Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KAYEsUv7CooMDciUPsudIRgNVeY.roa
File: KAYEsUv7CooMDciUPsudIRgNVeY.roa (raw, json)
Hash identifier: ZNdQZdjA+L5K/HtxlzIUFiJmcl98rZOL6gS07yQUzb0=
Subject key identifier: 28:06:04:B1:4B:FB:0A:8A:0C:0D:C8:94:3E:CB:9D:21:18:0D:55:E6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019C658E0A08301EDC07D84A423D5297639A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KAYEsUv7CooMDciUPsudIRgNVeY.roa
Signing time: Mon 16 Feb 2026 08:25:33 +0000
ROA not before: Mon 16 Feb 2026 08:25:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 81.168.16.0/24 maxlen: 24
81.168.85.0/24 maxlen: 24
82.153.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:8e:0a:08:30:1e:dc:07:d8:4a:42:3d:52:97:63:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 16 08:25:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=280604b14bfb0a8a0c0dc8943ecb9d21180d55e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:c7:fa:b3:30:8b:b8:9f:5c:25:ae:d6:2c:
dc:c4:cd:24:64:e3:4a:30:20:d4:e9:94:e4:fa:87:
c4:3a:21:bc:01:82:d8:df:8a:59:b7:50:11:aa:7a:
70:b0:e5:a9:20:c0:34:02:f6:0a:7a:61:61:5c:4c:
89:ab:3e:90:29:ac:60:29:9b:d1:b2:34:ee:6e:0c:
51:58:b5:43:f8:d1:05:77:db:5b:86:99:9c:10:5d:
25:36:98:8f:6e:c1:18:8b:ee:fa:79:58:0d:22:ed:
e8:b9:5b:fe:f9:39:69:21:3b:51:45:62:d2:67:4a:
b6:78:38:5c:3d:88:ff:1e:90:40:85:08:72:c0:ef:
42:00:eb:0b:6c:24:35:1a:8b:f7:8c:fe:3b:d0:23:
4d:e0:94:1b:a1:7f:27:aa:ca:ce:d0:29:82:95:b9:
4d:04:4a:30:89:1e:39:ee:82:ba:67:ec:e9:d7:d4:
64:5d:71:53:84:f6:bf:0d:6b:c6:01:13:3c:d3:a7:
59:8a:63:ab:7f:6e:56:f6:7d:a9:65:02:ec:f9:db:
84:d0:1d:bc:9b:7b:e6:06:d0:a6:37:81:3d:3f:1c:
7f:01:e7:2e:fb:a9:6e:dd:7b:01:6c:b0:6d:58:5a:
4a:a7:92:3d:58:b0:dd:bd:88:77:fe:ea:6a:3c:25:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:06:04:B1:4B:FB:0A:8A:0C:0D:C8:94:3E:CB:9D:21:18:0D:55:E6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KAYEsUv7CooMDciUPsudIRgNVeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.16.0/24
81.168.85.0/24
82.153.236.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b4:84:a4:25:8e:5e:77:63:67:cf:d7:41:32:8a:0c:fe:f4:
cd:78:3e:46:98:56:eb:7a:b4:53:a0:dd:a6:18:33:09:89:9f:
6c:34:13:0b:bf:e9:eb:23:77:47:d8:7d:6e:2e:c0:e8:96:b5:
d5:dd:b2:4a:d6:2b:a5:e9:4e:21:d0:e4:c7:b1:2a:f0:b6:b4:
a0:21:7b:d2:30:d2:dc:21:e3:2d:8e:df:91:dd:61:22:ef:5b:
d4:24:c2:dc:c8:18:52:54:94:87:d3:91:a2:cc:e9:43:ba:42:
bf:2f:0b:44:76:fa:c4:45:56:89:37:47:92:7c:01:e4:e3:67:
8a:8d:9d:99:6a:51:df:7a:c4:d8:13:64:de:36:25:54:d6:c9:
5c:03:8b:a8:d5:c3:ae:c6:f4:6a:81:36:20:6f:6c:23:c2:92:
93:c9:1c:f3:15:4e:61:bd:f0:d6:b1:93:cf:51:dc:76:f2:af:
e8:b1:95:bd:dc:88:c7:f9:e6:68:5e:4d:72:7e:bf:9d:97:98:
0f:ee:df:7d:7a:fb:ae:fc:68:fc:82:49:a1:5f:43:f1:5a:a8:
cb:bd:cd:28:cb:fd:c3:04:24:5a:7e:0a:db:ad:04:61:ec:51:
a4:f8:9e:19:a4:be:37:de:7f:1d:07:1b:7e:43:5b:1b:ac:5f:
67:1b:17:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:05:56 2026 by rpki-client