Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/K8Pl-3shJVSFO1NjtESIu-LhvhI.roa
File: K8Pl-3shJVSFO1NjtESIu-LhvhI.roa (raw, json)
Hash identifier: 2P+YkYPLiqJ+iMIcDXBaUYUC0GvY0TgV4KXFEFI7BZk=
Subject key identifier: 2B:C3:E5:FB:7B:21:25:54:85:3B:53:63:B4:44:88:BB:E2:E1:BE:12
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019E68EE96B2D594207CC1A419B862D8DC0E
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/K8Pl-3shJVSFO1NjtESIu-LhvhI.roa
Signing time: Wed 27 May 2026 10:15:27 +0000
ROA not before: Wed 27 May 2026 10:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 194.33.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:ee:96:b2:d5:94:20:7c:c1:a4:19:b8:62:d8:dc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: May 27 10:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bc3e5fb7b212554853b5363b44488bbe2e1be12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:1c:b5:9c:79:e7:34:e9:06:c3:2b:0a:42:
9e:f9:be:cc:22:1a:9d:e2:79:66:d7:5e:3e:00:60:
05:79:77:81:ab:f0:66:bf:fe:2a:71:1e:80:9f:82:
b6:33:e9:d6:cd:db:8f:e8:27:99:b8:0a:28:e4:1c:
67:1b:69:45:f9:91:29:91:c2:10:42:49:b7:e7:33:
58:01:b8:9a:3d:0b:57:d0:2e:25:61:4b:5e:e1:5c:
f8:fd:27:2d:8c:ae:d2:e3:ec:93:ee:ef:a7:71:a1:
ba:25:61:0f:53:a5:25:68:b4:a9:a3:c2:72:81:6d:
8f:a2:03:d0:e5:75:24:46:6f:34:9d:01:46:28:33:
19:fb:45:68:9c:98:22:6c:9c:ea:69:5c:e5:57:bc:
a5:84:53:43:e1:8c:8b:f8:07:c2:f3:71:64:32:19:
8a:31:c6:15:ce:90:3e:b7:ef:02:66:b6:d0:2c:70:
86:26:81:77:b7:69:79:85:6d:2b:9f:42:06:cb:46:
19:d5:57:f0:a0:1c:f5:65:ff:e0:65:99:d6:51:b7:
b9:90:8c:bc:41:da:2d:40:05:64:b9:cf:e5:c2:b1:
3a:4f:b5:91:b6:a1:77:ab:74:36:23:54:dc:39:cf:
ec:26:d6:eb:90:5d:7d:70:ce:26:3b:a4:8e:78:e8:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:E5:FB:7B:21:25:54:85:3B:53:63:B4:44:88:BB:E2:E1:BE:12
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/K8Pl-3shJVSFO1NjtESIu-LhvhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:83:19:09:6c:e7:c8:18:2b:fd:d3:a9:83:d5:32:32:f9:a0:
34:0f:33:44:87:7c:25:7a:db:23:98:d6:fa:7e:ff:3a:31:9f:
e3:4f:49:fc:07:91:c5:b8:b3:cd:68:2e:ed:8b:61:3b:b2:c7:
74:e3:18:02:89:29:91:65:69:50:87:0d:69:97:47:83:a7:d2:
49:5b:7f:f7:17:1e:92:09:7e:9f:e9:82:80:2c:95:48:68:1e:
ae:e3:c5:f2:59:cf:a5:18:6a:72:49:78:52:2e:39:46:eb:b9:
47:06:38:11:1b:01:8d:dc:a4:b6:e2:bd:0e:cc:d7:68:60:a4:
6f:34:9f:df:ba:ef:0c:9b:0c:69:57:de:a0:20:e0:cd:b5:0d:
62:d7:25:cf:8f:19:f9:1a:a1:fd:d7:f9:82:81:b1:a5:79:80:
c9:2e:9f:7b:c5:d0:69:27:01:b8:11:d8:71:32:b7:16:c9:38:
7e:52:74:aa:18:a1:0a:ec:c6:64:d8:5b:74:b7:46:13:aa:a1:
83:dd:68:a7:50:a3:c9:70:97:c5:73:89:34:58:0d:b7:08:c7:
69:da:81:8f:cc:46:4b:03:47:b9:ea:cb:95:09:b1:be:ea:7d:
dc:2a:bc:f2:98:5b:51:4f:de:78:f3:b7:1a:1d:85:11:2a:ba:
36:7a:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:06 2026 by rpki-client