Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/KfaYghYTezuiOmcGDdJhNEcfdfc.roa
File: KfaYghYTezuiOmcGDdJhNEcfdfc.roa (raw, json)
Hash identifier: fJ8D5wiT3hMVXlC1q9jPRdTHGMkjcJ094Hcyv57rEro=
Subject key identifier: 29:F6:98:82:16:13:7B:3B:A2:3A:67:06:0D:D2:61:34:47:1F:75:F7
Certificate issuer: /CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Certificate serial: 019F2368C886BD68F3DE27D73369B9444E6A
Authority key identifier: 17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/KfaYghYTezuiOmcGDdJhNEcfdfc.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 193.19.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c8:86:bd:68:f3:de:27:d7:33:69:b9:44:4e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17345c69e154ee5388283bf3e6c9db55f2b132c2
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29f6988216137b3ba23a67060dd26134471f75f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:25:a8:b9:76:a6:62:c9:35:9d:8c:5b:b8:
fa:34:6a:b7:24:68:e6:2b:91:a1:96:61:e7:85:9b:
9f:4d:66:f3:fb:9a:7b:98:23:77:2d:39:16:bb:5f:
27:17:79:d6:ba:93:d6:84:2e:09:e3:1e:ee:fe:88:
bd:f1:4e:83:67:12:85:9f:ed:af:8d:98:fe:db:79:
67:f3:78:3c:e6:ef:5a:c1:e7:c3:31:08:83:48:49:
30:8b:43:88:64:ce:34:da:6d:19:17:3b:0a:ab:c8:
c7:9a:b9:eb:e5:32:42:d3:bf:21:87:f2:4e:11:5a:
71:49:c7:86:51:f3:dd:ae:db:49:64:a8:93:bb:5f:
5b:a5:be:7e:fb:43:b5:99:33:4a:f9:1e:03:e3:9a:
0f:02:b5:7e:8d:c8:c2:ab:50:e8:65:1f:b0:9a:0f:
8f:27:b3:c7:69:19:ed:45:a7:cb:a5:ff:2c:d6:7e:
c5:86:f5:56:b4:a6:38:7b:f8:fe:8f:f9:08:ef:3c:
37:8c:d6:04:36:98:d1:af:59:37:74:03:6f:2a:a4:
64:ac:85:17:18:4c:f6:bf:bb:6d:bf:04:c3:e4:b9:
40:f6:95:7c:c5:eb:48:e9:c3:d9:ce:2c:6e:b9:68:
43:30:80:7d:3c:44:5f:31:48:48:12:39:9a:af:fa:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F6:98:82:16:13:7B:3B:A2:3A:67:06:0D:D2:61:34:47:1F:75:F7
X509v3 Authority Key Identifier:
keyid:17:34:5C:69:E1:54:EE:53:88:28:3B:F3:E6:C9:DB:55:F2:B1:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzRcaeFU7lOIKDvz5snbVfKxMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/KfaYghYTezuiOmcGDdJhNEcfdfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/FzRcaeFU7lOIKDvz5snbVfKxMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.92.0/23
Signature Algorithm: sha256WithRSAEncryption
64:66:91:d6:13:2b:49:d9:c7:bd:00:b1:86:ee:8f:ac:61:68:
3f:04:d0:ee:c8:aa:93:b8:90:fb:78:54:e8:29:79:0f:a7:70:
84:3e:8f:ca:b4:7c:61:91:45:9d:0f:9c:1f:ab:3d:0b:46:0f:
81:e0:75:b5:39:c4:36:6c:ac:6f:de:86:5e:d2:8b:ff:2c:02:
86:ee:3f:48:11:f6:b9:c1:9c:9d:5d:4b:d1:28:24:de:51:9c:
ab:c2:47:41:95:38:9e:50:f4:24:3a:d3:db:be:48:10:1c:4e:
18:70:b7:87:7d:81:d0:00:4e:a7:9d:86:ed:30:ff:53:9b:b9:
dc:77:55:07:52:2b:66:bd:bb:6d:e4:9b:a2:18:46:5c:43:06:
02:11:eb:17:68:13:09:67:3a:dc:93:9e:1e:02:10:50:fc:93:
52:63:d7:98:61:68:94:87:7e:5d:8c:49:8d:e2:63:c8:46:9d:
8d:ec:25:88:c1:ae:66:c0:df:4f:c5:1f:10:10:d5:b4:83:ed:
cd:b4:0a:41:f5:f8:3a:f1:38:4f:2a:3a:e7:17:97:76:72:8f:
58:13:db:50:e7:5d:5d:1b:2e:8d:2e:0c:c6:ff:c2:03:63:fc:
14:84:c1:b2:a6:ac:d5:79:67:ba:24:5a:33:5c:c8:43:9b:71:
73:76:c2:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMiGvWjz3ifXM2m5RE5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzQ1YzY5ZTE1NGVlNTM4ODI4M2JmM2U2YzlkYjU1ZjJi
MTMyYzIwHhcNMjYwNzAyMTUxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWY2OTg4MjE2MTM3YjNiYTIzYTY3MDYwZGQyNjEzNDQ3MWY3NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IQlqLl2pmLJNZ2MW7j6NGq3JGjm
K5GhlmHnhZufTWbz+5p7mCN3LTkWu18nF3nWupPWhC4J4x7u/oi98U6DZxKFn+2v
jZj+23ln83g85u9awefDMQiDSEkwi0OIZM402m0ZFzsKq8jHmrnr5TJC078hh/JO
EVpxSceGUfPdrttJZKiTu19bpb5++0O1mTNK+R4D45oPArV+jcjCq1DoZR+wmg+P
J7PHaRntRafLpf8s1n7FhvVWtKY4e/j+j/kI7zw3jNYENpjRr1k3dANvKqRkrIUX
GEz2v7ttvwTD5LlA9pV8xetI6cPZzixuuWhDMIB9PERfMUhIEjmar/oqCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCn2mIIWE3s7ojpnBg3SYTRHH3X3MB8GA1UdIwQY
MBaAFBc0XGnhVO5TiCg78+bJ21XysTLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpSY2FlRlU3bE9JS0R2ejVzbmJWZkt4TXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEt
NzZhNTM4NWM1MTVhLzEvS2ZhWWdoWVRlenVpT21jR0RkSmhORWNmZGZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8zMzgxNmItMTQ1Yi00N2Y4LTg1ZmEtNzZhNTM4NWM1MTVh
LzEvRnpSY2FlRlU3bE9JS0R2ejVzbmJWZkt4TXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRNcMA0G
CSqGSIb3DQEBCwUAA4IBAQBkZpHWEytJ2ce9ALGG7o+sYWg/BNDuyKqTuJD7eFTo
KXkPp3CEPo/KtHxhkUWdD5wfqz0LRg+B4HW1OcQ2bKxv3oZe0ov/LAKG7j9IEfa5
wZydXUvRKCTeUZyrwkdBlTieUPQkOtPbvkgQHE4YcLeHfYHQAE6nnYbtMP9Tm7nc
d1UHUitmvbtt5JuiGEZcQwYCEesXaBMJZzrck54eAhBQ/JNSY9eYYWiUh35djEmN
4mPIRp2N7CWIwa5mwN9PxR8QENW0g+3NtApB9fg68ThPKjrnF5d2co9YE9tQ511d
Gy6NLgzG/8IDY/wUhMGypqzVeWe6JFozXMhDm3FzdsIX
-----END CERTIFICATE-----
Generated at Wed Jul 22 13:58:20 2026 by rpki-client