Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/KZi8STSDP6vvx7Kpqw6Ge3WBVoM.roa
File: KZi8STSDP6vvx7Kpqw6Ge3WBVoM.roa (raw, json)
Hash identifier: tQyZ1Rw3/a95g9YOod4kljPDOGij47kLSXlL5CrRy1w=
Subject key identifier: 29:98:BC:49:34:83:3F:AB:EF:C7:B2:A9:AB:0E:86:7B:75:81:56:83
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019F831D295ADA15C647CD2897226983BCD0
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/KZi8STSDP6vvx7Kpqw6Ge3WBVoM.roa
Signing time: Tue 21 Jul 2026 05:19:14 +0000
ROA not before: Tue 21 Jul 2026 05:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.248.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:1d:29:5a:da:15:c6:47:cd:28:97:22:69:83:bc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 21 05:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2998bc4934833fabefc7b2a9ab0e867b75815683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:a9:3d:b8:94:0d:c5:e8:6b:cf:01:e2:f4:
43:a3:91:aa:38:d6:5d:1d:6f:61:52:50:a8:b1:34:
6a:8f:d8:d6:40:5e:4a:6e:5a:2a:fc:75:ef:6c:10:
be:87:83:3b:ea:1a:ef:9e:1e:de:a9:3f:4e:da:34:
70:fe:43:ab:d1:b5:f6:39:fe:cd:ef:25:1b:ce:4c:
9e:b9:1d:bc:5a:13:34:2b:aa:60:d9:e4:c6:99:c3:
8c:21:c6:7d:70:49:b4:67:6d:ad:ec:4e:79:84:01:
e6:54:48:ca:db:ed:96:dc:c7:ed:96:f3:66:0b:6b:
6f:46:dc:81:ab:19:b8:8c:88:60:9f:9c:26:8a:ed:
10:1e:fe:2e:88:0e:1f:ef:4a:53:9e:1e:04:99:e1:
08:a6:9e:45:88:2d:7c:83:8f:4e:de:60:ad:97:26:
3e:1d:24:22:24:77:00:8c:3a:50:14:af:02:d5:e7:
b3:1b:c1:8e:57:37:7a:d1:8e:3a:2b:a1:2b:1c:ce:
0c:a2:cf:72:92:ba:d8:47:ae:df:ec:43:97:d4:14:
09:c9:ae:85:2f:e4:a0:99:3a:97:8e:91:cf:87:97:
62:29:4a:f0:b7:8e:eb:88:fe:ce:c5:9a:19:08:fd:
d8:14:d1:e1:39:01:4d:55:6c:03:82:50:65:01:f9:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:98:BC:49:34:83:3F:AB:EF:C7:B2:A9:AB:0E:86:7B:75:81:56:83
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/KZi8STSDP6vvx7Kpqw6Ge3WBVoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.134.0/24
Signature Algorithm: sha256WithRSAEncryption
06:cd:cc:7f:87:fe:e0:ea:c7:38:11:32:7d:8c:88:d4:ee:b3:
81:f9:a4:9f:77:14:71:fd:09:30:8c:a3:eb:7d:32:af:7a:c8:
c6:bc:4d:c4:f7:f5:f8:5d:33:2f:25:8e:15:8f:31:70:76:6f:
8c:6a:cb:47:2b:3f:72:00:9f:5d:28:4d:8f:eb:27:06:bf:f0:
d8:a7:8e:a1:08:ef:1d:e6:f5:ed:fa:c5:9f:39:ae:23:ea:f4:
ac:ff:f5:83:e5:6f:e1:f3:ee:e1:c1:36:dc:19:d4:13:42:fc:
5c:c4:c2:44:f1:17:7d:3b:96:5e:41:84:db:dc:7d:1b:35:7c:
db:10:af:52:2d:0d:b1:3c:aa:e8:67:03:1a:53:e7:a6:e2:e2:
83:59:4e:80:be:c5:24:b9:e5:a9:44:c2:63:7c:52:8a:9c:91:
53:1b:8a:c2:9e:69:83:37:99:71:2e:ea:87:37:e4:8b:00:9f:
36:e0:49:e9:e7:92:03:ec:2b:c4:d9:cf:64:35:8e:77:81:4e:
3a:39:14:16:7c:2b:63:e2:a0:ee:2c:28:4e:bc:e8:46:c9:6f:
97:97:02:db:34:91:ba:6c:e2:f6:57:e5:06:d7:70:ce:ee:62:
ff:75:93:45:3c:64:f0:57:13:dd:ad:35:c5:74:f6:09:dc:21:
bf:72:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:49 2026 by rpki-client