Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/KKqxXv7Ku0_mbtezNh69PRgoot8.roa
File: KKqxXv7Ku0_mbtezNh69PRgoot8.roa (raw, json)
Hash identifier: ZvagCZjEOZBCo6ybDUD6cxL2QjJRxOMTKlNKts/48Ho=
Subject key identifier: 28:AA:B1:5E:FE:CA:BB:4F:E6:6E:D7:B3:36:1E:BD:3D:18:28:A2:DF
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0350F431880D137907F8960F8BECD8F9C
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/KKqxXv7Ku0_mbtezNh69PRgoot8.roa
Signing time: Mon 24 Aug 2026 18:36:27 +0000
ROA not before: Mon 24 Aug 2026 18:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 94.184.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:0f:43:18:80:d1:37:90:7f:89:60:f8:be:cd:8f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Aug 24 18:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28aab15efecabb4fe66ed7b3361ebd3d1828a2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:23:59:1c:ba:96:69:c8:92:0d:41:e2:81:
ca:f8:26:13:ff:6c:d4:63:46:b4:ea:42:01:ed:1e:
62:1c:d9:02:02:da:86:e5:42:45:1a:25:27:79:9d:
5e:a8:d7:64:80:55:63:78:dd:09:b0:8e:ab:fb:1c:
7a:c3:44:46:9a:22:91:d0:56:54:43:02:13:d2:2f:
c9:2b:a2:4e:9e:4f:07:55:ee:54:6b:7f:07:c9:a1:
b6:15:d6:5f:b7:e1:1f:8e:d9:8b:7f:22:0b:d1:a1:
04:52:27:c5:37:35:52:39:fa:ea:d5:15:8a:be:5c:
bc:00:09:3f:42:b8:ce:c2:c9:bc:93:56:e7:1d:4f:
f0:48:7a:2e:83:ec:cf:f6:b7:1f:af:db:29:f0:38:
76:33:58:40:bd:42:d9:bf:8d:dc:29:f8:fb:22:13:
e0:26:06:66:a0:3f:85:2f:c3:a0:0c:43:4f:b3:fb:
89:15:4d:17:20:e2:e8:c0:cc:68:d2:b3:67:5e:20:
56:56:75:c3:5e:34:9e:ef:c3:94:94:2a:dc:cd:dd:
4a:47:9c:ef:dc:07:b6:9c:b3:c5:34:db:a1:93:0c:
2a:a9:ef:2b:30:05:b3:1d:04:81:d7:72:c1:e0:c2:
41:8f:22:b8:77:41:2a:10:ca:3b:07:58:81:f7:19:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AA:B1:5E:FE:CA:BB:4F:E6:6E:D7:B3:36:1E:BD:3D:18:28:A2:DF
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/KKqxXv7Ku0_mbtezNh69PRgoot8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.38.0/24
Signature Algorithm: sha256WithRSAEncryption
47:15:c8:37:cb:ae:5f:59:8c:e1:ad:05:02:69:fe:db:c1:c0:
bc:3e:7d:c6:bc:a7:c6:cc:9e:82:fd:27:a1:57:9b:40:53:91:
09:28:5a:bf:e0:1d:15:cd:4d:7b:f1:4f:d7:66:69:39:46:09:
1a:d4:a9:d1:f5:95:d8:87:9c:10:b5:3b:d5:71:b4:72:88:12:
02:1e:ab:d1:6e:81:a4:ed:96:4e:b7:63:db:85:59:9f:a5:1f:
d3:82:9f:ba:f4:57:7f:1f:bb:e5:cd:d5:42:69:a7:a2:61:ec:
92:47:7a:bd:0e:64:d1:cc:02:73:ce:ba:de:95:07:f6:ae:69:
53:d2:54:9d:02:ba:93:57:f5:a7:b5:00:eb:5d:6e:f3:17:fa:
96:af:2c:02:71:0b:7e:a6:7b:30:19:22:f7:a7:87:52:16:b1:
ae:07:fa:58:ad:af:55:fb:b1:24:26:e9:c8:73:82:3a:6a:84:
81:73:d4:40:08:a1:a8:8b:8d:f6:1f:12:25:e7:15:48:f7:45:
d9:b9:13:b6:4a:84:dc:41:f6:56:97:c3:e1:d6:f5:21:83:c9:
2e:f4:b3:00:48:ae:e3:63:74:71:51:46:7c:ab:51:5e:44:95:
e7:08:2a:59:38:4e:b4:c4:46:21:f4:7e:74:d5:e2:f5:a9:de:
fd:3c:08:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:28 2026 by rpki-client