Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/KV59OO7KJClf-nV-SktyqxjeQD0.roa
File: KV59OO7KJClf-nV-SktyqxjeQD0.roa (raw, json)
Hash identifier: +DyBXnPmKjRM65p+azkaO5DME2Q2gJhFVzsQryAN8lM=
Subject key identifier: 29:5E:7D:38:EE:CA:24:29:5F:FA:75:7E:4A:4B:72:AB:18:DE:40:3D
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019F36309DF0F72488B60DC68262FB1A1590
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/KV59OO7KJClf-nV-SktyqxjeQD0.roa
Signing time: Mon 06 Jul 2026 06:49:43 +0000
ROA not before: Mon 06 Jul 2026 06:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 195.3.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:30:9d:f0:f7:24:88:b6:0d:c6:82:62:fb:1a:15:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jul 6 06:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=295e7d38eeca24295ffa757e4a4b72ab18de403d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:0c:94:db:7e:0a:4e:79:ee:38:53:98:d8:
e2:55:1f:56:50:c4:7f:81:4a:ab:e1:d2:b1:7a:70:
b3:d6:c7:53:c8:8d:59:59:54:9c:8c:35:8a:ed:c2:
f3:14:fe:05:83:e7:fa:04:37:60:e7:a2:6b:01:2a:
ed:02:09:c0:a4:3b:9c:97:54:c2:f0:b8:d1:45:77:
9f:06:56:05:ec:da:03:42:9d:56:95:97:da:7b:fa:
12:64:a9:ad:2a:86:fc:b5:90:3b:2f:fd:ed:2b:bc:
b2:65:7c:e0:f0:d2:3b:53:f8:50:f9:aa:cc:e0:d8:
0a:58:ab:0e:24:de:d8:52:f1:08:1c:5d:13:35:47:
12:51:85:85:8a:5c:ab:3b:2d:93:37:16:e1:17:0b:
a7:38:79:7d:85:99:4f:8d:17:13:b2:2d:dc:df:13:
63:71:1c:14:f3:5d:61:f5:f6:ed:df:ef:7e:15:6d:
9e:73:bf:6f:1b:e7:2c:46:4d:e9:04:9b:d9:10:4d:
ad:1e:36:0f:7e:97:0e:42:71:d0:2c:b7:db:9e:67:
66:5c:37:fb:a6:f4:08:db:56:0a:37:9f:14:c3:fc:
4e:08:b6:1b:e3:4f:e0:92:bd:10:7a:f3:0e:ea:4e:
dd:e5:81:59:98:36:af:54:2b:cd:75:99:8d:1e:7f:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:7D:38:EE:CA:24:29:5F:FA:75:7E:4A:4B:72:AB:18:DE:40:3D
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/KV59OO7KJClf-nV-SktyqxjeQD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.3.146.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:52:f9:19:27:37:ba:56:17:55:91:fd:c4:ce:95:40:b2:59:
b2:b8:e7:d1:a3:c6:82:01:7a:ff:ed:8f:f2:dc:62:f3:92:3d:
92:4e:89:34:9f:7c:1d:90:a8:bc:d8:af:7b:f4:38:38:d3:84:
af:bb:26:7d:75:6b:c3:9f:8f:c7:53:52:55:01:4c:a1:f4:62:
0a:ed:d7:28:01:ce:35:79:5d:6d:09:c1:0a:c0:d2:74:40:b0:
f2:c4:94:28:46:58:72:07:7f:d8:4a:da:f8:b7:e1:49:cc:cd:
d1:41:93:ee:0b:06:89:10:fc:4c:8a:8c:35:78:b7:ae:05:43:
8e:82:40:8d:26:29:8c:cd:7e:b0:1f:1c:c2:49:c2:bf:e5:9e:
d3:4f:86:d2:35:f4:49:ab:ce:a2:f3:5d:b2:78:7b:9d:70:d0:
b2:a4:46:b1:6e:66:81:3c:cc:b3:ef:cb:41:8b:b2:30:b5:ab:
b3:09:e0:8a:f1:f7:e3:7d:88:1f:2f:8f:54:2c:fa:90:70:f7:
27:e5:ba:45:f6:56:5f:ab:17:99:40:9b:4e:72:7b:85:67:e9:
4f:c0:9a:55:49:83:de:f8:fd:6b:12:82:21:1c:c0:06:45:10:
83:bf:9e:04:ef:33:54:e5:28:94:0d:be:5f:22:e5:a2:60:36:
2a:8d:a4:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ82MJ3w9ySItg3GgmL7GhWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjYwNzA2MDY0OTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTVlN2QzOGVlY2EyNDI5NWZmYTc1N2U0YTRiNzJhYjE4ZGU0MDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3IMlNt+Ck557jhTmNjiVR9WUMR/
gUqr4dKxenCz1sdTyI1ZWVScjDWK7cLzFP4Fg+f6BDdg56JrASrtAgnApDucl1TC
8LjRRXefBlYF7NoDQp1WlZfae/oSZKmtKob8tZA7L/3tK7yyZXzg8NI7U/hQ+arM
4NgKWKsOJN7YUvEIHF0TNUcSUYWFilyrOy2TNxbhFwunOHl9hZlPjRcTsi3c3xNj
cRwU811h9fbt3+9+FW2ec79vG+csRk3pBJvZEE2tHjYPfpcOQnHQLLfbnmdmXDf7
pvQI21YKN58Uw/xOCLYb40/gkr0QevMO6k7d5YFZmDavVCvNdZmNHn8wewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFClefTjuyiQpX/p1fkpLcqsY3kA9MB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvS1Y1OU9PN0tKQ2xmLW5WLVNrdHlxeGplUUQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwwOSMA0G
CSqGSIb3DQEBCwUAA4IBAQB9UvkZJze6VhdVkf3EzpVAslmyuOfRo8aCAXr/7Y/y
3GLzkj2STok0n3wdkKi82K979Dg404SvuyZ9dWvDn4/HU1JVAUyh9GIK7dcoAc41
eV1tCcEKwNJ0QLDyxJQoRlhyB3/YStr4t+FJzM3RQZPuCwaJEPxMiow1eLeuBUOO
gkCNJimMzX6wHxzCScK/5Z7TT4bSNfRJq86i812yeHudcNCypEaxbmaBPMyz78tB
i7IwtauzCeCK8ffjfYgfL49ULPqQcPcn5bpF9lZfqxeZQJtOcnuFZ+lPwJpVSYPe
+P1rEoIhHMAGRRCDv54E7zNU5SiUDb5fIuWiYDYqjaSU
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:32 2026 by rpki-client