Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kgGNgmBkZZOBp-ibnU3BL8xiiuM.roa
File: kgGNgmBkZZOBp-ibnU3BL8xiiuM.roa (raw, json)
Hash identifier: MNGsjvEtAoWqnXR/pHqFywSlcJ+gvie4rjygrDhGm+w=
Subject key identifier: 92:01:8D:82:60:64:65:93:81:A7:E8:9B:9D:4D:C1:2F:CC:62:8A:E3
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368DFCAC9FC883A50CA6EB18A0B3BF5
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kgGNgmBkZZOBp-ibnU3BL8xiiuM.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199614
IP address blocks: 109.176.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:df:ca:c9:fc:88:3a:50:ca:6e:b1:8a:0b:3b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92018d826064659381a7e89b9d4dc12fcc628ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f8:91:4c:57:40:7d:a5:63:1a:75:ed:9d:55:
be:47:05:49:b4:98:63:25:5e:54:a8:2d:56:e0:40:
60:33:54:5e:06:04:c3:8f:f7:f4:5e:d2:a9:b2:fd:
a9:2a:fe:d4:ad:0e:bb:c3:be:dd:da:75:41:e7:52:
55:63:16:b8:ed:20:45:25:14:68:66:c7:24:28:1a:
32:e9:ec:18:04:5d:04:a8:6e:1b:ee:c2:85:9c:90:
dd:a1:f7:9a:e9:89:c0:db:d9:1d:3f:3f:c9:d4:d9:
bb:9f:e0:6c:b3:0b:c7:8e:99:91:70:a1:3f:84:96:
67:d4:fd:3f:7b:85:15:ae:05:1d:13:eb:52:5d:ca:
95:3e:f9:a2:ad:19:2b:cc:09:3b:bf:a2:3b:5b:f9:
ca:75:e2:e5:a2:e9:bf:46:20:0b:fe:14:c9:19:f5:
8f:a6:5d:f9:0e:3a:bc:6a:4a:ca:1c:9f:c1:88:77:
27:5c:a7:bc:00:93:1d:d7:25:d0:4c:b8:c8:0a:88:
38:3c:f7:d6:70:92:99:90:60:ab:38:c3:ab:0d:e2:
55:83:63:a7:37:9f:9d:4c:51:64:94:f3:88:38:3b:
93:ab:9b:94:c2:f7:62:60:ad:0e:9a:ef:fd:52:35:
42:9e:b5:7d:c8:be:4e:35:c8:56:05:be:2d:a0:7f:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:8D:82:60:64:65:93:81:A7:E8:9B:9D:4D:C1:2F:CC:62:8A:E3
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kgGNgmBkZZOBp-ibnU3BL8xiiuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.28.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bc:f9:5c:a5:25:be:6c:a8:a9:f6:cc:be:f6:e3:c8:d9:0a:
bb:01:63:4d:85:25:82:48:4b:62:b2:70:94:0c:f7:22:05:cc:
d6:d3:4d:81:06:e9:c6:d6:5e:50:bd:e6:3e:ec:93:69:0d:1e:
fb:22:a0:17:11:da:35:f2:1e:a4:53:e4:e7:2e:45:77:ae:d2:
85:49:23:b3:df:af:7c:ac:e5:03:03:0f:4e:76:0b:ee:34:de:
ca:ce:33:52:69:e0:f1:bd:0f:43:f7:68:cd:11:9e:a9:cf:bb:
8e:0f:f6:1b:a2:09:76:3f:91:a2:a6:6c:78:90:a4:b6:12:be:
14:7d:b4:f8:32:c6:06:b5:fb:54:a5:43:3d:41:c6:7c:1b:da:
3e:1a:02:f0:3c:a7:24:ca:05:20:66:97:94:03:bc:f4:b4:12:
59:b5:16:de:7a:a3:b1:02:15:d8:99:40:30:9a:8a:60:c9:65:
64:5f:9b:22:22:e6:fe:47:fb:b4:20:57:48:7d:aa:2e:58:ce:
9b:91:c7:72:e0:c6:58:1a:25:b0:b4:54:f6:c9:3c:6a:65:5f:
10:16:b1:72:47:e8:d7:84:a8:5f:b3:0f:97:5a:74:72:28:e9:
5a:b3:c7:79:9e:e5:60:0f:5f:3a:93:32:e2:1c:13:26:75:71:
1f:c5:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:22:22 2026 by rpki-client