Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/kuKa_RbKBF-8apG5eNAA7ZGrk64.roa
File: kuKa_RbKBF-8apG5eNAA7ZGrk64.roa (raw, json)
Hash identifier: 8GXXom7MNoYYjacR6QL5aPwdId669M5Mrd0b2uKdYxk=
Subject key identifier: 92:E2:9A:FD:16:CA:04:5F:BC:6A:91:B9:78:D0:00:ED:91:AB:93:AE
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019E2B9B478D9E60D26AA7B81D5E1EB3BA5D
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/kuKa_RbKBF-8apG5eNAA7ZGrk64.roa
Signing time: Fri 15 May 2026 12:27:37 +0000
ROA not before: Fri 15 May 2026 12:27:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60893
IP address blocks: 89.18.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:9b:47:8d:9e:60:d2:6a:a7:b8:1d:5e:1e:b3:ba:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: May 15 12:27:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92e29afd16ca045fbc6a91b978d000ed91ab93ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5b:ac:48:0a:ce:eb:4c:f6:74:22:cf:4f:88:
d4:2a:04:7e:64:fd:45:7b:ca:0b:e5:4a:60:44:ff:
a9:0a:96:24:12:0d:8a:ae:41:bc:f8:4e:68:0a:3e:
3e:da:fe:a1:ae:80:71:3d:26:ad:08:98:c3:35:3b:
4f:ce:0d:30:72:c1:0f:17:e3:5e:41:3b:ea:84:c1:
8b:f0:ff:c0:81:4e:b4:6e:ef:5b:68:c8:66:56:b2:
1e:ad:12:7c:db:72:d7:8c:05:bb:c2:cb:6b:fb:e1:
96:82:5d:6c:7f:cc:b5:e6:18:db:50:23:8a:5b:ea:
65:6b:51:d2:3e:d0:d4:79:ae:12:41:c8:2e:7d:09:
3f:31:de:51:5b:a0:ce:a5:33:04:29:d4:34:ab:8d:
9d:54:d4:e1:09:3e:84:df:0f:6c:87:e4:66:69:2a:
9a:cc:eb:e1:0d:2f:dd:e4:9b:ad:74:86:1b:1b:77:
88:3a:26:c6:23:0c:ab:7f:28:fc:3d:b3:9b:f7:36:
03:1a:09:de:a1:c5:5a:2b:c9:ee:34:26:97:2b:50:
3f:57:f1:b3:7e:19:8e:19:8e:93:43:9f:0a:56:d4:
1a:ac:bd:a9:7c:fd:b9:4b:6f:89:2f:af:1b:be:1b:
44:dc:4b:b0:49:07:78:22:b6:36:3c:7b:0c:1e:aa:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E2:9A:FD:16:CA:04:5F:BC:6A:91:B9:78:D0:00:ED:91:AB:93:AE
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/kuKa_RbKBF-8apG5eNAA7ZGrk64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.175.0/24
Signature Algorithm: sha256WithRSAEncryption
11:80:4c:6d:f7:96:6c:c2:c2:de:0f:8c:67:dc:6e:08:1f:ea:
51:ef:04:34:92:14:4e:11:56:3e:a8:e6:62:f1:26:b7:cd:84:
c4:9d:b0:2d:0a:99:fd:87:6b:90:fe:7f:cc:b7:9d:ed:7a:b0:
ed:f7:98:d9:b4:62:1a:31:8c:f1:e5:0e:68:ca:95:ea:55:56:
72:7d:e2:be:17:a2:4f:86:4c:5b:72:42:60:8e:13:7c:58:6c:
92:f8:73:7b:00:68:94:08:3d:61:37:6d:92:0a:56:a6:1b:1d:
db:a9:84:e1:7e:f1:46:55:43:e5:3c:40:25:b5:33:92:0f:d6:
08:ab:22:00:39:f3:f2:ab:c5:83:92:0b:c0:09:7b:b1:de:83:
2c:3f:b5:5f:a5:fb:ff:29:06:fe:c4:fd:bb:65:57:ff:94:b9:
d2:75:9d:b4:15:f9:1a:da:69:95:66:6a:03:77:89:0b:02:77:
b9:01:7d:48:fe:6d:51:d9:89:27:89:ee:7c:15:d0:df:13:c4:
eb:9b:19:3d:1a:c0:fe:55:17:e4:d4:87:93:e3:7b:a4:07:4a:
b3:0d:2d:f9:64:e2:a2:f8:6a:8d:f1:19:81:50:eb:fb:e8:89:
59:b5:39:0a:18:92:fe:d6:6e:e0:a4:20:9d:82:04:ef:bf:33:
bc:cb:6d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:27:58 2026 by rpki-client