Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/KBKlhWMG0Rouh36bd9hH2_4iw1w.roa
File: KBKlhWMG0Rouh36bd9hH2_4iw1w.roa (raw, json)
Hash identifier: yknxcNHVgc1M1hYYcpZWhF9GZLOrrn9T1pEy+vc2uA0=
Subject key identifier: 28:12:A5:85:63:06:D1:1A:2E:87:7E:9B:77:D8:47:DB:FE:22:C3:5C
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019E65FF194C7AB1BA429475BCD77E3C3490
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/KBKlhWMG0Rouh36bd9hH2_4iw1w.roa
Signing time: Tue 26 May 2026 20:34:37 +0000
ROA not before: Tue 26 May 2026 20:34:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7155
IP address blocks: 185.84.124.0/22 maxlen: 24
185.84.125.0/24 maxlen: 24
185.84.126.0/24 maxlen: 24
185.84.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:65:ff:19:4c:7a:b1:ba:42:94:75:bc:d7:7e:3c:34:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: May 26 20:34:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2812a5856306d11a2e877e9b77d847dbfe22c35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:91:79:fd:33:b5:4e:11:eb:13:30:5b:a3:
dd:d7:32:b6:73:c3:4e:1b:5d:94:e7:68:67:34:44:
62:d7:31:60:ca:db:c5:a1:9a:3c:1c:ff:d5:d6:45:
52:e9:58:a6:82:48:c6:d0:67:b6:2a:9d:58:ae:f4:
15:45:43:53:45:78:e7:d3:48:bf:32:dd:2d:bd:7b:
0d:78:96:12:7f:aa:2a:8b:1c:2f:0c:53:f3:2e:86:
cb:d5:84:52:24:70:a1:33:f1:c0:51:d6:f6:92:d4:
52:ab:13:ea:1c:e9:ef:ab:7e:bf:14:c2:61:97:3d:
37:f8:3b:5f:20:4e:e5:a2:e8:81:67:87:4c:03:30:
e3:6c:a3:d0:be:82:48:de:b6:37:85:dc:1e:93:1d:
ba:30:bc:f1:37:64:f0:55:4f:81:b4:86:bb:74:f7:
73:83:6f:6d:95:b9:93:d1:c2:07:58:17:09:99:c5:
35:b3:0c:66:71:b5:3f:0c:84:c6:51:bd:a6:04:dc:
c3:3c:2b:42:84:4a:d4:cd:e6:d1:18:d6:83:02:6c:
49:d9:e5:10:aa:e6:35:ad:9d:a3:8e:fb:ff:08:a3:
16:97:f6:2e:28:f9:3d:ac:de:eb:74:c2:d2:ba:0d:
6e:16:98:24:6e:3f:e5:bc:0a:23:92:8b:c1:20:81:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:A5:85:63:06:D1:1A:2E:87:7E:9B:77:D8:47:DB:FE:22:C3:5C
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/KBKlhWMG0Rouh36bd9hH2_4iw1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:00:3b:ed:b2:34:c2:12:2a:42:93:99:4e:fc:60:5d:fb:bd:
8c:69:1d:47:7b:6b:f3:4b:44:0e:46:4f:1b:a4:06:f2:29:ab:
d3:2c:60:7f:20:85:b4:bc:d9:e8:9b:0e:39:7a:d2:21:5a:a5:
57:e6:46:da:4e:bb:c5:16:7f:1e:79:97:31:0d:7d:3f:57:31:
89:c9:e7:ae:30:a8:d0:90:93:5c:e8:76:ae:ed:4b:3b:c0:5d:
8b:5e:c0:23:fe:0a:09:04:6a:4b:0d:b9:83:55:47:f1:2e:59:
56:87:dc:0d:b9:04:9c:e7:a6:88:6c:b7:7f:74:25:7b:b7:d5:
c7:42:dd:cb:d1:22:1e:87:13:94:df:20:4f:5c:0c:44:8e:7f:
fa:eb:41:d2:5d:ff:24:da:cb:45:bc:08:e8:7e:dd:f0:e7:d2:
ea:46:e1:2f:a0:59:ad:2f:bf:81:94:c2:a2:a7:a3:cc:1a:e2:
48:38:6f:04:9b:a4:fa:e5:52:04:2c:63:f8:89:0d:bd:32:84:
0d:f9:73:a1:a2:37:41:b0:e7:d4:ec:b7:4a:e3:e7:a8:0a:8b:
a5:e9:4f:5d:dc:4b:56:b8:82:cc:3f:08:98:11:b1:22:25:a4:
2b:0c:54:19:1e:b2:6d:a2:d7:44:34:70:0c:41:a3:d1:31:9e:
46:76:f9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:38 2026 by rpki-client