Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/K0d-nr6FyB_kVSGyDh66Rm6xuvo.roa
File: K0d-nr6FyB_kVSGyDh66Rm6xuvo.roa (raw, json)
Hash identifier: EjAMOySbpY1BQojVyP+4Fblh4A/2sP9R9ArCHE0eUrI=
Subject key identifier: 2B:47:7E:9E:BE:85:C8:1F:E4:55:21:B2:0E:1E:BA:46:6E:B1:BA:FA
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 019F7506E6C1A7ABE11BAA202C58B7F25929
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/K0d-nr6FyB_kVSGyDh66Rm6xuvo.roa
Signing time: Sat 18 Jul 2026 11:40:14 +0000
ROA not before: Sat 18 Jul 2026 11:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 45.14.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:06:e6:c1:a7:ab:e1:1b:aa:20:2c:58:b7:f2:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jul 18 11:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b477e9ebe85c81fe45521b20e1eba466eb1bafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:4b:c4:fa:d8:40:ea:e3:73:6a:9a:54:7e:
52:76:94:38:bd:9f:61:28:53:0c:3b:92:b1:34:c6:
5e:b5:9a:c0:81:4e:52:94:01:24:73:ee:71:ad:bd:
5b:a1:06:7a:83:1c:8c:e3:e2:da:68:d1:bf:41:83:
8c:f5:85:2f:17:99:b3:46:d9:0c:84:7f:ed:8c:b9:
f7:90:16:35:ee:87:64:c5:a4:05:64:4b:60:77:7e:
14:5f:25:d8:db:40:52:62:33:73:ac:57:35:16:8f:
52:a3:a5:ee:dc:a2:74:47:8d:e2:bf:ea:47:ec:1c:
de:6d:61:32:23:64:87:64:b5:29:ca:27:e3:6f:7f:
ef:d5:e8:f7:c3:c1:4c:50:90:82:5c:db:3f:ab:9e:
aa:98:83:73:5a:4f:45:00:38:f7:f3:b6:d1:ad:32:
1c:83:02:5e:ea:b9:c9:3e:fd:b0:ed:bf:ce:a5:a2:
6e:ff:ff:1f:5a:37:e9:fb:9b:14:a1:f3:d6:63:c6:
ae:ad:91:a9:a2:9e:13:91:91:6d:34:db:35:1b:ab:
09:90:ad:79:55:be:4b:9d:87:cb:41:8a:98:1d:d4:
4e:3e:9a:ab:e6:49:e5:17:43:bd:58:18:4b:81:3e:
db:70:43:49:43:00:e7:70:5f:b1:8a:44:e8:0d:38:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:7E:9E:BE:85:C8:1F:E4:55:21:B2:0E:1E:BA:46:6E:B1:BA:FA
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/K0d-nr6FyB_kVSGyDh66Rm6xuvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:bd:dd:9d:74:d0:48:85:11:60:92:1e:bd:82:1c:45:ca:4e:
82:06:77:52:f3:0a:62:87:58:cf:70:21:f4:65:98:75:01:63:
c5:36:a9:04:52:26:69:bb:e8:22:e5:13:6f:d0:c8:c8:dd:dd:
b6:64:37:f3:e4:a9:1b:91:f7:86:74:68:a4:ba:ec:86:34:56:
c3:8f:98:cc:d3:8e:78:a8:04:c4:8b:6a:7b:7c:cf:5f:90:17:
30:c0:04:bf:23:86:40:eb:bf:cf:5c:03:09:bc:92:94:9e:61:
02:43:4d:6a:98:72:8b:c6:7f:88:a9:80:1c:f6:02:8b:77:3e:
25:3a:3d:60:bc:f8:af:3e:57:14:fc:d0:97:3e:f8:2e:21:68:
51:0f:bd:63:54:de:af:cf:7c:97:eb:d9:ef:18:57:03:f1:34:
20:5b:cd:41:6d:7e:10:c5:2b:c5:8f:3f:57:14:14:5c:06:0a:
ea:04:f9:d6:a0:97:b1:aa:b6:ad:0f:c7:81:62:35:bc:f5:3b:
cf:fa:5a:f1:21:2d:12:b8:14:33:47:61:69:bf:9b:a1:37:f2:
3e:d4:57:ef:fc:d6:5b:5f:26:7c:e8:5d:b0:eb:b2:27:5b:80:
91:36:d7:25:c3:40:d1:62:bf:73:83:61:c4:82:4f:9b:2f:eb:
a1:04:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:51 2026 by rpki-client