Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/KH370sNYu21avkL8lpe4CVDI6IQ.roa
File: KH370sNYu21avkL8lpe4CVDI6IQ.roa (raw, json)
Hash identifier: DzzaFBH+1mwllU7379SPzlQjcpZBkQqIzj2ch2xa5ec=
Subject key identifier: 28:7D:FB:D2:C3:58:BB:6D:5A:BE:42:FC:96:97:B8:09:50:C8:E8:84
Certificate issuer: /CN=95608722905d8352a40caa46a06112ea6a44600e
Certificate serial: 019F2368C7A4442E27F5A311F414ED83BF74
Authority key identifier: 95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/KH370sNYu21avkL8lpe4CVDI6IQ.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60079
IP address blocks: 92.118.29.0/24 maxlen: 24
2a09:a447:2026::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c7:a4:44:2e:27:f5:a3:11:f4:14:ed:83:bf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95608722905d8352a40caa46a06112ea6a44600e
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=287dfbd2c358bb6d5abe42fc9697b80950c8e884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:66:1a:5b:6c:2f:32:dd:f0:0c:fd:8f:bd:
24:4f:98:77:c6:0d:21:f5:e2:72:22:0e:a8:3e:45:
b1:c2:ef:24:0d:6b:2c:57:25:85:92:c7:e6:e4:22:
57:03:27:80:de:1f:7c:18:27:f0:e8:fc:9b:bc:20:
36:09:3e:6b:6b:fe:dc:e1:82:c4:83:96:77:6b:ce:
10:97:86:24:11:fb:8f:bc:ed:59:41:5f:2a:61:3d:
10:8e:54:de:f3:08:63:25:37:a6:ed:16:75:e2:54:
f7:d8:ed:84:8d:45:f8:80:d9:4d:bb:d4:60:fe:7d:
76:bd:24:8a:9e:a7:d7:9e:e4:57:b6:7f:55:35:54:
4a:a2:40:21:52:be:32:e3:59:56:f9:03:f8:f3:65:
98:e0:0a:0e:c9:be:b8:36:92:a3:ec:42:83:3d:99:
cf:d7:76:75:1a:a0:d1:30:dc:8d:15:39:d6:87:20:
4f:d3:57:47:04:ac:06:b9:c1:23:4a:7b:d7:00:a1:
88:e2:02:a9:9d:55:ef:de:04:32:be:31:1f:4f:f3:
e8:51:7f:e3:c3:a6:03:e3:1a:13:3e:5b:f8:bf:4f:
c0:5b:6a:44:f9:3c:7f:b9:54:ee:39:ec:96:d4:4f:
4b:d5:b8:5c:98:ab:83:bc:7e:21:12:6c:7c:cf:be:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:FB:D2:C3:58:BB:6D:5A:BE:42:FC:96:97:B8:09:50:C8:E8:84
X509v3 Authority Key Identifier:
keyid:95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/KH370sNYu21avkL8lpe4CVDI6IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.29.0/24
IPv6:
2a09:a447:2026::/48
Signature Algorithm: sha256WithRSAEncryption
c6:13:ba:01:bf:56:5b:5c:9c:87:a9:fc:ff:0c:6c:d2:0f:bb:
1c:48:a4:80:ba:ee:31:bd:c5:89:5b:de:f7:ff:7f:e2:d6:3c:
42:c4:c0:45:4a:89:34:e0:aa:82:db:d0:0c:7a:d7:22:73:a2:
69:45:3d:86:51:2f:8e:3b:e4:30:41:f5:a1:8d:2b:21:50:1a:
1d:f5:24:0a:b7:19:c4:f4:00:93:ad:6e:b2:dd:3a:85:f0:7f:
79:0d:ad:c9:3b:ad:a2:6c:43:77:90:d5:57:72:94:61:5c:30:
02:03:80:bb:60:82:ac:a9:58:1c:94:4c:96:b8:13:4f:1f:f8:
04:44:67:f9:33:ef:0a:26:43:b5:22:ad:ae:bb:fa:be:32:59:
24:1a:09:eb:f6:15:1c:24:68:ee:08:0b:35:ae:8a:1d:ca:c5:
7f:72:70:0d:66:71:42:de:7b:9b:42:6c:09:91:24:8a:9b:dd:
14:7a:a4:b8:a2:70:48:d9:c5:9f:a2:4c:c5:b2:cf:7d:5b:1d:
ac:cd:6d:e3:f3:b4:a6:75:ec:5d:7e:de:87:d6:f7:75:64:3b:
5d:8b:95:31:8c:a5:bd:ef:29:3f:79:b2:fb:05:4c:6c:3e:34:
a0:63:91:ac:b4:8c:f2:8b:1f:67:8a:4f:c8:72:f0:1b:8d:7a:
f8:da:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:28:32 2026 by rpki-client