Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/KBGbhFwNO64vnTgp2-lkSmeMc4g.roa
File: KBGbhFwNO64vnTgp2-lkSmeMc4g.roa (raw, json)
Hash identifier: PlnzFb30SW+W4qYSwa9V4CG4SOa/pxWCht+Uh9q1/RA=
Subject key identifier: 28:11:9B:84:5C:0D:3B:AE:2F:9D:38:29:DB:E9:64:4A:67:8C:73:88
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A033DC61B5D859E2582EF4C12318D7AF87
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/KBGbhFwNO64vnTgp2-lkSmeMc4g.roa
Signing time: Mon 24 Aug 2026 13:01:15 +0000
ROA not before: Mon 24 Aug 2026 13:01:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215817
IP address blocks: 89.167.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:dc:61:b5:d8:59:e2:58:2e:f4:c1:23:18:d7:af:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 24 13:01:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28119b845c0d3bae2f9d3829dbe9644a678c7388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:e1:e2:fc:27:16:99:87:0d:61:e2:28:f0:
c2:71:97:3f:59:fb:4b:b8:98:9d:52:2e:1f:f4:1d:
a7:32:89:22:97:3d:f9:d2:02:2f:20:71:57:fe:a1:
bb:c0:af:ef:39:08:a7:00:78:28:d7:28:3e:60:d0:
b8:41:8f:95:b4:fe:a3:9c:ea:ac:ac:59:0d:a5:34:
00:ee:1f:04:94:80:34:de:0f:97:3b:36:84:c3:7b:
14:f6:b1:06:4c:bc:5d:23:91:1c:c5:94:67:37:1b:
67:ff:b5:16:af:60:2b:7c:32:c6:a8:57:a9:ac:d4:
6f:27:db:86:4e:62:27:52:d1:38:f6:a8:71:e1:87:
5d:42:b8:db:76:7e:3e:42:a5:ff:ad:44:ad:b5:fc:
7a:83:1a:12:13:71:ca:60:7e:a9:a8:4c:d5:e5:49:
3c:e1:ee:72:e5:96:81:97:e1:45:b6:e6:00:3a:e9:
ad:0d:cc:d8:b3:d8:c5:c2:99:d6:e3:c2:ef:67:98:
ed:d3:fc:5e:eb:e7:c8:9c:6e:a6:7e:1b:08:fe:dc:
be:78:f0:66:3b:e5:64:14:bc:7c:d8:52:43:d5:40:
ca:cd:d6:8d:c8:a8:0d:d3:8b:1b:91:39:35:a2:20:
1a:60:e1:87:cf:04:a4:04:d3:62:b4:0e:c6:2d:bf:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:9B:84:5C:0D:3B:AE:2F:9D:38:29:DB:E9:64:4A:67:8C:73:88
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/KBGbhFwNO64vnTgp2-lkSmeMc4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.134.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e7:79:ec:8c:61:84:e6:db:87:07:7e:33:75:a3:47:2c:a1:
fa:99:24:be:3a:5a:87:aa:02:71:d5:67:02:40:34:c2:e4:be:
ed:9b:84:a1:05:17:15:98:ae:91:0c:e9:78:75:c4:50:92:a4:
52:f8:d8:e7:24:ec:d4:5b:d3:04:4b:fb:19:0a:1a:74:af:82:
5e:e3:51:c0:32:d5:2f:c3:c0:77:e1:a8:60:59:ba:75:96:e9:
76:ea:b3:dd:d1:be:d5:ce:80:66:a0:99:a6:2f:e4:36:21:bb:
e2:56:0f:a5:d7:2a:6d:d3:86:0d:ac:39:21:39:19:8a:0d:52:
4d:e2:c7:5f:76:55:55:ec:77:97:aa:f8:6d:5c:ec:37:96:d2:
86:3a:37:94:1e:3c:dc:49:d2:c7:51:98:ba:0c:6d:97:0b:5e:
ad:55:7b:4e:db:fc:c3:8b:1b:27:f2:1f:99:c5:9b:1e:44:a6:
cc:d5:48:02:e8:28:e9:f9:2f:5b:61:85:c3:09:86:36:99:ea:
01:21:ca:71:5c:e4:de:4e:7f:ca:08:45:15:79:14:d3:92:71:
e1:a7:2f:b3:32:b3:66:c8:d3:4f:bc:8e:62:6a:f2:21:a6:39:
95:16:6c:45:1f:85:90:d9:58:3a:88:e0:96:12:97:a1:15:da:
92:30:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:40 2026 by rpki-client