Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/Kp_7Ss82wN7SHwf_H1AfLXOJ5BQ.roa
File: Kp_7Ss82wN7SHwf_H1AfLXOJ5BQ.roa (raw, json)
Hash identifier: zD+GBHRWoLsSq0/1ni1tpgoZb/jI0/bGpFBuF1k1Rz4=
Subject key identifier: 2A:9F:FB:4A:CF:36:C0:DE:D2:1F:07:FF:1F:50:1F:2D:73:89:E4:14
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 019E384B340CDA1950B80E113B7182F79B59
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/Kp_7Ss82wN7SHwf_H1AfLXOJ5BQ.roa
Signing time: Sun 17 May 2026 23:35:13 +0000
ROA not before: Sun 17 May 2026 23:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207605
IP address blocks: 62.164.170.0/24 maxlen: 24
109.237.76.0/24 maxlen: 24
109.237.77.0/24 maxlen: 24
176.119.205.0/24 maxlen: 24
193.143.68.0/24 maxlen: 24
195.189.140.0/24 maxlen: 24
195.189.141.0/24 maxlen: 24
195.225.46.0/24 maxlen: 24
2a05:4500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:38:4b:34:0c:da:19:50:b8:0e:11:3b:71:82:f7:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: May 17 23:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a9ffb4acf36c0ded21f07ff1f501f2d7389e414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:8a:a2:be:ec:7a:07:57:7a:61:b2:6d:b1:
72:aa:fb:d0:ff:8b:73:b0:d3:85:42:c2:d8:87:fd:
81:c0:67:01:c5:6d:91:ad:29:b2:36:29:da:e6:cf:
7e:ff:6b:3f:28:53:f7:18:b5:e7:ee:32:5b:b6:54:
ee:fd:07:1c:ce:fc:c3:11:44:1d:cd:1d:49:53:73:
91:49:9b:8d:7b:09:3d:6f:74:9c:97:29:ce:f0:a3:
77:6e:58:e0:95:89:e2:2a:20:67:9d:a3:c9:cf:79:
db:cb:5c:37:28:a6:82:44:54:10:b6:8a:16:b1:a7:
79:ad:2b:c6:e5:a1:00:86:15:35:ca:52:dd:f0:57:
51:8a:17:17:ba:97:cc:a8:0e:22:8e:d2:d6:45:16:
6b:4e:5e:c8:58:37:55:73:26:ad:72:82:15:c1:73:
3c:50:b4:e4:a3:13:a3:72:93:c0:72:70:69:69:b8:
10:8f:3b:7d:ad:4e:94:f7:8e:6c:ba:a5:54:f5:6c:
2d:9a:c0:88:33:ac:61:89:a1:c1:10:ea:3a:bd:54:
03:cb:44:95:1b:0e:e8:95:b1:5f:f9:35:1f:62:2d:
ee:58:f8:c5:d9:83:1b:0f:0f:7b:f5:96:58:f7:5b:
57:81:cc:c8:b2:ae:5d:87:1d:e4:1f:38:98:b3:41:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:FB:4A:CF:36:C0:DE:D2:1F:07:FF:1F:50:1F:2D:73:89:E4:14
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/Kp_7Ss82wN7SHwf_H1AfLXOJ5BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.170.0/24
109.237.76.0/23
176.119.205.0/24
193.143.68.0/24
195.189.140.0/23
195.225.46.0/24
IPv6:
2a05:4500::/29
Signature Algorithm: sha256WithRSAEncryption
b6:46:d2:1a:f0:fe:7a:1b:d3:73:c5:e3:dd:ea:23:90:c5:59:
8a:94:a1:de:28:12:21:c9:8a:ca:22:75:c8:fb:d9:eb:5a:1e:
28:f5:5c:99:ab:c7:cf:0e:e0:01:16:f0:9d:d6:1f:c3:b5:b9:
8b:08:b3:7a:ac:58:2e:d3:15:50:c7:a9:f5:28:16:e0:84:7e:
9c:a3:39:da:ee:60:73:a7:b7:4c:e4:ee:54:01:b6:88:e9:f5:
83:f5:94:ba:97:5a:f8:c8:eb:3d:1b:af:b8:da:cb:f9:06:27:
56:d2:d1:4d:86:b8:6e:43:0f:58:8f:00:e1:f7:9f:0f:87:11:
66:61:87:38:59:06:d8:73:4c:bc:65:dc:3f:24:5e:69:1b:a3:
e6:a3:05:f6:2c:72:cc:6d:0d:ae:a7:09:ac:a0:d9:1f:0b:69:
35:7d:9d:aa:c9:a9:d2:71:4e:40:17:6b:08:db:06:68:01:03:
64:36:30:3c:d4:31:ea:d4:9f:4b:37:68:bd:95:f9:15:05:4f:
5f:a1:78:25:4a:ae:d6:92:c9:f5:72:67:3b:b7:5c:ea:a8:a8:
93:7e:13:d8:8d:9f:8f:eb:41:56:17:80:c4:6e:92:21:74:5d:
42:d1:64:16:b2:ce:80:f4:21:62:c0:c8:0b:95:1f:98:3c:3a:
f1:f8:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:27:36 2026 by rpki-client