:
99:4f:bf:15:c8:6d:db:48:6f:99:a1:47:2b:cc:89:
d2:d3:a8:65:c7:d5:11:a9:2c:88:ff:f5:66:4d:75:
61:ed:0d:89:a9:9b:87:08:67:da:82:fe:95:0f:e3:
d0:1b:c4:04:f8:12:fb:b7:fd:bf:dc:11:02:e5:dc:
b6:91:8f:08:2d:c9:e9:e1:78:e9:f4:cd:01:f6:d4:
c1:ae:ae:17:e0:e7:71:ce:2b:04:0f:5f:dc:e5:95:
32:c4:b0:14:b5:27:88:75:92:16:2a:f8:9b:d6:ff:
af:13:43:b9:4a:94:81:ea:91:b8:a8:f3:f8:50:85:
8d:e9:ae:1c:50:9a:e3:d5:a2:e2:55:8c:fc:40:eb:
ec:cf:55:81:d6:fe:79:1a:14:88:d4:50:63:14:13:
98:a5:4f:2d:c8:d5:ca:c0:47:87:08:86:63:a7:49:
d5:64:29:66:d8:4d:7c:7d:75:30:fa:64:2f:74:94:
6f:07:a6:dd:20:8a:63:a0:c2:58:99:cf:f2:70:b6:
40:91:cb:52:34:06:00:14:4d:83:5d:93:40:01:f5:
c1:27:0d:ae:12:e8:86:66:b8:6f:81:2c:6b:3c:dc:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:23:9F:A7:27:6C:76:DC:DF:12:F1:D7:58:65:7D:94:7A:2A:4D
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/KB0jn6cnbHbc3xLx11hlfZR6Kk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.110.208.0/24
185.142.30.0/23
202.71.8.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6b:17:a3:86:da:12:8f:56:a8:bd:58:73:93:a8:06:f2:db:
31:a0:86:d2:47:49:68:7f:fc:63:64:cc:a7:80:50:46:6e:26:
d9:22:5f:b7:17:77:7d:6b:09:20:86:bd:27:cb:ab:46:45:65:
6a:a3:12:32:05:89:c8:a3:68:74:7b:b2:00:4f:77:4a:13:91:
00:f3:67:98:10:c1:9a:fd:b5:2c:1d:e8:38:35:f8:cd:bb:04:
27:64:22:c7:4d:be:82:01:9d:a4:0c:b8:9d:be:85:34:41:eb:
69:5b:b8:a4:5e:7a:c6:90:dc:04:1d:0b:26:b2:a6:77:81:1e:
21:8a:11:aa:db:59:33:a0:68:52:3a:f7:41:88:bf:fe:7c:2f:
da:5a:98:24:25:3a:78:5b:a4:86:24:93:c4:52:03:be:c1:8a:
b9:5e:1a:0f:ca:05:23:7e:1a:71:4c:b2:27:1f:2c:08:ba:27:
46:06:de:19:e0:e8:1e:35:ff:81:94:01:6e:79:1a:c6:aa:cf:
a1:75:6d:93:8d:0f:b7:5e:6c:b0:7f:1c:0f:18:ed:bc:20:6e:
28:a1:da:2f:ad:09:bd:51:32:ff:a0:03:8e:c3:57:c5:02:22:
f1:75:cf:6e:55:7f:21:59:14:7b:1a:29:c4:6d:57:68:58:37:
61:fa:fa:85
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8b8ZEOXogdWxs7cAXjH3ZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjYwNzAxMDQzMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODFkMjM5ZmE3Mjc2Yzc2ZGNkZjEyZjFkNzU4NjU3ZDk0N2EyYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsQMpdqvYD+sD1lnLxoUJTwpSavR
lWH6PLim1G2ZT78VyG3bSG+ZoUcrzInS06hlx9URqSyI//VmTXVh7Q2JqZuHCGfa
gv6VD+PQG8QE+BL7t/2/3BEC5dy2kY8ILcnp4Xjp9M0B9tTBrq4X4OdxzisED1/c
5ZUyxLAUtSeIdZIWKvib1v+vE0O5SpSB6pG4qPP4UIWN6a4cUJrj1aLiVYz8QOvs
z1WB1v55GhSI1FBjFBOYpU8tyNXKwEeHCIZjp0nVZClm2E18fXUw+mQvdJRvB6bd
IIpjoMJYmc/ycLZAkctSNAYAFE2DXZNAAfXBJw2uEuiGZrhvgSxrPNznzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCgdI5+nJ2x23N8S8ddYZX2UeipNMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvS0Iwam42Y25iSGJjM3hMeDExaGxmWlI2S2swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArG7QAwQB
uY4eAwQAykcIMA0GCSqGSIb3DQEBCwUAA4IBAQCWaxejhtoSj1aovVhzk6gG8tsx
oIbSR0lof/xjZMyngFBGbibZIl+3F3d9awkghr0ny6tGRWVqoxIyBYnIo2h0e7IA
T3dKE5EA82eYEMGa/bUsHeg4NfjNuwQnZCLHTb6CAZ2kDLidvoU0QetpW7ikXnrG
kNwEHQsmsqZ3gR4hihGq21kzoGhSOvdBiL/+fC/aWpgkJTp4W6SGJJPEUgO+wYq5
XhoPygUjfhpxTLInHywIuidGBt4Z4OgeNf+BlAFueRrGqs+hdW2TjQ+3XmywfxwP
GO28IG4oodovrQm9UTL/oAOOw1fFAiLxdc9uVX8hWRR7GinEbVdoWDdh+vqF
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:42 2026 by rpki-client