Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Kf1DO2Kmmx4cDhCmQmpB7gPOfJY.roa
File: Kf1DO2Kmmx4cDhCmQmpB7gPOfJY.roa (raw, json)
Hash identifier: lLhir1n0LdHhztH69uDsWGP3iEkCm8UfMUiNtKhX1J8=
Subject key identifier: 29:FD:43:3B:62:A6:9B:1E:1C:0E:10:A6:42:6A:41:EE:03:CE:7C:96
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019F50B19A16FF7A123BEDB2EAD065AE64FC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Kf1DO2Kmmx4cDhCmQmpB7gPOfJY.roa
Signing time: Sat 11 Jul 2026 10:20:44 +0000
ROA not before: Sat 11 Jul 2026 10:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13347
IP address blocks: 82.197.192.0/24 maxlen: 24
82.197.196.0/24 maxlen: 24
82.197.197.0/24 maxlen: 24
82.197.203.0/24 maxlen: 24
82.197.204.0/24 maxlen: 24
82.197.205.0/24 maxlen: 24
82.197.208.0/20 maxlen: 24
84.245.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:b1:9a:16:ff:7a:12:3b:ed:b2:ea:d0:65:ae:64:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 11 10:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29fd433b62a69b1e1c0e10a6426a41ee03ce7c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:64:e0:96:8a:51:21:e7:71:b6:96:03:10:
2c:f4:9a:95:c4:b4:e5:2f:1e:39:13:59:5d:f3:54:
e6:6a:3c:ac:75:77:c9:c6:c8:c7:84:aa:05:f2:d8:
b8:be:10:c1:7c:33:86:1f:7a:a5:b6:34:28:97:63:
96:1c:0a:91:3f:8f:b9:80:83:40:b7:34:7a:c5:38:
a6:6b:c6:f2:00:b7:fc:db:03:7d:ef:4e:63:31:39:
f5:44:e9:d6:8d:28:1d:11:7a:74:5e:4d:a7:c1:33:
c8:ac:c7:91:2e:83:52:ca:da:e9:38:09:16:14:35:
8a:8b:92:0a:b3:df:ad:47:c6:ce:87:b6:37:d7:0b:
da:7b:4e:0b:aa:5c:93:7a:cd:1f:0e:7a:df:1a:f1:
c8:b1:b9:69:f3:fd:e5:12:57:91:0a:01:1d:c9:b1:
6a:dd:d2:18:ce:79:db:85:04:99:af:bb:b3:c9:be:
86:15:96:ec:4e:66:7b:4d:b7:ec:c5:a9:dc:10:cf:
79:7f:b2:8c:ce:39:05:88:31:c8:b1:2e:2c:b3:bc:
31:1f:9c:8b:05:9b:14:ff:5c:b0:0e:b9:6e:1a:26:
bb:f2:c7:81:24:5d:1f:90:44:85:37:13:df:a8:58:
00:e8:4a:34:a0:56:5e:f2:f3:73:56:38:83:a2:fb:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FD:43:3B:62:A6:9B:1E:1C:0E:10:A6:42:6A:41:EE:03:CE:7C:96
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Kf1DO2Kmmx4cDhCmQmpB7gPOfJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.192.0/24
82.197.196.0/23
82.197.203.0-82.197.205.255
82.197.208.0/20
84.245.32.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:46:32:7a:41:20:cb:ad:a7:d7:9c:9a:6f:6d:17:91:b9:fb:
ed:f8:ed:d5:1a:89:05:55:28:b4:66:10:42:7f:c1:65:42:0d:
91:d1:47:7d:80:9c:5a:92:fd:7d:95:dc:ef:2e:88:21:9a:65:
62:e6:31:e3:29:af:a6:c8:9a:2a:31:fe:6f:5d:e9:8e:e6:90:
ac:46:8b:67:0c:a0:af:12:26:3a:a5:35:8d:d5:fa:00:7d:93:
d9:00:3e:13:f8:dc:61:85:72:7d:d7:a7:24:2a:40:64:86:95:
b1:e7:f2:8c:2a:b7:1b:96:ff:c7:f4:a6:7d:fd:6c:16:16:a9:
fd:8f:0b:5e:21:fb:2a:d9:a5:3a:15:5d:e4:4c:b4:4e:95:2c:
54:b0:81:61:65:40:a9:f4:21:06:45:1e:ec:7d:b1:25:3b:a4:
b4:45:a5:37:3a:08:29:1d:64:ca:78:3d:d4:b2:c4:27:ec:b6:
10:a9:e6:aa:a6:11:39:3f:93:d3:88:6a:4c:fa:19:ff:3f:3b:
85:33:73:c3:14:24:40:c4:51:5d:e8:14:51:4f:ea:55:ae:41:
c8:5c:d3:bf:89:a5:f1:77:47:03:cd:41:c8:ba:1b:84:50:2f:
9f:3a:98:3a:e1:1b:b7:56:9a:f6:e0:b8:c8:3d:66:53:d1:5b:
3f:e0:fc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:46:56 2026 by rpki-client