Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/pkF-ckW95s66N9BJdwEYFmhWIBs.roa
File: pkF-ckW95s66N9BJdwEYFmhWIBs.roa (raw, json)
Hash identifier: fMFLiR9VdVH+fN126X6JNZIenF/ybr2O6INcKxu4jP4=
Subject key identifier: A6:41:7E:72:45:BD:E6:CE:BA:37:D0:49:77:01:18:16:68:56:20:1B
Certificate issuer: /CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Certificate serial: 019F2368A838274CF95567DDBAD327C2908F
Authority key identifier: 87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/pkF-ckW95s66N9BJdwEYFmhWIBs.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8011
IP address blocks: 31.88.0.0/15 maxlen: 24
218.254.0.0/16 maxlen: 24
2a14:f180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:38:27:4c:f9:55:67:dd:ba:d3:27:c2:90:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6417e7245bde6ceba37d049770118166856201b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:c0:cc:b8:93:bf:ba:50:c9:28:58:92:e4:
dd:79:de:f3:e8:32:cb:1d:09:1e:8a:ac:10:5a:f5:
d5:c5:fc:55:98:e2:08:9e:c4:63:99:26:c2:f5:14:
9a:12:f6:b2:14:3b:18:a5:fc:e3:52:ae:12:7f:66:
15:5a:88:f3:5b:74:4e:1d:a6:8a:99:f3:14:b0:cc:
09:4e:7e:3c:b5:e2:38:cb:5a:95:a4:8b:b6:a3:ab:
02:c8:d7:35:48:ce:cb:e8:79:fd:1e:d1:ec:30:c0:
1e:b3:4e:17:6c:64:07:1c:98:77:92:06:fb:b6:9a:
b3:8d:ac:11:cc:7d:65:23:c3:92:af:d3:40:d0:ed:
b9:15:3d:ba:94:42:74:53:4d:16:12:e8:f6:72:31:
ef:ae:3f:60:a6:ee:10:9f:04:fe:b3:52:76:83:ca:
90:79:71:c7:14:73:1e:cc:33:ec:e4:28:29:0b:16:
aa:79:7a:72:47:bf:0d:4f:5e:b8:14:30:fb:76:0b:
3c:be:b9:ab:87:76:4e:20:44:50:c4:6b:39:d3:45:
4b:ea:b4:04:00:81:1a:27:19:c2:8f:41:39:9a:68:
56:8a:82:ce:b4:5c:82:ab:d6:ac:36:3d:01:ee:18:
81:03:ee:03:4c:a5:5c:f4:2d:a5:78:fb:92:e8:d0:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:41:7E:72:45:BD:E6:CE:BA:37:D0:49:77:01:18:16:68:56:20:1B
X509v3 Authority Key Identifier:
keyid:87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/pkF-ckW95s66N9BJdwEYFmhWIBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.88.0.0/15
218.254.0.0/16
IPv6:
2a14:f180::/29
Signature Algorithm: sha256WithRSAEncryption
4c:23:29:26:b9:db:67:1e:67:61:77:86:de:22:a3:cf:10:44:
f2:fe:59:4b:7d:4c:c7:47:77:e6:ec:ad:b6:88:78:d5:82:c0:
30:e1:94:2a:f7:c8:7d:c8:15:db:66:5a:8e:d2:75:81:8e:b9:
2d:6c:ba:bd:c7:22:98:1f:44:ba:14:99:7b:ff:82:1d:c3:65:
43:1b:0d:28:ce:9f:62:71:94:57:e2:98:dc:d7:20:92:e6:36:
4d:7a:ff:4c:b4:de:be:ac:92:46:e5:0c:57:d8:32:ce:12:05:
30:b4:7d:8f:ba:9d:74:62:6d:15:09:93:8d:f8:77:6a:27:3d:
2e:89:79:79:f5:ce:23:66:b1:3e:07:1a:4a:a4:af:f2:1a:b0:
f3:bf:03:94:c9:68:50:11:cd:0e:d7:e8:cf:43:f6:0c:ee:31:
c1:13:c6:19:15:4b:33:06:c5:12:fc:24:79:1d:59:41:9e:44:
b3:18:92:86:f4:47:a4:a4:27:81:e4:07:07:7a:a3:ec:58:8a:
81:97:d3:dc:9d:83:e1:09:8d:4a:db:3b:8d:c4:49:67:d6:6d:
df:d2:1b:74:6f:3f:da:0f:44:94:e9:8b:a3:a7:71:e9:e8:4d:
13:3b:14:05:71:ff:eb:ae:ed:bf:0f:13:b4:93:3e:7e:71:7b:
fc:9c:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:06 2026 by rpki-client