Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/KtSkCkgQPN_jCjx_NpSrj0Cqf2k.roa
File: KtSkCkgQPN_jCjx_NpSrj0Cqf2k.roa (raw, json)
Hash identifier: Z7pmLe6ijXP6+y2mebYVp1P1jXZISWrSpz5NJdmd0Uo=
Subject key identifier: 2A:D4:A4:0A:48:10:3C:DF:E3:0A:3C:7F:36:94:AB:8F:40:AA:7F:69
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 019FC76DA1807BEEB1403845892AD4218AAC
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/KtSkCkgQPN_jCjx_NpSrj0Cqf2k.roa
Signing time: Mon 03 Aug 2026 11:41:18 +0000
ROA not before: Mon 03 Aug 2026 11:41:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13767
IP address blocks: 45.158.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:6d:a1:80:7b:ee:b1:40:38:45:89:2a:d4:21:8a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Aug 3 11:41:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ad4a40a48103cdfe30a3c7f3694ab8f40aa7f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:14:3e:61:e4:f4:c5:93:e7:90:bb:96:dd:
49:3d:ec:86:32:f0:ff:27:9b:21:a3:3e:ca:30:c6:
59:6d:6b:e0:d5:e9:9b:f1:43:8e:53:a2:89:a1:2f:
b2:ce:73:c1:17:14:d1:fd:78:88:eb:e5:c3:7f:3a:
34:0a:b3:07:43:f7:02:07:2c:56:07:20:4c:02:06:
18:eb:f6:0a:b9:72:4a:3c:0b:c0:9b:0c:2b:44:6f:
1c:21:70:dc:b7:65:e3:f4:fd:eb:dc:0e:43:43:50:
8d:77:d5:21:2e:71:76:7d:da:47:b3:2f:32:5c:ab:
b2:af:e6:12:1e:a5:ba:f0:a1:ad:09:48:9d:03:7f:
6c:e1:dd:a0:36:1b:c0:32:91:d9:d9:f5:51:5e:6b:
4a:f2:61:59:61:66:fe:2b:40:19:8b:4c:64:0e:20:
91:84:a2:85:5c:6c:38:5d:78:bf:61:60:43:71:3b:
55:03:3e:c3:37:48:fa:06:32:51:01:8d:99:ba:18:
c3:79:22:73:49:5d:0a:2c:dd:fc:0a:48:34:ee:0d:
fd:b6:a0:56:23:b1:92:d7:f3:fe:d1:d8:55:52:27:
48:3c:03:e6:b4:53:f9:8c:93:93:13:0e:dc:b4:81:
f5:f1:b6:ba:eb:bd:0b:67:36:79:9d:50:25:c1:41:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:A4:0A:48:10:3C:DF:E3:0A:3C:7F:36:94:AB:8F:40:AA:7F:69
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/KtSkCkgQPN_jCjx_NpSrj0Cqf2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.166.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:0f:69:8d:4f:3c:5a:0f:63:d7:7a:67:f3:42:b4:8c:d5:11:
d4:5e:0d:54:13:ff:7e:b2:89:3b:d9:b7:6d:5a:59:36:6d:83:
7a:25:a1:f6:a9:fb:a7:e8:39:af:c1:47:87:be:6c:40:66:91:
5e:20:65:38:16:58:32:64:af:30:5f:83:c5:d1:ff:72:81:c5:
d6:98:86:cb:f6:68:34:f5:94:00:a4:6b:97:51:dc:75:de:7e:
a9:6e:3d:43:dc:47:12:4f:5e:5b:e8:ca:68:50:c3:ad:4f:4e:
9d:78:fb:06:ab:67:40:94:f7:89:7b:2f:18:b3:45:53:09:03:
8e:d1:76:6c:47:4a:22:a0:93:8f:e7:bd:e9:8c:e2:c3:24:0e:
ce:30:de:95:52:7c:f0:8b:55:05:c5:6f:27:1e:a3:6c:76:06:
06:8d:0d:9c:9b:46:e8:3b:1f:a5:14:8b:59:90:69:9d:8a:4a:
7d:ac:55:6f:d8:2a:93:de:13:fb:bf:a9:14:7b:bb:b4:8c:08:
06:65:ec:38:64:97:85:4e:eb:62:28:c9:99:d2:b8:3a:7b:5e:
63:16:d7:82:13:9a:b2:7e:36:28:89:88:ef:cf:07:e1:ed:2e:
e2:98:cc:f3:b4:36:0c:c2:84:ac:81:b0:45:d5:88:7b:d9:5f:
ab:4f:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:48:16 2026 by rpki-client