Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ku-PK98Z0HseusRIGad_25xmrPs.roa
File: Ku-PK98Z0HseusRIGad_25xmrPs.roa (raw, json)
Hash identifier: ynqJSN5l9O64g7PXGjgguEkC0zXK7FDwE2qbLgFykpY=
Subject key identifier: 2A:EF:8F:2B:DF:19:D0:7B:1E:BA:C4:48:19:A7:7F:DB:9C:66:AC:FB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019CAC308DB832FD68D3A6A085A367A9AD13
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ku-PK98Z0HseusRIGad_25xmrPs.roa
Signing time: Mon 02 Mar 2026 01:36:28 +0000
ROA not before: Mon 02 Mar 2026 01:36:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 82.151.236.0/22 maxlen: 24
82.151.248.0/22 maxlen: 24
212.135.32.0/20 maxlen: 24
212.135.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 10:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:30:8d:b8:32:fd:68:d3:a6:a0:85:a3:67:a9:ad:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 2 01:36:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aef8f2bdf19d07b1ebac44819a77fdb9c66acfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:79:53:f4:4a:22:3e:01:45:16:c4:af:c5:
a2:8b:25:cd:81:45:21:c1:49:3b:74:03:f4:91:fd:
40:9a:e3:f2:b0:76:f1:1a:4a:3d:d7:a9:90:d5:fa:
9a:e8:e3:48:15:06:30:9d:d8:c3:0b:e6:ee:2b:41:
5a:10:30:10:91:c2:28:fb:e8:85:d9:9f:b7:1d:52:
3c:c3:b9:a4:2f:32:7f:08:b8:5f:f3:67:d7:b8:02:
e1:d4:0f:f4:1d:f2:18:42:48:d8:46:d3:0f:01:c9:
4f:8f:c1:e0:69:49:b8:70:c2:38:f5:85:4f:95:d7:
10:f5:3e:53:ce:70:b4:37:0a:46:dd:7c:3e:32:ab:
16:34:db:3c:87:8c:58:c9:c9:55:37:eb:c8:25:9e:
4d:2b:9d:ce:ca:60:90:54:a7:1b:7b:f1:3a:51:94:
19:52:e8:46:fc:27:63:2b:3a:fd:c2:3c:ac:d3:21:
4b:60:7f:20:b8:54:6a:ea:f6:db:5f:88:a8:ba:b2:
7c:9f:64:27:75:53:3a:50:61:15:93:59:5e:78:44:
fa:f5:86:95:48:ad:1a:11:0c:2f:b3:20:a0:3e:d3:
eb:fd:64:69:fe:7e:f5:aa:66:cb:4b:62:2e:66:ef:
d9:d4:0d:36:80:50:db:94:d7:77:68:6e:59:57:17:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EF:8F:2B:DF:19:D0:7B:1E:BA:C4:48:19:A7:7F:DB:9C:66:AC:FB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ku-PK98Z0HseusRIGad_25xmrPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.151.236.0/22
82.151.248.0/22
212.135.32.0/20
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:3b:5f:aa:bb:0e:51:fd:5e:69:2f:ef:c4:66:e6:ab:7f:93:
c3:25:9e:4c:3d:20:12:55:8c:ba:33:6b:fc:53:c7:01:4c:d4:
a8:46:5f:5b:af:96:ab:7c:14:51:ba:f3:bb:4e:ba:6e:2e:d8:
89:44:75:3f:37:a5:9d:dd:26:c0:a0:c4:c2:5e:f5:bd:dd:e5:
4b:bd:1d:0e:13:15:6d:8f:97:a7:fe:88:bb:73:ab:da:ed:6b:
37:ca:56:f2:00:ea:a0:40:17:29:85:a0:43:2a:2a:18:71:b4:
26:38:df:fd:61:52:67:a7:6c:24:33:8b:71:0d:5e:ba:b7:53:
25:e5:5b:fe:db:7e:6f:69:50:b9:a9:55:c4:f7:55:ee:b6:fa:
c5:25:20:f8:32:97:24:39:b8:5a:6d:89:f3:1c:b2:fc:2b:83:
e1:85:3c:5b:27:b0:3d:ed:fd:6a:13:52:65:df:5a:6e:34:a5:
45:6e:d2:bf:e4:66:30:f2:1b:fa:40:5f:01:c1:bd:63:f3:d7:
5c:e3:c8:6f:0c:1a:1f:dd:63:f9:f9:c4:9b:17:59:73:ae:48:
34:ad:64:8e:79:bf:d0:50:3a:a6:6b:3e:9b:7a:5f:72:b8:a7:
e8:b5:f0:bd:53:49:74:45:5e:93:ae:f1:95:68:60:c2:c5:1d:
9f:f1:d3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:34:48 2026 by rpki-client