Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/KqOfsddEjfHpBRwWxaN6oCqImDY.roa
File: KqOfsddEjfHpBRwWxaN6oCqImDY.roa (raw, json)
Hash identifier: Iz5QREM96XCWDsjHdKJbuKUA89ccqxzoc6vrHN7WI4Q=
Subject key identifier: 2A:A3:9F:B1:D7:44:8D:F1:E9:05:1C:16:C5:A3:7A:A0:2A:88:98:36
Certificate issuer: /CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Certificate serial: 019F23687F74A7F2223C22C0190DF433C6DC
Authority key identifier: 9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/KqOfsddEjfHpBRwWxaN6oCqImDY.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25464
IP address blocks: 195.43.45.0/24 maxlen: 24
195.43.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7f:74:a7:f2:22:3c:22:c0:19:0d:f4:33:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aa39fb1d7448df1e9051c16c5a37aa02a889836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:50:3b:a7:85:ba:7e:45:e1:44:6b:22:72:
19:8e:f5:4d:41:c1:55:bb:f1:c5:bd:ec:36:b1:cb:
ad:51:a9:63:f2:2c:e8:e5:16:a3:70:ef:27:ec:5c:
4f:7a:15:28:4f:5d:90:d7:db:6a:15:11:1d:ff:24:
3d:8a:a5:47:11:ed:74:6b:d4:84:7d:14:60:92:7d:
54:bc:b3:2e:8b:16:86:8e:5a:ae:af:48:f4:ae:76:
9e:f2:14:80:42:9d:e8:52:88:cd:f0:9b:9e:93:c1:
60:b7:4c:e2:1a:1c:7e:47:27:a6:4c:9c:69:dc:20:
a2:6f:95:fa:ab:f2:81:d8:34:67:dc:cf:6e:d0:0f:
c7:80:8d:2e:fe:b9:14:dd:34:42:22:2b:0f:ad:ba:
ec:07:39:c6:fe:7b:3c:07:ea:4d:fa:f2:ff:79:46:
47:78:27:6e:d9:94:6c:eb:51:d0:78:b7:6d:19:22:
f1:5e:cd:81:b1:d3:4d:48:8b:46:7f:8b:12:6f:00:
d1:93:82:f7:cb:dd:33:f2:84:5f:0b:df:d9:a1:7a:
ff:70:fd:0b:39:6b:55:1a:05:12:4f:2e:12:4a:22:
6f:61:ab:90:0d:dc:cc:50:e7:08:ab:0a:c6:8b:b8:
34:69:61:4c:6a:50:e1:e6:6e:b5:6d:88:72:a4:15:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A3:9F:B1:D7:44:8D:F1:E9:05:1C:16:C5:A3:7A:A0:2A:88:98:36
X509v3 Authority Key Identifier:
keyid:9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/KqOfsddEjfHpBRwWxaN6oCqImDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.45.0/24
195.43.47.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2c:8f:38:b5:f3:a9:23:a9:94:25:43:08:57:07:bb:ca:39:
94:07:8a:b1:d7:ac:05:eb:32:56:25:7f:76:9d:64:49:cb:99:
7d:d8:b0:1d:c3:68:09:35:e0:9b:bd:85:4b:51:bf:3c:7d:4f:
33:17:f2:b4:83:d1:20:4a:7c:42:13:87:0b:50:0e:58:7b:9d:
b5:60:d7:8d:37:c9:b3:30:04:be:b5:43:af:e0:e4:36:33:fc:
71:96:e0:db:aa:dc:48:3a:3d:11:c1:4a:d3:6c:76:0f:1f:e4:
ea:fb:78:95:0d:a0:2d:84:78:2a:27:07:99:ab:d6:0a:2f:ad:
cc:ca:69:c7:9a:06:1c:1c:0b:e1:2c:59:15:53:cf:68:ca:0b:
da:05:e9:f9:c5:c3:a9:89:1d:bf:5c:93:c7:49:8c:27:5a:d1:
e9:3d:11:a7:85:e3:e4:c6:ed:0f:3d:f1:41:33:a2:24:aa:51:
a1:46:99:fb:4d:53:83:bb:2b:ce:7e:f1:11:7f:f8:db:b3:9c:
d1:78:00:cb:ee:7d:c2:8a:32:d1:54:f4:90:71:5f:bd:82:69:
f3:b2:82:a0:28:84:f7:d7:e9:16:03:58:ac:63:05:06:37:ab:
f3:d7:9b:cc:af:fd:54:6b:d6:54:65:0f:c1:5a:d8:c6:d7:e0:
95:d8:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:40:04 2026 by rpki-client