Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kkuFTuk_o8-sF-DzaBiQ6RzNCY0.roa
File: kkuFTuk_o8-sF-DzaBiQ6RzNCY0.roa (raw, json)
Hash identifier: JFxBM1MQ5Ac35Ytg5VlpC5IA7OnXjuSv7Wdh04mDFOc=
Subject key identifier: 92:4B:85:4E:E9:3F:A3:CF:AC:17:E0:F3:68:18:90:E9:1C:CD:09:8D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FEDE93735AA603C31056EA30D11D62FD9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kkuFTuk_o8-sF-DzaBiQ6RzNCY0.roa
Signing time: Mon 10 Aug 2026 23:01:51 +0000
ROA not before: Mon 10 Aug 2026 23:01:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219236
IP address blocks: 193.23.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:e9:37:35:aa:60:3c:31:05:6e:a3:0d:11:d6:2f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 10 23:01:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=924b854ee93fa3cfac17e0f3681890e91ccd098d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:69:c3:8e:d5:22:b5:f8:3e:d2:40:69:df:39:
36:76:93:89:c6:b9:0b:89:cd:d7:d5:ba:3d:44:ad:
8b:30:c7:ef:7b:8a:a7:d2:e5:c2:45:82:93:4c:fe:
61:d5:6d:96:c0:0f:3b:83:c1:24:cc:8f:71:f7:96:
27:1f:8d:4d:92:52:7b:fd:59:90:f6:2c:8b:9c:c4:
43:23:fa:c3:7c:d8:4b:51:de:90:3f:5b:71:f2:82:
d4:7f:01:83:71:ef:7d:e3:05:19:96:54:70:5f:3f:
3b:30:9a:8b:77:a6:e9:86:6d:fe:45:bc:7b:88:32:
5a:9d:ca:d6:54:b5:0e:63:db:86:5f:43:dd:0d:99:
40:90:2b:07:32:09:c8:6e:79:e7:42:6e:30:37:2d:
8e:18:fe:fb:da:e9:2e:e4:eb:0f:68:2f:3b:f4:9f:
38:40:2e:e2:2f:3f:4a:2d:88:e5:6d:91:32:ce:3f:
fd:17:46:21:62:75:11:e3:c4:36:81:1f:cc:2e:6f:
3c:14:4f:01:59:15:c7:1f:a7:4e:ba:5f:be:75:1e:
ed:49:ab:09:6d:49:d4:4f:4a:e0:ec:89:ad:fc:c6:
3d:4d:9a:bb:8e:84:07:ca:79:40:34:c5:1d:d2:5e:
c8:bb:00:cf:fa:d8:f1:55:7d:6e:06:33:a9:7f:9b:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4B:85:4E:E9:3F:A3:CF:AC:17:E0:F3:68:18:90:E9:1C:CD:09:8D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kkuFTuk_o8-sF-DzaBiQ6RzNCY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.217.0/24
Signature Algorithm: sha256WithRSAEncryption
48:96:67:bf:7c:1d:af:d7:f6:82:5a:23:0e:21:33:1e:f0:f4:
a4:0a:1f:46:2d:42:78:35:3e:bd:c6:27:56:5c:49:ae:10:80:
bc:ab:3d:dd:14:66:13:06:e0:b8:e2:9a:6b:55:f4:ea:37:bd:
17:7a:bb:a2:0a:5a:61:25:fc:1a:e8:b2:83:0e:59:e4:38:e2:
a4:07:4b:59:03:32:b1:44:bb:7a:09:60:be:77:cb:ed:04:b4:
07:1d:2a:a1:31:d5:82:0d:b1:0c:32:5f:b8:11:c6:1e:bd:e2:
30:74:ed:12:3d:5e:7f:a2:26:af:ca:ef:e7:a0:d1:3a:9b:fd:
26:a7:ec:a0:63:b5:95:46:db:aa:e3:6f:d7:6f:f5:c1:c9:5b:
80:aa:db:6f:3b:10:72:27:23:5d:ec:6f:63:76:13:26:67:07:
1d:d7:ca:37:c0:c3:98:09:26:ac:ca:f0:23:0c:0a:02:09:1c:
a1:68:e8:bb:2b:15:84:a3:c2:3a:fa:46:4f:f7:e0:c9:37:b8:
a7:1c:fb:d6:cc:6b:a3:5c:31:45:7f:1f:04:48:71:40:27:3c:
95:a1:1a:39:bb:17:5f:7e:27:f9:0d:44:20:62:25:13:44:0c:
2b:ed:ea:c2:8d:fa:77:30:6a:2b:5d:98:18:36:d4:05:f7:9e:
0a:47:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:28 2026 by rpki-client