Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KzKNu7C5IzHiv7vY5U3ftdCnpKU.roa
File: KzKNu7C5IzHiv7vY5U3ftdCnpKU.roa (raw, json)
Hash identifier: YoTo4/PIns26q2rV0by7RkSQqU9zVDEWsCmthyFjOmM=
Subject key identifier: 2B:32:8D:BB:B0:B9:23:31:E2:BF:BB:D8:E5:4D:DF:B5:D0:A7:A4:A5
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FF1823CAA209D4A5ED1D5A895DDF0FB66
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KzKNu7C5IzHiv7vY5U3ftdCnpKU.roa
Signing time: Tue 11 Aug 2026 15:47:51 +0000
ROA not before: Tue 11 Aug 2026 15:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204876
IP address blocks: 82.108.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:82:3c:aa:20:9d:4a:5e:d1:d5:a8:95:dd:f0:fb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 11 15:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b328dbbb0b92331e2bfbbd8e54ddfb5d0a7a4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:67:94:75:68:57:98:20:a7:83:97:26:12:
9f:fc:48:80:28:43:db:f2:02:2c:91:e6:4e:c0:ba:
c4:64:fb:35:0d:b6:8e:aa:63:ba:0c:a5:64:bb:c5:
fb:22:cf:d0:aa:2a:b8:d8:f4:00:6a:71:0c:44:45:
aa:9e:64:97:23:27:6f:54:a9:db:b3:36:f7:40:a2:
4b:b9:a1:42:0c:81:1f:4c:2d:31:a1:78:1f:93:6c:
e1:f8:e0:4e:6a:3b:4a:ee:5b:cb:5c:8e:4c:74:2c:
30:73:10:64:9e:6f:dc:8b:ab:6e:a5:6c:bf:e5:f7:
8c:5d:53:90:04:9d:1b:b3:81:8c:d5:d2:d2:d5:7d:
c1:d9:57:a4:d2:8f:0b:34:62:cc:a9:f6:65:fd:28:
26:17:c8:c5:d3:c3:8d:bf:ce:12:14:3b:94:cb:30:
35:e4:3e:5b:9d:f8:6f:bd:35:93:be:4f:b4:4e:95:
ab:81:74:a2:f2:ae:2c:eb:72:3d:99:e8:d9:bf:07:
b0:1e:bc:cd:e7:a4:b0:e7:cf:67:90:98:be:6d:a4:
e2:bc:81:a7:9d:21:c6:53:6f:44:9e:0d:5a:82:0e:
7f:83:82:f1:3c:07:16:bd:67:49:76:df:ed:cb:b0:
78:b1:af:25:86:e8:82:ba:3d:d3:e4:39:dd:af:dd:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:32:8D:BB:B0:B9:23:31:E2:BF:BB:D8:E5:4D:DF:B5:D0:A7:A4:A5
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KzKNu7C5IzHiv7vY5U3ftdCnpKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ee:57:0a:1f:73:79:22:1c:a6:e6:b4:a4:74:4c:b5:35:1f:
a6:f3:de:4f:16:22:3a:4b:f9:a2:78:a2:91:72:91:4e:9c:da:
3f:e1:5e:fc:54:e5:4a:2f:c8:7c:e0:a9:92:a1:69:be:2d:0d:
58:82:b9:3e:49:a2:3e:11:5e:56:f6:31:c5:1e:ce:cd:69:e0:
c3:1e:0e:3a:bf:c0:0c:38:2a:12:cb:f0:83:6f:f1:21:2e:16:
b7:a6:87:81:45:71:2b:f9:9c:99:04:f5:25:12:85:c5:00:60:
3f:1d:3f:ee:96:c3:be:cf:69:9d:55:c4:45:43:c8:b1:ac:5c:
93:7f:60:1c:e2:9d:62:cf:49:c2:f6:6a:74:e1:ed:64:bd:5c:
20:5c:12:b1:cd:03:d3:a3:b0:79:14:91:c8:f1:08:a5:ab:0c:
0a:21:24:9c:bb:d7:ab:86:86:80:5f:ca:13:45:a9:08:43:c1:
21:54:40:7f:a2:ab:ad:80:db:89:17:03:8e:81:1c:81:5e:ca:
67:9a:fe:6c:bd:1f:0b:4a:5e:e9:3e:9f:78:ba:b2:62:8d:64:
37:2d:f0:ce:8c:98:9f:d7:d5:15:29:6f:1f:3d:be:0c:0d:8c:
f3:3c:b7:15:fa:5a:8b:07:0c:34:e3:1c:b6:f1:71:16:85:9c:
cb:1e:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:55:50 2026 by rpki-client