Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Kspb3Y-3TqVkeHkqeGqXqk4OQWA.roa
File: Kspb3Y-3TqVkeHkqeGqXqk4OQWA.roa (raw, json)
Hash identifier: 6ep+ieeLgHqg5HT8yEOylVhvojGIS+IXzOftgEonsw4=
Subject key identifier: 2A:CA:5B:DD:8F:B7:4E:A5:64:78:79:2A:78:6A:97:AA:4E:0E:41:60
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F6A70852887C4F322E7D12D1DE081E60D
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Kspb3Y-3TqVkeHkqeGqXqk4OQWA.roa
Signing time: Thu 16 Jul 2026 10:19:46 +0000
ROA not before: Thu 16 Jul 2026 10:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 109.66.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:70:85:28:87:c4:f3:22:e7:d1:2d:1d:e0:81:e6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 16 10:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aca5bdd8fb74ea56478792a786a97aa4e0e4160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:d9:1a:3e:f6:79:43:80:f1:8d:9d:56:0f:
63:14:44:cc:bf:e8:a5:32:3c:d9:dd:50:fa:6e:ba:
3e:7e:d1:52:38:d9:70:25:02:6d:6e:21:dd:9a:04:
0a:b2:8d:e6:cd:45:24:4b:ff:87:02:79:10:17:54:
20:c0:96:0a:76:19:f3:00:fa:39:55:97:52:79:0e:
73:4e:00:78:7e:38:63:d9:e6:f7:52:9e:cb:11:af:
23:57:df:15:ff:95:aa:91:89:51:5a:bc:59:f6:8c:
8f:91:7f:99:81:23:ed:dd:06:cd:a6:6c:3d:d3:a3:
d1:d3:d8:64:cd:65:22:01:48:79:d0:93:71:ae:c4:
21:f9:9a:ab:d4:60:0e:ac:0b:8d:57:85:d7:7c:56:
90:11:79:81:c2:f6:29:0f:a3:c0:70:fb:d4:14:9f:
2f:68:f5:0d:22:dd:bc:7e:1b:45:1f:60:72:db:37:
96:21:72:94:b9:2a:75:9e:80:f0:14:cd:e5:1a:00:
43:4c:17:cc:76:1b:20:d9:7f:e4:cf:96:1a:49:f5:
e3:9b:a2:f1:c4:0d:9c:e9:07:56:b1:e8:19:70:c8:
25:56:f1:46:eb:ad:80:4c:5d:e7:ce:5a:a1:80:ec:
c0:d1:79:3c:f8:b8:5b:cd:15:01:b7:4a:b0:e7:59:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CA:5B:DD:8F:B7:4E:A5:64:78:79:2A:78:6A:97:AA:4E:0E:41:60
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Kspb3Y-3TqVkeHkqeGqXqk4OQWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.88.0/23
Signature Algorithm: sha256WithRSAEncryption
03:f6:53:fb:17:ad:1b:71:70:e2:7f:53:2d:1e:9a:de:2a:75:
be:7b:1a:22:5c:9f:cf:ab:fe:c3:25:98:1c:72:7e:76:c2:b3:
7f:07:65:11:52:69:d2:40:d0:10:52:be:a0:9c:7e:df:0a:ed:
0b:02:fa:83:6a:68:c9:46:84:be:e0:90:e9:c0:1b:c6:a2:d9:
66:7a:09:d9:c8:09:aa:63:d2:d7:7d:e8:d9:83:58:45:f0:f5:
92:13:12:7c:22:59:08:6a:cf:37:c8:b7:29:75:be:fa:f1:3f:
05:42:11:2f:da:5c:8f:ad:d9:55:dd:68:b1:21:6a:f9:4e:ca:
02:d8:71:3a:fa:71:48:9a:a2:3b:84:eb:72:48:31:49:56:45:
dd:3c:f9:01:64:43:a5:06:24:53:56:4d:11:07:ab:e8:e6:e2:
86:fc:3e:d4:eb:ca:05:59:07:30:22:29:d4:d2:67:f2:92:91:
3c:85:08:b1:c1:09:71:2f:cb:b6:9c:64:d8:f0:2d:67:ff:5e:
20:06:82:dc:2e:f5:0d:5b:3e:1b:a5:22:a0:15:04:fa:f7:74:
2a:a8:a9:db:ed:92:f2:13:b7:18:b9:02:e4:c3:c9:f4:76:c3:
f3:17:72:cc:15:d3:aa:5c:93:2a:c8:a4:8a:f0:e0:6d:28:8a:
ed:25:e7:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9qcIUoh8TzIufRLR3ggeYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzE2MTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWNhNWJkZDhmYjc0ZWE1NjQ3ODc5MmE3ODZhOTdhYTRlMGU0MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySDZGj72eUOA8Y2dVg9jFETMv+il
MjzZ3VD6bro+ftFSONlwJQJtbiHdmgQKso3mzUUkS/+HAnkQF1QgwJYKdhnzAPo5
VZdSeQ5zTgB4fjhj2eb3Up7LEa8jV98V/5WqkYlRWrxZ9oyPkX+ZgSPt3QbNpmw9
06PR09hkzWUiAUh50JNxrsQh+Zqr1GAOrAuNV4XXfFaQEXmBwvYpD6PAcPvUFJ8v
aPUNIt28fhtFH2By2zeWIXKUuSp1noDwFM3lGgBDTBfMdhsg2X/kz5YaSfXjm6Lx
xA2c6QdWsegZcMglVvFG662ATF3nzlqhgOzA0Xk8+LhbzRUBt0qw51lUCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCrKW92Pt06lZHh5Knhql6pODkFgMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvS3NwYjNZLTNUcVZrZUhrcWVHcVhxazRPUVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbUJYMA0G
CSqGSIb3DQEBCwUAA4IBAQAD9lP7F60bcXDif1MtHpreKnW+exoiXJ/Pq/7DJZgc
cn52wrN/B2URUmnSQNAQUr6gnH7fCu0LAvqDamjJRoS+4JDpwBvGotlmegnZyAmq
Y9LXfejZg1hF8PWSExJ8IlkIas83yLcpdb768T8FQhEv2lyPrdlV3WixIWr5TsoC
2HE6+nFImqI7hOtySDFJVkXdPPkBZEOlBiRTVk0RB6vo5uKG/D7U68oFWQcwIinU
0mfykpE8hQixwQlxL8u2nGTY8C1n/14gBoLcLvUNWz4bpSKgFQT693QqqKnb7ZLy
E7cYuQLkw8n0dsPzF3LMFdOqXJMqyKSK8OBtKIrtJefd
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:56 2026 by rpki-client