Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/KEN_6778skmDEY7gNu3YCezz4t4.roa
File: KEN_6778skmDEY7gNu3YCezz4t4.roa (raw, json)
Hash identifier: BiBuCJMi4yMgx4Ww2BvIGPWYoCad7r7CF2uQBSh9UqA=
Subject key identifier: 28:43:7F:EB:BE:FC:B2:49:83:11:8E:E0:36:ED:D8:09:EC:F3:E2:DE
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0386A070AA47373E0C71057A15E01CB4A
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/KEN_6778skmDEY7gNu3YCezz4t4.roa
Signing time: Tue 25 Aug 2026 10:14:27 +0000
ROA not before: Tue 25 Aug 2026 10:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.44.228.0/22 maxlen: 24
37.44.228.0/24 maxlen: 24
165.84.224.0/22 maxlen: 22
165.84.228.0/22 maxlen: 22
194.15.32.0/24 maxlen: 24
194.15.33.0/24 maxlen: 24
194.15.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:6a:07:0a:a4:73:73:e0:c7:10:57:a1:5e:01:cb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Aug 25 10:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28437febbefcb24983118ee036edd809ecf3e2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:67:8a:73:92:ce:84:ef:42:01:3e:07:37:
8a:93:e2:6c:13:c7:47:e7:ab:a4:42:b4:82:9d:24:
17:3b:f6:23:3f:7d:87:ba:c0:40:25:98:04:6a:62:
55:39:b8:b7:7b:f3:d0:7a:a2:16:95:a9:fe:fd:81:
18:d3:37:ac:f3:f6:72:1f:26:f6:62:74:b2:1b:c2:
5d:04:32:7b:f5:cb:38:b0:07:2e:3d:b1:75:f3:97:
21:54:c6:65:c9:b4:78:65:ea:0f:e7:35:2f:f1:40:
b9:5e:b9:74:38:c9:78:3f:2c:b6:61:a7:6a:0c:69:
16:cf:72:1f:33:db:94:96:7a:9f:85:07:d3:aa:ce:
ac:01:46:ef:26:ba:dc:51:af:2e:c3:7e:45:df:40:
b2:df:21:f6:6d:38:ca:4c:bd:d1:2f:ac:dd:be:a1:
02:e5:3e:8b:a3:6b:31:f6:85:34:9f:49:63:29:f3:
a2:0a:1e:23:4e:ab:b4:b9:f5:14:49:87:8b:9e:a0:
56:05:92:77:6c:c4:f2:d4:f6:89:0c:de:31:4e:c9:
9f:cf:60:68:d5:0e:a3:97:6f:b9:53:5d:e4:b8:67:
b9:37:5c:c7:39:78:45:a8:84:6a:b6:91:de:79:f9:
95:62:13:c0:8d:27:4e:88:e1:96:61:03:fc:fc:ea:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:7F:EB:BE:FC:B2:49:83:11:8E:E0:36:ED:D8:09:EC:F3:E2:DE
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/KEN_6778skmDEY7gNu3YCezz4t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
165.84.224.0/21
194.15.32.0/22
Signature Algorithm: sha256WithRSAEncryption
41:dd:c1:a2:80:12:61:97:18:49:1c:81:73:28:62:6a:f9:6b:
aa:37:fc:1c:f5:6d:25:c7:fe:38:de:37:06:6a:ba:62:b7:3c:
8c:f9:0d:b7:1a:49:5a:61:ec:14:27:01:15:cf:84:b7:8c:44:
01:bf:79:c0:b4:44:ee:d2:b7:0e:70:cf:4c:fc:77:08:af:97:
d4:79:84:31:dc:4b:e6:8c:97:15:20:12:ce:c8:ea:6b:f0:2f:
74:f2:dc:d9:d9:29:84:0a:89:b5:3f:28:dd:81:03:61:66:ba:
71:a5:14:57:35:23:71:d1:3d:c5:ac:59:cc:66:75:07:10:a3:
8f:95:d4:14:78:5b:54:06:fa:35:02:7c:55:32:a6:df:aa:ef:
dd:99:18:4a:21:01:a9:38:5b:7d:4c:a0:73:17:0c:de:4a:51:
29:4e:69:06:71:e0:f2:47:66:87:c5:02:56:27:3c:79:36:1a:
32:48:73:0f:65:a0:c0:6c:ae:3f:c7:f6:69:d9:ae:95:6e:3d:
51:02:0f:6f:9f:cd:c6:e6:bf:4a:e8:3e:eb:1b:49:cb:ea:2b:
1e:2f:4c:93:0c:f3:5d:19:05:c0:47:68:7c:18:83:bc:b1:45:
3e:98:ef:d4:55:d2:67:74:de:6a:98:1e:89:87:6f:ae:c8:d5:
1d:fe:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:56:17 2026 by rpki-client