Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/K5ZK_0yHF7TKo5P6sKE9HQsx4as.roa
File: K5ZK_0yHF7TKo5P6sKE9HQsx4as.roa (raw, json)
Hash identifier: NUbkiqk2ewgCgfuJMa/I176Kz4nu4H8nt4fQxUeycrw=
Subject key identifier: 2B:96:4A:FF:4C:87:17:B4:CA:A3:93:FA:B0:A1:3D:1D:0B:31:E1:AB
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019E7007E8CF954B6E4E4F73C39118488A3A
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/K5ZK_0yHF7TKo5P6sKE9HQsx4as.roa
Signing time: Thu 28 May 2026 19:20:26 +0000
ROA not before: Thu 28 May 2026 19:20:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48219
IP address blocks: 189.74.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:07:e8:cf:95:4b:6e:4e:4f:73:c3:91:18:48:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: May 28 19:20:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b964aff4c8717b4caa393fab0a13d1d0b31e1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:4e:50:cf:d9:30:86:33:c3:ba:8e:fd:89:
ed:e8:08:a9:45:4f:68:01:02:2a:39:17:b6:24:7c:
93:bb:bd:6b:3e:0d:5e:33:db:33:9a:36:5e:fe:de:
04:a4:f3:21:6b:95:ea:00:9c:07:35:60:53:6f:b8:
4f:33:f6:7a:8d:85:09:28:9d:db:ad:9b:9c:a9:cd:
58:35:1f:e0:87:f2:a0:16:2d:c9:30:84:b9:79:6f:
bb:88:40:bf:25:7c:33:a8:3c:38:b9:9b:da:77:e0:
61:83:eb:6d:32:c8:bc:fe:f5:77:c0:8d:72:f0:e9:
44:49:45:ef:f2:34:ae:6b:7c:05:34:ab:71:8d:73:
c0:82:28:62:d9:12:0c:3b:03:7e:8d:cc:cc:34:71:
04:5a:cb:b1:9b:a4:55:b4:10:54:19:ff:51:59:fd:
82:aa:d3:43:f6:9c:de:0b:f1:55:25:22:54:37:c2:
7d:90:61:60:60:dd:3c:8a:cc:98:97:43:4f:a5:76:
a5:78:33:b4:93:6d:22:75:14:74:77:33:15:5d:1e:
c3:43:02:1c:0b:b9:d3:c6:14:73:59:26:13:46:1b:
b5:b2:c3:50:25:64:61:33:85:ea:1c:80:d5:0c:24:
b5:df:c1:6b:98:f8:56:34:3a:d2:31:38:ba:a5:55:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:4A:FF:4C:87:17:B4:CA:A3:93:FA:B0:A1:3D:1D:0B:31:E1:AB
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/K5ZK_0yHF7TKo5P6sKE9HQsx4as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.105.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cf:dc:15:ce:0b:73:e7:69:9a:77:cc:ed:ff:20:4a:03:e5:
17:cd:89:88:0d:09:1c:03:6e:4b:07:ca:0d:44:62:45:40:be:
ef:5d:b2:fa:50:e7:4e:0b:dd:4e:d5:ca:3b:36:b2:c2:e1:e0:
02:00:a1:2f:89:ea:62:ff:5e:5d:1f:44:1b:77:95:74:be:1a:
7c:d2:19:01:9e:d4:2c:84:24:76:92:4b:a2:8e:aa:fb:35:c3:
bb:cc:1b:30:d8:89:d2:38:41:af:8d:0f:01:09:81:d5:5e:5b:
ac:11:f8:5f:8b:2c:b6:df:ca:ce:10:56:bd:fd:e8:10:02:6a:
8a:39:ef:a6:63:ea:ee:33:2c:4c:1a:cb:b3:33:c8:c2:25:e5:
c6:2b:f5:cc:0e:33:3f:c4:e8:e9:06:86:af:98:b4:a3:a4:9c:
37:5f:9d:a7:74:74:b7:10:2e:b0:3f:46:33:b1:53:2b:45:0f:
66:8a:24:4c:ad:4d:8f:60:84:a1:f7:8f:2f:ca:e8:13:40:e4:
53:d7:11:c5:cb:9e:67:21:73:f7:ba:d4:c8:e7:fb:f9:ca:86:
d3:c9:81:d1:9f:14:f8:3e:e4:8a:b0:4a:42:88:10:49:78:96:
64:ee:53:92:d6:db:3c:0b:b2:5a:d5:e0:fb:c1:8a:af:cc:cf:
33:d2:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:56:51 2026 by rpki-client