Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KMB7934I8Egd9MdmM_w1wXB8ulI.roa
File: KMB7934I8Egd9MdmM_w1wXB8ulI.roa (raw, json)
Hash identifier: H7FWdVZ2KXLi5JJbCJi5AKAhmu/XpBUGLFVfu9bmXjc=
Subject key identifier: 28:C0:7B:F7:7E:08:F0:48:1D:F4:C7:66:33:FC:35:C1:70:7C:BA:52
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019F83A1EB467CE3CF8AFB158A6C526BEFAD
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KMB7934I8Egd9MdmM_w1wXB8ulI.roa
Signing time: Tue 21 Jul 2026 07:44:14 +0000
ROA not before: Tue 21 Jul 2026 07:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:a1:eb:46:7c:e3:cf:8a:fb:15:8a:6c:52:6b:ef:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 21 07:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28c07bf77e08f0481df4c76633fc35c1707cba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:43:95:84:dc:c4:f3:68:3f:9c:2b:20:ef:
16:e6:f2:f4:49:cd:cf:9d:0a:73:c4:39:c1:1d:ce:
f2:62:f3:65:66:a6:7f:8c:38:61:52:10:5c:fe:03:
e3:58:f9:ab:94:56:85:f5:b4:8b:12:3a:fd:20:1a:
4c:2b:b6:76:26:8f:aa:ac:15:c1:95:e4:af:c3:05:
d7:b5:09:a0:98:62:74:81:f9:84:c9:0c:89:af:58:
2f:28:3c:b2:86:9d:9d:4e:87:65:a6:1d:f6:9c:92:
3e:46:05:b9:aa:48:34:4b:67:e7:18:b3:43:c9:0a:
28:01:bd:6c:46:0e:a1:86:28:27:49:00:35:99:ea:
4b:42:ff:7f:10:80:8c:3f:28:b0:84:e8:e9:ff:01:
dc:82:7f:1e:62:68:13:c4:5c:62:9c:9f:dd:db:0f:
46:a8:d1:b9:ab:38:59:6c:d1:b5:e0:20:b9:ba:ac:
fd:4d:99:ab:f7:1d:63:16:71:6c:f9:0a:64:93:91:
b3:5d:28:e3:44:23:07:af:f2:cf:16:e6:2f:69:8d:
1d:1d:c6:f4:96:21:9d:3d:29:bb:d7:f5:23:ae:0d:
dc:37:48:38:61:46:11:b2:d2:d4:8a:d3:da:af:b5:
d7:d5:bb:f0:cf:ea:6a:2b:9d:85:75:95:f7:50:dd:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C0:7B:F7:7E:08:F0:48:1D:F4:C7:66:33:FC:35:C1:70:7C:BA:52
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KMB7934I8Egd9MdmM_w1wXB8ulI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
109.236.51.0/24
185.254.28.0/24
185.254.31.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d2:d8:7b:09:5b:07:ce:8d:52:5a:1b:04:5b:00:19:05:d1:
43:d8:fc:87:6f:4e:70:02:d9:50:97:a1:80:6c:b5:d0:c8:ed:
dc:9f:dd:37:12:b3:fe:09:c2:b3:25:a9:08:d7:e7:29:35:3f:
b5:80:14:03:41:2f:01:c7:59:58:50:2a:18:da:22:9f:3c:e0:
1a:51:c7:a7:1e:c2:6d:6a:b4:c7:69:fe:3b:02:05:fb:80:bf:
59:2e:50:66:2c:06:4c:77:57:12:dd:93:d5:be:99:e9:76:a5:
1b:05:09:c4:61:51:d9:67:d4:a7:87:d2:45:fa:53:8c:2e:91:
69:76:a6:f2:dc:4c:b7:97:ce:3b:70:98:ce:84:ae:02:7b:77:
fa:44:0e:0e:cf:84:35:71:5c:31:b4:37:67:e7:20:44:42:cd:
0d:ac:5e:50:5a:2d:2b:72:1a:28:4a:40:39:c6:91:7b:ef:88:
42:8a:3d:08:b8:77:b4:da:67:da:ef:a8:12:1a:01:68:ee:8a:
6e:1c:1a:df:d7:37:8d:64:78:ab:44:02:d3:7f:1f:4a:9f:95:
54:f2:0e:3c:09:b3:27:ba:13:e4:84:a3:12:be:7a:33:16:57:
a4:a0:3f:52:8b:47:13:3f:e9:39:84:a3:fd:b6:26:ae:c1:ca:
85:3e:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:18 2026 by rpki-client