Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ku-pFyguE5cHtF69_qC9IQyhWD4.roa
File: ku-pFyguE5cHtF69_qC9IQyhWD4.roa (raw, json)
Hash identifier: SRmdiGErBs4riF+x6opmEUXvpJ+dRiQ3pdAIUM1No24=
Subject key identifier: 92:EF:A9:17:28:2E:13:97:07:B4:5E:BD:FE:A0:BD:21:0C:A1:58:3E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A06CF267DFEDB2C5FE9C5DBBC4EA21B2E2
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ku-pFyguE5cHtF69_qC9IQyhWD4.roa
Signing time: Fri 04 Sep 2026 15:03:40 +0000
ROA not before: Fri 04 Sep 2026 15:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f2:67:df:ed:b2:c5:fe:9c:5d:bb:c4:ea:21:b2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 4 15:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92efa917282e139707b45ebdfea0bd210ca1583e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:77:25:0b:d5:44:98:0d:25:a3:d3:6c:aa:
02:29:6d:ba:39:52:4f:31:10:33:e7:6c:c0:2c:f0:
08:e1:b7:9d:94:f9:66:a5:e0:ec:c4:27:74:88:1d:
55:f1:29:c3:68:7c:03:fa:bc:45:b4:85:7a:4b:ac:
05:67:66:fa:73:c6:1c:00:13:ba:3c:5b:50:a1:8e:
9a:1e:65:46:6c:d0:aa:a7:78:fc:71:e0:06:0c:04:
83:e9:e1:af:84:bc:69:db:ff:89:17:8f:b8:9d:87:
46:3a:5b:6f:b7:0e:1d:dc:b6:ab:6d:4b:01:ca:45:
17:37:31:ad:4f:b8:c0:2e:38:5e:10:09:5c:d4:15:
e2:60:81:fe:de:ac:c8:4b:d4:6e:7d:77:af:ee:64:
68:83:9e:ed:86:cd:c6:40:87:19:70:d3:72:e7:4c:
ed:3e:1c:19:be:14:aa:22:42:fe:85:96:68:a1:f1:
5f:e2:99:28:7f:87:dc:0a:34:ee:23:01:1d:29:dd:
03:b7:3c:53:65:ce:bb:7a:39:f5:4f:1e:25:89:4b:
a6:28:61:93:91:a7:9a:98:01:6e:fc:85:13:0f:80:
3c:8b:24:a4:fd:be:5c:dc:9b:f4:7b:fa:9d:71:76:
1a:b8:d7:04:bb:82:9c:c9:bc:fc:87:61:f2:fc:f7:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EF:A9:17:28:2E:13:97:07:B4:5E:BD:FE:A0:BD:21:0C:A1:58:3E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ku-pFyguE5cHtF69_qC9IQyhWD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.164.0/22
185.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
35:05:c9:ed:eb:85:e4:ab:0e:8d:28:c9:12:08:a8:71:93:65:
36:c7:64:dc:2c:14:39:b6:0a:0c:16:74:f1:1d:a8:1e:31:1a:
09:57:d3:7a:a9:5e:b2:c9:28:95:4e:39:a0:05:8a:58:77:84:
ea:a8:bb:2b:5b:2b:06:2c:2b:0d:a4:be:ed:37:9d:34:e7:43:
eb:f0:42:a6:f0:7f:50:8f:b7:78:4b:7d:90:ab:4f:c6:fc:3f:
23:c4:4b:d4:b4:e5:84:14:20:e8:af:c9:56:ec:33:86:de:d9:
6c:c3:8f:28:a8:f3:15:f5:ac:c4:f3:fd:96:ff:5c:23:e7:0b:
45:1e:60:8e:d4:2c:0f:57:2f:8f:e4:54:a2:28:93:88:cf:56:
c1:d8:55:7a:5c:9f:dc:6c:c7:fe:87:ff:0f:c3:3c:a2:61:e7:
2f:a4:8c:31:0d:43:76:66:0c:1c:f4:d1:b5:31:f0:27:1d:7f:
c4:a2:ee:ae:91:e8:07:b2:b9:c2:a2:f6:b2:f7:00:87:46:25:
32:1b:5e:59:9b:ff:2f:94:f9:56:b0:54:14:be:0c:c7:03:56:
85:5d:c0:09:a5:b6:4d:3a:ca:15:8c:a4:11:81:54:7f:9b:16:
ae:1b:1c:1f:87:ea:2e:f5:3d:91:78:c8:a7:71:8a:83:20:7b:
9c:02:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:47 2026 by rpki-client