Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kkIcrD04clKqJoltK-b1sVC6rdc.roa
File: kkIcrD04clKqJoltK-b1sVC6rdc.roa (raw, json)
Hash identifier: M+9V9uYHWBkWSEqTgdjXZeHBbfLf71dj5fTYxlr6PCQ=
Subject key identifier: 92:42:1C:AC:3D:38:72:52:AA:26:89:6D:2B:E6:F5:B1:50:BA:AD:D7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FCF12B2324EEF77624B890E24D368C107
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kkIcrD04clKqJoltK-b1sVC6rdc.roa
Signing time: Tue 04 Aug 2026 23:18:56 +0000
ROA not before: Tue 04 Aug 2026 23:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201048
IP address blocks: 77.239.112.0/23 maxlen: 24
77.239.114.0/23 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:12:b2:32:4e:ef:77:62:4b:89:0e:24:d3:68:c1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 4 23:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92421cac3d387252aa26896d2be6f5b150baadd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:9b:71:35:3c:c1:f3:c9:28:e6:32:74:13:
e4:25:a5:c3:31:ce:51:66:39:44:c5:8e:a6:6c:05:
d7:af:da:ca:eb:b2:a1:bc:a9:bb:4d:f2:41:74:8f:
aa:64:20:5e:ff:1a:82:82:84:26:7a:76:1b:ea:fa:
9a:ab:0c:2e:4f:ce:f9:5e:bc:2f:dc:21:f8:93:c6:
a7:87:f7:d1:bf:70:00:39:23:5d:1c:2e:25:0d:da:
a8:6e:0f:96:17:f0:be:f3:1d:eb:1a:41:4b:ba:0f:
93:1e:e6:dc:73:34:0d:76:99:08:aa:af:81:a7:4e:
61:4d:44:5c:77:22:1a:d5:ad:52:15:b0:db:6b:c9:
fc:4f:52:5b:1f:c2:7d:58:b4:c0:e7:eb:b2:a3:de:
22:c6:53:7a:31:e8:b7:ec:c0:cb:0e:27:6e:0d:d3:
6e:9a:d2:4b:0b:94:3a:02:a4:a5:0c:00:ae:8d:53:
39:a2:34:7b:d5:25:b4:30:84:39:6f:18:3f:25:92:
af:c1:6d:48:79:d1:40:52:ab:73:49:16:c8:0b:e4:
00:77:a3:eb:f8:76:fb:b0:8f:e1:7b:58:b0:6f:4a:
e4:8e:9c:1b:8d:58:65:62:6e:a6:c4:ac:dc:2d:0e:
e5:ed:9e:d6:e0:f8:34:a5:c0:65:5e:71:ba:8a:bf:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:1C:AC:3D:38:72:52:AA:26:89:6D:2B:E6:F5:B1:50:BA:AD:D7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kkIcrD04clKqJoltK-b1sVC6rdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.112.0/22
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
72:00:4c:38:a1:96:bc:38:49:6b:9a:ee:71:46:9c:08:b0:0d:
ce:17:69:00:59:9e:a3:33:06:52:eb:59:e0:30:55:84:5a:ad:
36:af:9c:ab:2b:53:22:66:4c:a7:37:42:73:16:22:42:6a:69:
16:8a:70:f9:6b:6d:94:10:33:27:24:78:fb:32:81:0b:f8:75:
7e:9d:fb:5e:db:18:ed:63:d9:f4:5e:14:45:0c:1a:2a:89:b0:
0a:ee:99:4d:44:e1:e6:12:f3:d7:58:78:bb:88:a9:52:ed:7d:
93:84:af:45:5e:17:dd:48:b3:f5:a9:18:ac:62:14:70:95:45:
ed:df:28:5c:d7:a0:53:36:eb:56:37:c5:d0:0c:8f:06:a2:1b:
16:d6:46:01:f7:72:3c:2b:23:01:d6:9f:15:b4:1e:83:ba:fb:
21:2c:99:09:ea:68:89:14:22:33:3b:d3:5a:ef:75:7a:78:a6:
d3:86:8c:a1:dc:85:69:0e:9c:03:92:d0:65:bc:85:99:54:c4:
9f:25:eb:2b:e7:98:89:e8:e6:c5:82:14:85:8c:b6:1a:aa:7c:
1a:52:38:dc:3f:06:3d:02:76:5b:d4:7d:6f:36:05:88:c6:f4:
ae:6f:78:69:92:28:fc:fe:d0:6b:7d:16:2a:c1:e1:73:d7:55:
23:9d:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:25:43 2026 by rpki-client