Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/KFQ8j7TUkafguJj4zRekxSOryf4.roa
File: KFQ8j7TUkafguJj4zRekxSOryf4.roa (raw, json)
Hash identifier: ggBvTDtfRXdcds5VSU0JdMg1c40E6KC/cP8l9ugy4aM=
Subject key identifier: 28:54:3C:8F:B4:D4:91:A7:E0:B8:98:F8:CD:17:A4:C5:23:AB:C9:FE
Certificate issuer: /CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Certificate serial: 01A01A2FFD7529A699169FF6B83C928D132C
Authority key identifier: BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/KFQ8j7TUkafguJj4zRekxSOryf4.roa
Signing time: Wed 19 Aug 2026 13:22:27 +0000
ROA not before: Wed 19 Aug 2026 13:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199552
IP address blocks: 195.95.176.0/24 maxlen: 24
2a0d:c0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:2f:fd:75:29:a6:99:16:9f:f6:b8:3c:92:8d:13:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Validity
Not Before: Aug 19 13:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28543c8fb4d491a7e0b898f8cd17a4c523abc9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:8f:91:a2:d1:9f:39:15:32:6c:bb:a7:9a:
c7:b6:c2:51:44:26:b9:84:1b:ef:71:75:91:b7:99:
74:4d:5d:de:7a:fe:f1:69:5b:3a:43:b5:8f:85:5f:
90:53:ed:6b:17:e5:13:c0:72:ef:56:77:6c:3d:54:
64:e1:2f:a4:e0:c6:d9:5e:92:cf:3a:da:e1:ec:88:
30:5c:52:dc:86:a6:06:6b:43:ae:8d:42:54:d5:9f:
93:61:ce:dc:ed:6c:20:c8:b3:54:e7:06:49:3f:9c:
c6:07:19:44:af:96:62:4e:ab:bd:ad:24:2f:98:42:
4c:47:ca:53:73:d8:a5:48:fe:c8:1c:77:f2:1c:3a:
0d:f8:d2:47:c1:83:b1:ec:4d:42:91:6b:48:e0:82:
1c:b2:55:38:67:b5:48:8a:b7:1f:c4:bd:cd:dd:2e:
bd:df:4f:9d:7a:9b:1e:6d:2b:1d:05:3d:c9:ec:89:
28:7f:eb:96:0d:4f:62:e8:e6:19:34:87:70:9c:4f:
22:8a:4e:b3:42:cc:ea:e4:ef:c8:63:5b:16:d0:fe:
cb:ca:3b:4e:6c:d1:4d:b3:39:01:2c:02:03:17:64:
ff:e0:c4:8a:4c:10:f3:43:26:fa:21:3b:93:9e:4c:
c9:35:a6:8b:5a:9b:60:92:da:3e:03:fd:22:c4:d3:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:54:3C:8F:B4:D4:91:A7:E0:B8:98:F8:CD:17:A4:C5:23:AB:C9:FE
X509v3 Authority Key Identifier:
keyid:BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/KFQ8j7TUkafguJj4zRekxSOryf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.176.0/24
IPv6:
2a0d:c0:10::/48
Signature Algorithm: sha256WithRSAEncryption
5a:50:c6:7a:38:1b:56:5a:37:5a:3b:fd:ee:a1:78:25:6e:78:
d8:80:25:3a:28:2e:ac:4b:99:81:f8:22:9e:9b:6c:7f:36:4f:
e8:e1:07:66:86:47:a8:99:c0:71:48:83:2d:e9:ca:32:b2:7d:
df:db:f6:c4:7f:1f:7c:47:74:b5:21:84:ef:e3:67:08:19:11:
46:1c:21:18:be:0e:c7:4d:9f:79:a5:dd:dc:b6:82:49:1a:61:
65:f2:7d:d2:67:37:4a:90:54:80:74:fc:a8:90:55:f8:59:bc:
b9:d1:b3:13:ed:d7:d8:9f:46:14:d2:10:ac:0e:67:ce:d1:0f:
95:9f:71:a0:d5:93:d3:5e:6e:be:be:9e:62:5d:97:46:2a:14:
dc:5f:69:68:9d:1e:81:6d:dc:8d:dd:db:1d:c9:4d:2f:1b:f6:
69:14:d3:74:b9:af:09:30:03:02:70:01:5a:de:26:7a:40:31:
cf:7b:c6:3e:87:84:be:2a:18:1c:40:e4:32:c7:ee:53:94:c1:
ba:07:e0:cd:f7:ef:c5:5c:e4:7c:58:c6:48:3f:ee:6e:d4:a0:
1a:48:d1:27:99:29:11:03:1e:f0:a7:d0:07:f0:da:7f:7b:5b:
50:3d:d9:d9:e1:ca:8d:2a:c3:0f:13:47:40:9c:64:fe:b3:eb:
05:b9:35:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:05:15 2026 by rpki-client