Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/KvWaeeqQ_8LxrXnU7iPw3pDk5Nw.roa
File: KvWaeeqQ_8LxrXnU7iPw3pDk5Nw.roa (raw, json)
Hash identifier: fyuq7nxYcmnb9uWc5YF1bzggm+uG6ZNP305G1Sn2YkA=
Subject key identifier: 2A:F5:9A:79:EA:90:FF:C2:F1:AD:79:D4:EE:23:F0:DE:90:E4:E4:DC
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019EDBC829532E67AB987D2EA1CB7B85A080
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/KvWaeeqQ_8LxrXnU7iPw3pDk5Nw.roa
Signing time: Thu 18 Jun 2026 17:29:48 +0000
ROA not before: Thu 18 Jun 2026 17:29:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 45.133.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:c8:29:53:2e:67:ab:98:7d:2e:a1:cb:7b:85:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jun 18 17:29:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2af59a79ea90ffc2f1ad79d4ee23f0de90e4e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:2e:7c:9f:a2:27:f2:38:57:3a:fe:04:3f:
9d:d9:d8:76:44:c7:66:cf:e4:38:15:be:1b:b0:da:
0d:ac:d4:91:e8:d9:98:07:07:9f:40:0f:51:a6:85:
fc:d6:7f:42:be:e5:53:95:7d:3b:50:44:57:58:b1:
31:5d:ec:98:c3:e9:2d:b2:aa:00:f9:ac:ca:28:7a:
56:9c:6a:c4:20:d1:f1:e8:ed:44:1b:8d:6f:7e:fe:
44:98:09:54:e7:a9:b9:c6:3d:2d:24:b5:68:cd:1a:
11:8d:62:e8:47:d9:f6:52:8d:36:68:eb:77:b4:bb:
a4:79:b4:7e:da:27:bd:b6:42:0d:44:e5:52:60:e0:
32:0d:c8:d0:83:a3:8a:30:04:3c:9c:37:82:11:0e:
6d:11:02:f7:6d:76:24:46:7c:3e:f9:a5:2a:0f:aa:
c4:ae:c7:42:d7:db:37:0e:cc:03:93:ec:3d:61:6b:
9e:31:b5:f7:5a:fc:8f:49:dc:bb:21:c7:45:71:6c:
ed:dc:df:7e:03:92:e6:77:37:5c:3d:5a:f2:63:c5:
09:96:18:ff:87:db:6a:ea:02:41:63:7c:50:42:1c:
b5:87:85:55:74:69:9f:57:71:45:02:9c:f2:ce:cb:
28:f2:39:6b:67:c3:7c:3c:a6:87:89:4c:9c:89:d8:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F5:9A:79:EA:90:FF:C2:F1:AD:79:D4:EE:23:F0:DE:90:E4:E4:DC
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/KvWaeeqQ_8LxrXnU7iPw3pDk5Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.216.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c2:d6:b8:d8:8b:38:df:e8:ed:e3:2d:9f:cd:ab:3a:03:62:
a6:e8:8b:c9:22:97:af:5b:1a:9e:62:ff:1f:6f:c9:b8:29:b5:
97:d3:98:ee:20:a7:f4:32:35:d2:a5:18:39:77:b7:13:11:5b:
34:0e:01:da:75:f8:de:04:b3:89:10:ce:4a:d2:73:73:f4:83:
40:3b:51:6f:c1:6f:89:f2:a8:f5:15:05:33:fe:49:56:c3:f7:
33:07:6a:d4:f8:53:d2:3b:a2:b9:09:0f:79:cb:fb:87:f0:40:
ad:a7:e6:a1:09:76:56:ba:55:b0:cd:bc:52:f3:2f:b2:de:f1:
df:34:b8:41:98:d7:e5:71:f9:cb:b7:48:1a:11:97:f2:0b:80:
85:03:88:eb:9c:1e:2c:eb:4d:96:74:29:7e:9d:d8:3c:c4:f9:
ac:82:c0:99:05:41:2d:8b:d8:12:3e:0f:ea:75:13:71:34:97:
36:c0:17:39:93:fb:7c:51:51:0e:18:bd:75:7b:50:62:52:15:
e6:ad:e3:32:6f:02:9e:36:69:59:03:99:fc:4a:e4:3f:ac:5c:
39:9b:33:78:ea:de:b1:cd:f6:7c:02:e1:49:e0:d6:f0:81:a2:
35:4c:10:a5:b8:39:e4:ea:f9:d6:86:98:1d:d2:a5:96:eb:77:
89:90:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:06 2026 by rpki-client