Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/kyRVCGVmasDx6k38w-izwTFSZVI.roa
File: kyRVCGVmasDx6k38w-izwTFSZVI.roa (raw, json)
Hash identifier: kfM4cnv70+/otrzSrUgrUJZAq/Yw97sDNJ3BUv5w7l4=
Subject key identifier: 93:24:55:08:65:66:6A:C0:F1:EA:4D:FC:C3:E8:B3:C1:31:52:65:52
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 01A033C4C1969DFD054E81490FE5A9917146
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/kyRVCGVmasDx6k38w-izwTFSZVI.roa
Signing time: Mon 24 Aug 2026 12:35:27 +0000
ROA not before: Mon 24 Aug 2026 12:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 85.149.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:c4:c1:96:9d:fd:05:4e:81:49:0f:e5:a9:91:71:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Aug 24 12:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9324550865666ac0f1ea4dfcc3e8b3c131526552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:ea:9e:13:65:72:36:1e:22:91:51:d9:56:
d9:19:f9:ca:3a:81:7d:8c:9e:d5:c0:dc:3e:29:d4:
92:6c:5e:69:bc:f7:cf:28:e0:cb:1d:99:ac:de:d3:
8a:df:b0:ef:67:74:ff:d8:c8:f1:b4:17:e8:e3:a5:
28:b4:60:f4:e0:3e:03:dd:fd:fd:00:5f:cc:d7:19:
35:94:36:38:a0:b1:e7:6d:6c:c9:41:a2:c1:ca:57:
fc:07:3d:16:a2:ed:5a:f8:1a:de:95:bf:32:81:01:
80:4f:b6:d8:4a:09:08:88:4d:0b:dd:a4:dd:69:b3:
06:b9:d9:d1:a3:cc:e4:f1:cf:70:eb:17:bb:b2:88:
44:28:08:12:59:c6:62:d5:39:49:f5:0b:e2:1f:f3:
6c:69:9c:68:b4:bd:a3:8c:25:22:05:ab:75:9b:cd:
d5:60:05:5a:1f:84:32:e7:93:59:2b:9b:70:28:56:
55:8a:2f:a2:5d:aa:66:3f:08:2d:9d:60:84:b8:5f:
32:7c:a6:0e:03:2b:5b:2e:17:2d:b7:36:df:a0:35:
bb:2d:cf:ce:61:c6:53:4c:1c:0b:3a:4e:6c:f4:70:
28:5c:73:6b:e0:26:3c:06:13:8d:66:31:d9:9f:c6:
b8:f4:1a:b5:0f:56:19:2e:4d:4f:de:5e:d1:e8:65:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:24:55:08:65:66:6A:C0:F1:EA:4D:FC:C3:E8:B3:C1:31:52:65:52
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/kyRVCGVmasDx6k38w-izwTFSZVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.149.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:dc:db:22:52:90:a6:da:86:e1:55:41:47:12:7c:13:43:68:
3e:48:dd:86:b4:6e:94:2a:47:eb:82:97:d9:8b:d5:32:75:e3:
be:db:7d:27:6a:8c:55:e2:93:a5:dc:34:c0:40:12:16:2d:57:
34:ae:58:1e:55:77:c9:85:50:c7:27:30:07:44:89:32:53:c1:
d3:6a:13:b6:34:d4:17:7a:32:d7:6a:96:a3:28:ce:51:01:36:
de:80:68:48:cb:33:55:20:8f:82:00:cc:97:8a:61:15:2b:a0:
e2:82:7c:8f:bd:04:a8:dc:9e:f2:eb:f5:be:af:93:a8:9c:78:
db:f9:e2:14:66:4e:93:eb:69:9e:32:46:8f:53:5e:41:fa:02:
b4:bb:65:bd:ed:d0:98:5b:02:e0:54:16:d2:2c:f0:b7:00:e2:
a6:37:ec:a7:72:39:8a:c5:94:75:37:ae:81:05:56:1a:32:4b:
0b:5f:8f:06:54:87:35:42:0f:02:ea:6d:3e:0b:88:b9:f2:8e:
49:4c:be:2d:ae:74:a9:ce:e9:84:80:2c:59:1b:ea:33:db:4d:
58:72:d0:56:2f:04:2f:c6:b6:24:f7:7a:57:8d:3c:aa:98:98:
9e:5e:92:a1:ac:e9:02:88:63:81:d6:07:fb:7d:b6:43:fc:53:
fe:3b:18:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAzxMGWnf0FToFJD+WpkXFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx
Yjc0ZGUwHhcNMjYwODI0MTIzNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzI0NTUwODY1NjY2YWMwZjFlYTRkZmNjM2U4YjNjMTMxNTI2NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsrqnhNlcjYeIpFR2VbZGfnKOoF9
jJ7VwNw+KdSSbF5pvPfPKODLHZms3tOK37DvZ3T/2MjxtBfo46UotGD04D4D3f39
AF/M1xk1lDY4oLHnbWzJQaLBylf8Bz0Wou1a+Brelb8ygQGAT7bYSgkIiE0L3aTd
abMGudnRo8zk8c9w6xe7sohEKAgSWcZi1TlJ9QviH/NsaZxotL2jjCUiBat1m83V
YAVaH4Qy55NZK5twKFZVii+iXapmPwgtnWCEuF8yfKYOAytbLhcttzbfoDW7Lc/O
YcZTTBwLOk5s9HAoXHNr4CY8BhONZjHZn8a49Bq1D1YZLk1P3l7R6GWvhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMkVQhlZmrA8epN/MPos8ExUmVSMB8GA1UdIwQY
MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt
OTkxMjhiZjZhODQxLzEva3lSVkNHVm1hc0R4NmszOHctaXp3VEZTWlZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx
LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVZXAMA0G
CSqGSIb3DQEBCwUAA4IBAQAr3NsiUpCm2obhVUFHEnwTQ2g+SN2GtG6UKkfrgpfZ
i9UydeO+230naoxV4pOl3DTAQBIWLVc0rlgeVXfJhVDHJzAHRIkyU8HTahO2NNQX
ejLXapajKM5RATbegGhIyzNVII+CAMyXimEVK6DignyPvQSo3J7y6/W+r5OonHjb
+eIUZk6T62meMkaPU15B+gK0u2W97dCYWwLgVBbSLPC3AOKmN+yncjmKxZR1N66B
BVYaMksLX48GVIc1Qg8C6m0+C4i58o5JTL4trnSpzumEgCxZG+oz201YctBWLwQv
xrYk93pXjTyqmJieXpKhrOkCiGOB1gf7fbZD/FP+OxhO
-----END CERTIFICATE-----
Generated at Tue Aug 25 07:56:09 2026 by rpki-client