Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/KfuK6_1GmhA4L7oF23o8PiURAAU.roa
File: KfuK6_1GmhA4L7oF23o8PiURAAU.roa (raw, json)
Hash identifier: pjJuIoX4MIGwFaozZ4QY9EaH64QxN2QD7hTaSVSQfyM=
Subject key identifier: 29:FB:8A:EB:FD:46:9A:10:38:2F:BA:05:DB:7A:3C:3E:25:11:00:05
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A01E37CB0ED623BAD8014A4AF5A9754261
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/KfuK6_1GmhA4L7oF23o8PiURAAU.roa
Signing time: Thu 20 Aug 2026 08:09:28 +0000
ROA not before: Thu 20 Aug 2026 08:09:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 109.66.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:37:cb:0e:d6:23:ba:d8:01:4a:4a:f5:a9:75:42:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 20 08:09:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29fb8aebfd469a10382fba05db7a3c3e25110005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:6d:46:58:80:e4:46:c5:bf:ff:a0:93:c5:
ce:29:d6:d7:36:8e:bd:82:cd:2a:e5:12:52:c8:f2:
9c:88:f1:af:14:a5:5c:45:ca:8e:a2:54:22:88:96:
06:d5:de:cf:71:74:87:4d:23:12:91:8d:c9:97:b0:
0f:8c:45:e9:8d:f2:b1:7a:e8:08:52:4e:b1:be:a6:
09:f8:7e:14:fc:9f:e9:c8:76:24:f9:e2:80:54:b2:
97:9a:1a:76:db:8e:65:b7:0c:9b:87:82:4c:0c:a2:
84:7d:f7:00:5a:d1:3e:03:d0:e5:2c:88:d6:c8:4d:
47:34:11:4f:18:ff:7a:de:6a:31:e2:a5:48:28:c1:
60:9c:4b:3d:e3:81:6b:c2:ab:da:d5:1f:ce:c7:0d:
aa:b1:88:b5:5d:61:3c:ff:19:73:f6:0b:33:cb:5b:
3a:fa:3b:2f:dd:db:0a:ee:ba:ff:e2:60:8a:0c:6b:
b4:4f:a3:3a:03:97:82:ee:a8:ac:b1:c2:29:df:6b:
a2:dd:db:1b:a2:7f:4b:5a:65:24:4e:ca:8b:48:79:
ba:c1:0f:a8:22:92:73:74:44:80:6d:1e:98:9d:c8:
f1:ec:52:13:13:45:f4:6a:16:5d:1d:58:26:06:cc:
cb:2c:e5:71:97:42:9f:e8:1d:f8:0e:17:65:ca:b3:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FB:8A:EB:FD:46:9A:10:38:2F:BA:05:DB:7A:3C:3E:25:11:00:05
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/KfuK6_1GmhA4L7oF23o8PiURAAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.81.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e8:eb:d1:b3:5a:8f:81:4b:d8:86:1e:c1:4a:34:40:66:a6:
a9:26:b2:43:f7:bf:5f:42:81:78:6b:6b:c7:49:8f:25:e2:c7:
24:a8:86:c9:34:f1:51:20:12:80:c0:49:49:2a:53:48:8a:49:
98:79:20:32:fd:00:0c:3c:40:f3:4a:c7:5e:c0:ac:11:6c:f9:
95:9a:49:5b:16:30:60:6d:29:c1:92:39:b5:b7:ba:53:93:ae:
f3:1d:3c:91:d2:ac:79:69:ba:74:ff:9a:22:8f:e1:e0:a4:52:
f6:31:cc:6c:17:14:4d:52:b3:4e:e8:90:dd:21:3f:e6:30:14:
4c:07:fc:bd:45:8c:bc:7b:f4:7a:82:7c:c1:c0:7c:6c:56:bc:
d1:2c:05:44:4b:b9:4b:3d:cb:7e:cc:39:e1:98:eb:ac:95:5b:
64:95:7d:fa:e1:40:c8:23:10:d9:4d:1f:cd:0f:e3:88:ae:57:
1c:ea:21:96:52:9b:30:08:d9:97:5b:6c:b8:d5:14:fd:1e:62:
58:43:94:af:af:c2:44:9f:56:94:24:52:c6:1f:27:45:83:0e:
f3:0e:ae:e7:f0:44:30:a5:5a:3d:7d:3e:5e:d2:1c:c3:03:a2:
7c:bd:1c:02:20:73:d5:64:2a:de:23:e0:8d:db:1e:46:93:0d:
42:18:1e:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAeN8sO1iO62AFKSvWpdUJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwODIwMDgwOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWZiOGFlYmZkNDY5YTEwMzgyZmJhMDVkYjdhM2MzZTI1MTEwMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsNtRliA5EbFv/+gk8XOKdbXNo69
gs0q5RJSyPKciPGvFKVcRcqOolQiiJYG1d7PcXSHTSMSkY3Jl7APjEXpjfKxeugI
Uk6xvqYJ+H4U/J/pyHYk+eKAVLKXmhp2245ltwybh4JMDKKEffcAWtE+A9DlLIjW
yE1HNBFPGP963mox4qVIKMFgnEs944Frwqva1R/Oxw2qsYi1XWE8/xlz9gszy1s6
+jsv3dsK7rr/4mCKDGu0T6M6A5eC7qisscIp32ui3dsbon9LWmUkTsqLSHm6wQ+o
IpJzdESAbR6Yncjx7FITE0X0ahZdHVgmBszLLOVxl0Kf6B34DhdlyrOMBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCn7iuv9RpoQOC+6Bdt6PD4lEQAFMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvS2Z1SzZfMUdtaEE0TDdvRjIzbzhQaVVSQUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUJRMA0G
CSqGSIb3DQEBCwUAA4IBAQCG6OvRs1qPgUvYhh7BSjRAZqapJrJD979fQoF4a2vH
SY8l4sckqIbJNPFRIBKAwElJKlNIikmYeSAy/QAMPEDzSsdewKwRbPmVmklbFjBg
bSnBkjm1t7pTk67zHTyR0qx5abp0/5oij+HgpFL2McxsFxRNUrNO6JDdIT/mMBRM
B/y9RYy8e/R6gnzBwHxsVrzRLAVES7lLPct+zDnhmOuslVtklX364UDIIxDZTR/N
D+OIrlcc6iGWUpswCNmXW2y41RT9HmJYQ5Svr8JEn1aUJFLGHydFgw7zDq7n8EQw
pVo9fT5e0hzDA6J8vRwCIHPVZCreI+CN2x5Gkw1CGB6B
-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:05 2026 by rpki-client