Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/KEyhGh3u-Ad2U98qs53aKdB_GJc.roa
File: KEyhGh3u-Ad2U98qs53aKdB_GJc.roa (raw, json)
Hash identifier: jZXKizyeTSKszZt9XLRCfNj1B4xBpIyE3AIW1lpSBsI=
Subject key identifier: 28:4C:A1:1A:1D:EE:F8:07:76:53:DF:2A:B3:9D:DA:29:D0:7F:18:97
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 019F1E1B748418B8479759A233982E13C618
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/KEyhGh3u-Ad2U98qs53aKdB_GJc.roa
Signing time: Wed 01 Jul 2026 14:35:43 +0000
ROA not before: Wed 01 Jul 2026 14:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139321
IP address blocks: 199.89.231.0/24 maxlen: 24
2001:678:acc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:1b:74:84:18:b8:47:97:59:a2:33:98:2e:13:c6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Jul 1 14:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=284ca11a1deef8077653df2ab39dda29d07f1897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:0f:ec:6c:8d:18:88:b8:06:e4:06:d5:c9:
61:b7:db:b2:e9:52:0e:f5:a3:e1:3c:d5:6e:73:82:
f3:2f:73:73:e8:fa:eb:fb:d2:a7:a3:16:ea:38:d8:
40:b1:23:c2:59:1c:51:da:e5:c7:67:5d:12:81:a5:
a8:71:f0:2e:cf:0c:96:b1:cf:da:04:06:a7:f5:fb:
16:89:0e:1b:06:d1:4b:52:55:49:79:38:88:bd:2c:
2b:d9:21:ab:12:00:19:30:c1:29:09:dc:45:5d:7f:
0d:75:56:bd:87:a1:c5:29:52:36:44:bc:d9:6f:1f:
99:60:ea:c8:f8:60:d1:54:8d:bd:b3:e3:f1:62:aa:
a7:ad:a5:c9:9a:36:18:d2:91:3d:56:ba:0b:cd:79:
dc:db:dc:5e:44:48:83:c8:cc:68:36:c2:f7:0d:1d:
0f:35:1f:7b:6d:ac:e0:7e:9f:bb:54:69:58:06:12:
d4:27:60:4d:34:27:78:33:83:41:51:01:74:dd:67:
35:4a:b5:53:f4:c7:b2:d7:b9:d2:7c:b0:f4:b4:f0:
19:a7:4b:44:01:d8:e6:c7:3e:fb:25:c9:16:92:a3:
26:3f:e7:c0:cc:c6:82:e5:16:e8:5a:2b:9f:fb:80:
b7:8f:cb:29:84:59:4c:e4:6c:c0:f7:72:3a:41:1c:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:A1:1A:1D:EE:F8:07:76:53:DF:2A:B3:9D:DA:29:D0:7F:18:97
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/KEyhGh3u-Ad2U98qs53aKdB_GJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.89.231.0/24
IPv6:
2001:678:acc::/48
Signature Algorithm: sha256WithRSAEncryption
2c:ad:0e:e7:a4:ad:90:14:5a:1e:9e:4a:0e:9d:51:d7:e7:c0:
d7:60:35:f1:da:12:53:c1:94:8b:4a:65:29:0e:31:94:38:d7:
cc:c5:33:00:6d:64:a9:23:d5:c9:04:f6:c3:e6:a7:2f:7b:32:
ec:0a:de:58:3c:86:d7:11:0b:5d:e4:87:b6:0f:0b:49:be:a3:
c6:ea:4c:e6:86:b3:ee:37:23:46:3b:d9:c4:f6:3b:0c:c2:4c:
32:ca:b1:a6:be:1a:37:70:bf:81:f7:d9:2c:9d:d5:be:c4:40:
fa:f5:49:b9:fc:2f:c6:a4:bd:19:d4:f2:05:7e:6b:50:eb:10:
df:1e:2f:35:75:50:6a:70:0a:ae:d5:28:60:5d:51:03:d6:3c:
a9:b4:cb:1d:c1:a7:3b:56:bc:53:16:75:a5:aa:bd:42:c0:6a:
ea:dc:1f:20:17:f3:de:f9:85:4f:8b:75:2a:e7:d2:22:ca:a6:
5b:19:62:92:c2:8d:74:a2:e9:d0:18:8a:cb:c5:d7:16:f4:8b:
99:69:f0:52:01:c0:6f:f5:ba:a1:cd:ba:41:73:bf:ac:43:16:
3d:ae:76:b8:5f:ae:9c:6d:4e:25:ee:14:d2:f7:1c:3e:57:5e:
7c:67:80:37:31:c0:5b:e7:25:45:9f:ab:98:67:85:77:e0:b8:
03:98:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:30 2026 by rpki-client