Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/KuQWIegYdUJMwSsw6LOJEGnWJIU.roa
File: KuQWIegYdUJMwSsw6LOJEGnWJIU.roa (raw, json)
Hash identifier: n1+wc9tP5UGa0heg8onORKo3M069nKjqbj355TvV57s=
Subject key identifier: 2A:E4:16:21:E8:18:75:42:4C:C1:2B:30:E8:B3:89:10:69:D6:24:85
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A04E3504A8BEC7701B8BC026E031526627
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/KuQWIegYdUJMwSsw6LOJEGnWJIU.roa
Signing time: Sat 29 Aug 2026 15:48:12 +0000
ROA not before: Sat 29 Aug 2026 15:48:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 93.115.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:35:04:a8:be:c7:70:1b:8b:c0:26:e0:31:52:66:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Aug 29 15:48:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ae41621e81875424cc12b30e8b3891069d62485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:b5:1f:23:53:df:00:ef:a6:67:08:a1:15:
98:06:f7:7f:4c:62:b7:02:c3:e8:28:e0:3f:cf:ee:
45:38:e4:e4:08:60:25:5b:57:cf:e9:4a:9b:aa:db:
c6:4b:3a:b3:5f:36:47:76:ad:60:d6:f3:64:73:59:
d6:87:5f:90:7e:1e:6d:d5:cb:11:5e:02:18:8f:7a:
11:c1:9d:ef:e6:37:a4:db:ca:43:41:d3:fd:67:8b:
75:67:87:a1:fd:f5:62:8e:7f:4e:75:7c:ff:be:67:
32:07:97:a9:96:13:fb:d7:9f:8a:0d:82:c8:57:8e:
75:8f:16:6e:dd:d3:d7:a1:35:02:4a:63:a1:34:e1:
01:90:4f:c6:ca:54:8b:29:ff:03:bd:cd:cd:a2:0d:
a6:d9:bc:b1:45:b8:cf:1f:cd:77:5f:b3:55:b8:97:
64:90:0f:cd:4b:62:d8:92:f9:a1:14:ec:3f:32:be:
60:6b:a1:34:be:f3:50:63:69:e3:1f:42:9d:87:e1:
71:6f:c8:c2:2a:e4:ee:4a:f9:c5:3b:f9:50:e5:11:
8f:13:f5:e3:e0:ae:b2:d1:72:2e:ff:8b:97:61:37:
12:bb:36:db:df:73:de:07:ad:f8:d5:a0:fc:98:21:
8a:3e:95:b9:88:53:96:35:ec:79:1a:a5:20:d7:0f:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:16:21:E8:18:75:42:4C:C1:2B:30:E8:B3:89:10:69:D6:24:85
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/KuQWIegYdUJMwSsw6LOJEGnWJIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.56.0/24
Signature Algorithm: sha256WithRSAEncryption
67:87:a3:05:b0:fb:25:44:7f:83:49:6f:58:c8:10:63:11:62:
2d:f4:b2:81:45:44:f0:39:40:65:7d:ad:c4:40:dd:57:16:8e:
94:0d:08:a5:74:a8:8b:a6:11:f7:8c:bf:da:7d:d1:02:2c:80:
6b:f5:fe:99:61:ca:ee:d9:87:25:64:2c:c9:ee:65:2c:90:88:
3c:7e:bf:3a:97:e5:59:71:43:22:04:d3:f0:2c:54:89:30:3a:
59:ed:b8:b6:8e:28:cf:6c:fe:0b:eb:f7:c8:80:b5:af:c1:83:
5f:97:03:08:ed:8e:8c:e8:8b:7a:64:9f:9a:c1:ba:d4:43:54:
95:88:2b:7d:e1:6b:98:48:9e:e5:cc:a2:55:bd:e9:c2:90:61:
e6:f4:5a:64:30:1b:14:4b:3c:25:20:f5:1a:99:7a:a7:33:63:
7f:5c:41:d8:a6:96:d3:4e:05:e7:65:1b:05:2e:32:15:69:3d:
0d:aa:40:83:2c:ce:14:f8:bf:57:c6:61:06:55:79:da:d2:9d:
21:c5:4b:59:fa:b3:f1:1a:b8:a7:8b:80:3c:64:c8:62:51:a1:
65:cc:7e:54:ae:07:c0:38:a2:12:77:d2:f2:8b:a9:26:43:b4:
6e:d5:9c:50:0d:d0:8a:db:2b:db:77:13:8c:fb:a7:22:27:1a:
0a:13:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:16 2026 by rpki-client