Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/kkP4UxY7-AQf7PykTzdqJTbikhs.roa
File: kkP4UxY7-AQf7PykTzdqJTbikhs.roa (raw, json)
Hash identifier: qcexdJKEnVykx6c46YKUUUxq3nV+ajRkvux272aYEsg=
Subject key identifier: 92:43:F8:53:16:3B:F8:04:1F:EC:FC:A4:4F:37:6A:25:36:E2:92:1B
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A042A11B61609EEC098BDDF81468552C4D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/kkP4UxY7-AQf7PykTzdqJTbikhs.roa
Signing time: Thu 27 Aug 2026 09:50:49 +0000
ROA not before: Thu 27 Aug 2026 09:50:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 81.29.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:a1:1b:61:60:9e:ec:09:8b:dd:f8:14:68:55:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 27 09:50:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9243f853163bf8041fecfca44f376a2536e2921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:f4:59:b1:55:e2:b2:b3:f8:dc:ad:28:e3:
20:4e:b5:f3:77:b3:ff:2c:8b:d4:1a:87:5c:7c:0c:
fa:f8:a2:9c:10:b2:21:8a:00:eb:5c:22:96:ec:d4:
8d:42:f1:47:62:b7:73:d1:04:ad:58:0c:16:39:90:
d8:b9:b1:0a:61:4e:d7:18:25:a0:8d:2b:3f:73:66:
7d:46:be:3a:0a:7b:0a:3b:ab:5e:b1:64:b1:71:d9:
ef:98:df:6f:67:b4:68:84:da:ab:f8:0d:97:11:16:
94:fb:03:a1:ae:f4:7b:c6:1d:b8:76:8e:51:fd:b2:
54:42:68:b1:4c:a6:2a:34:30:18:a7:27:17:21:66:
f9:06:54:18:b5:d9:9e:74:87:36:f3:80:af:86:5d:
c4:b6:ae:9d:b3:44:58:24:2b:65:d8:10:8f:54:8a:
07:30:d8:d3:3c:0a:d3:0d:f0:8b:ed:36:d3:4f:b3:
52:ce:a6:c2:93:4f:aa:ac:30:c5:5f:24:18:1b:ea:
25:78:33:7a:f1:96:b8:0a:14:1b:44:f4:c6:c0:51:
11:8d:12:57:19:fa:5f:4d:51:26:6f:00:54:3e:c7:
ca:86:46:87:8d:60:d2:0b:4d:7f:7d:06:cf:dd:ee:
c4:da:28:20:f5:78:2a:3f:84:93:d3:c9:ed:12:f8:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:F8:53:16:3B:F8:04:1F:EC:FC:A4:4F:37:6A:25:36:E2:92:1B
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/kkP4UxY7-AQf7PykTzdqJTbikhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:1d:b5:a9:92:85:0e:97:30:6e:82:67:dd:26:d7:d1:5c:ff:
76:55:55:96:95:bb:02:e5:58:b1:f7:d8:17:6b:96:8a:eb:b4:
b0:f2:ae:db:38:a6:fb:f3:39:cd:16:41:34:ea:aa:67:de:7e:
26:32:07:c8:1c:a1:f0:de:12:2e:5a:9b:d1:32:1e:79:6f:c5:
aa:47:dd:cc:04:55:dd:ef:08:a7:bf:55:b3:88:c6:58:cd:13:
75:39:95:0e:2f:b1:0a:80:5c:51:0d:9d:9a:46:3a:bb:61:6a:
42:73:80:49:b1:22:a0:52:82:41:10:0d:96:5e:4d:a5:30:84:
1a:39:0a:cb:6a:a7:c2:e3:e1:a9:5b:2e:94:ac:7e:f4:56:66:
ef:42:e8:a0:2b:20:3e:a5:d0:d2:12:fa:2b:17:fc:52:58:aa:
49:ab:d5:83:2c:76:37:3a:69:b6:d7:c9:ca:07:71:87:e0:8a:
0f:ac:77:f5:86:ff:cc:99:8d:81:1c:3b:00:6c:d9:4d:50:ab:
6c:1b:a4:d1:29:ba:71:21:43:05:6b:82:bc:3a:cf:19:fd:82:
a2:1c:b9:68:a5:48:ba:5f:e3:be:3b:0f:d4:a8:d9:bf:a1:5f:
eb:1b:26:ea:63:9b:3e:a0:a2:45:b1:8b:56:0d:07:8e:2a:0e:
d4:3b:6c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:25:30 2026 by rpki-client