Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/KVNUqCsXQcZgUooNu9UzKtAuOCM.roa
File: KVNUqCsXQcZgUooNu9UzKtAuOCM.roa (raw, json)
Hash identifier: 2RC1IFuUFIVH05omXlQAScQzGAEg4Bdnqsce4idbrQE=
Subject key identifier: 29:53:54:A8:2B:17:41:C6:60:52:8A:0D:BB:D5:33:2A:D0:2E:38:23
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019DF1ACD5EE1FF1AEB93418910BD82D6FDA
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/KVNUqCsXQcZgUooNu9UzKtAuOCM.roa
Signing time: Mon 04 May 2026 06:28:49 +0000
ROA not before: Mon 04 May 2026 06:28:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 62.164.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:ac:d5:ee:1f:f1:ae:b9:34:18:91:0b:d8:2d:6f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: May 4 06:28:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=295354a82b1741c660528a0dbbd5332ad02e3823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:23:42:60:2e:75:24:1b:f0:cb:5a:d8:a1:
3d:6a:f3:00:ed:81:a1:0b:80:c5:cf:11:7a:cf:d0:
0c:bb:67:a2:b0:8f:09:26:9e:f0:32:f1:58:49:a1:
02:3d:7f:04:6b:7f:ee:05:9c:35:6f:3b:cb:78:e6:
c6:d3:25:d9:75:80:a2:01:ae:6e:7b:c0:3c:82:d2:
8d:95:14:a3:94:7e:e7:d8:42:5d:15:f0:4c:d3:48:
a1:e8:94:f7:35:15:57:9e:d1:d3:37:e4:62:bd:a2:
1f:35:bb:b2:3e:38:63:87:e2:de:a2:ee:33:44:32:
dc:0b:bf:8a:c2:2a:4a:70:39:33:1d:a4:43:bc:73:
7d:0f:4a:ba:09:f6:cf:a4:71:a3:8c:f2:47:58:91:
f9:7b:9c:2b:76:3b:11:39:13:71:a6:5b:d2:56:04:
84:2b:5b:fc:39:87:e0:8a:64:5c:62:59:4c:17:13:
2b:da:e5:d2:f5:65:52:2e:15:45:ef:71:8b:00:05:
fe:f9:62:7d:39:79:eb:23:78:34:2f:d5:ad:b4:93:
b8:00:1f:0a:dd:57:6b:19:25:a9:d6:07:9d:2a:13:
6b:d3:dc:fa:84:46:7d:3f:e7:c2:0f:27:b7:e6:45:
99:a3:4a:f1:5a:d2:d9:21:b9:ef:5b:77:89:47:9e:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:54:A8:2B:17:41:C6:60:52:8A:0D:BB:D5:33:2A:D0:2E:38:23
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/KVNUqCsXQcZgUooNu9UzKtAuOCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.192.0/24
Signature Algorithm: sha256WithRSAEncryption
54:94:c6:e5:7c:91:ed:76:db:9e:c8:2d:90:d4:93:a2:6a:e8:
1c:33:3a:53:fd:41:85:53:bc:bb:51:37:cd:1d:2d:fb:6c:34:
0e:d1:98:4e:fa:d4:10:16:a2:a8:a5:85:a5:a4:3e:86:b7:8b:
d0:83:2a:c9:ba:16:c9:76:10:de:6d:88:a8:9a:ac:fc:6a:d6:
b0:97:ef:f3:e7:fb:21:4f:d7:3d:bd:65:0b:30:80:5f:58:06:
63:c0:ee:bc:21:ae:8c:f9:17:a6:6d:9a:a7:da:6d:1a:b6:58:
be:b8:fa:9f:82:d8:f0:70:53:02:07:bc:26:69:a0:d3:28:72:
3d:07:60:04:9a:ae:f1:02:10:b0:02:91:db:c5:6a:41:ab:e2:
6a:77:ce:8b:c4:45:f3:26:bb:61:8f:1b:e2:c5:ae:26:33:05:
39:46:2c:a0:71:11:d8:aa:10:c0:3d:42:ec:0e:2c:fe:44:8a:
cc:cd:34:62:da:5f:54:24:af:93:c1:0e:59:a6:f3:f6:68:02:
0c:45:ba:43:3e:33:5a:18:d5:73:49:65:b1:d9:66:36:b9:fc:
1c:00:73:d8:e6:33:39:1a:c6:cb:de:e9:2a:09:9c:98:4d:ec:
63:af:31:b3:b1:2a:f3:f6:38:50:67:6a:b0:95:fd:97:af:6b:
9b:17:d8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:22 2026 by rpki-client