Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/KNn_2PtjJ9az9kgHYbQJzI1nyJ0.roa
File: KNn_2PtjJ9az9kgHYbQJzI1nyJ0.roa (raw, json)
Hash identifier: YhlgK2Gpf5+1ITN07EOB0hCxCRClr+jKp9E/HLwGsdE=
Subject key identifier: 28:D9:FF:D8:FB:63:27:D6:B3:F6:48:07:61:B4:09:CC:8D:67:C8:9D
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019F07B9F8BFAE2232BB60CB81AE1E24FA6B
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/KNn_2PtjJ9az9kgHYbQJzI1nyJ0.roa
Signing time: Sat 27 Jun 2026 06:17:36 +0000
ROA not before: Sat 27 Jun 2026 06:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216018
IP address blocks: 185.23.72.0/24 maxlen: 24
185.23.73.0/24 maxlen: 24
185.23.74.0/24 maxlen: 24
185.23.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:07:b9:f8:bf:ae:22:32:bb:60:cb:81:ae:1e:24:fa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jun 27 06:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28d9ffd8fb6327d6b3f6480761b409cc8d67c89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:13:dd:a9:61:95:2a:d4:dc:d2:84:53:c4:
91:cb:76:70:23:9a:b6:5a:00:1c:03:03:56:56:f5:
41:09:83:61:89:0f:0d:a3:84:b5:b8:15:38:1f:91:
83:8a:7f:7e:d7:7d:37:e2:0a:e8:c3:df:db:32:91:
c8:76:7a:a6:4d:99:6f:1b:56:08:15:c3:84:e9:b9:
be:d9:30:8b:50:b2:dd:5e:4b:4a:85:37:7c:11:55:
45:49:ba:89:31:bb:31:3e:9c:c7:36:ab:48:99:c4:
b0:be:08:7d:b9:36:5d:93:30:55:6a:fa:72:50:7a:
09:c0:4d:93:1b:9d:70:94:c6:86:7d:25:2e:33:da:
bf:bd:61:f2:95:b6:e5:04:9a:ec:c8:6b:39:37:71:
ea:29:ff:70:e2:16:1b:13:61:b2:4d:61:0a:7d:6e:
15:ea:80:33:ff:95:fb:6d:f5:9b:99:3a:7c:d6:ad:
51:f3:39:a7:49:25:8e:23:e8:69:dd:1d:49:2a:65:
7a:18:59:c9:72:bb:76:fe:4b:74:e2:a2:f9:aa:de:
98:ca:76:0f:52:3d:c1:e9:69:58:d1:d4:1d:92:13:
0d:d6:35:6b:f6:34:48:79:40:d6:4e:46:0e:51:87:
16:b9:93:1e:f9:29:56:52:8e:12:3d:0e:62:1b:f0:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:FF:D8:FB:63:27:D6:B3:F6:48:07:61:B4:09:CC:8D:67:C8:9D
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/KNn_2PtjJ9az9kgHYbQJzI1nyJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.72.0/22
Signature Algorithm: sha256WithRSAEncryption
03:76:bb:fd:14:b5:ad:ba:64:01:d8:c6:34:fe:00:c0:03:06:
38:3c:8d:df:f1:15:84:27:cf:25:5a:3e:ea:02:db:8d:44:c3:
97:93:86:10:23:15:72:01:7c:3c:f2:86:59:3a:7b:44:f5:4b:
1a:f6:2d:d6:48:ac:a0:bd:79:5a:00:a1:40:1c:ef:eb:7a:90:
23:87:32:b9:9b:ec:84:60:9c:17:61:5c:c6:57:10:67:f4:db:
ad:ed:9a:d0:77:03:a7:10:b2:1e:f6:58:a5:7c:ed:b2:69:4f:
66:44:3f:d2:20:89:54:98:f3:2b:b0:82:80:b8:41:20:30:7c:
26:6b:84:5a:cf:3e:9f:eb:f7:a6:8f:d0:94:54:fa:97:eb:09:
19:df:95:81:c6:fe:1a:35:a3:cb:0e:df:5e:a3:ea:de:14:1d:
25:25:27:d2:4a:32:eb:f8:92:e5:c5:ee:a9:aa:a4:e7:a5:a3:
9e:50:8d:fe:b3:20:60:32:f6:07:42:94:b2:ef:dc:53:ca:8d:
da:2d:74:58:c4:2d:93:71:b5:65:30:78:b3:bd:ca:21:f8:9c:
e6:27:22:5b:ae:a1:de:8a:ab:e3:53:d3:61:d7:a2:7b:ff:70:
60:ca:63:92:64:dd:52:ad:1a:45:c9:4b:db:2a:87:d2:95:2c:
74:69:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:29:23 2026 by rpki-client