Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/kpma4xqgzEEytLfdE-9LrfzAf44.roa
File: kpma4xqgzEEytLfdE-9LrfzAf44.roa (raw, json)
Hash identifier: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=
Subject key identifier: 92:99:9A:E3:1A:A0:CC:41:32:B4:B7:DD:13:EF:4B:AD:FC:C0:7F:8E
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A016399631A436C7F10D1DA4EAC8A13EF9
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/kpma4xqgzEEytLfdE-9LrfzAf44.roa
Signing time: Tue 18 Aug 2026 18:54:27 +0000
ROA not before: Tue 18 Aug 2026 18:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214515
IP address blocks: 45.11.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:39:96:31:a4:36:c7:f1:0d:1d:a4:ea:c8:a1:3e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 18 18:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92999ae31aa0cc4132b4b7dd13ef4badfcc07f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:e4:07:02:ad:be:65:92:84:80:4e:3f:5b:
bb:ca:c8:7d:a5:fc:3c:48:59:f4:ad:2f:2d:34:de:
1e:6f:89:eb:05:0b:e1:b4:69:15:9e:28:42:2d:ed:
fd:ab:b9:42:f8:28:60:46:ab:94:d4:b3:6c:0c:13:
68:a8:a8:cc:ea:68:8e:6b:be:d6:d9:29:3c:6e:41:
85:45:0f:d7:a5:9f:5b:d9:e9:1f:ba:b4:12:6a:c3:
7b:18:d4:57:5d:74:f4:9e:ba:37:9d:0a:30:3e:58:
1e:30:d3:1a:15:75:f9:ac:eb:4a:3e:bc:01:b3:0a:
19:9c:e1:87:69:7c:96:e4:8b:a6:2f:3f:15:6b:83:
91:4e:33:c6:39:92:81:af:4e:17:c6:73:a7:f2:56:
16:e5:1f:b3:c9:5f:b7:3d:99:30:63:6c:a8:41:90:
8f:17:bf:83:c6:47:7d:3f:4c:ae:a5:a9:35:bd:34:
97:9a:c7:48:2c:b3:a6:83:5d:87:c0:65:18:13:32:
89:05:f4:90:0c:ab:09:e9:3e:6a:f1:9c:80:44:60:
2f:cc:d0:9f:72:46:35:ec:1c:f5:7d:d1:35:c1:b7:
a1:eb:35:82:ff:04:c3:2c:de:c3:4e:34:47:de:e2:
6c:3a:61:3f:40:4b:06:b6:c6:77:d0:e7:5f:db:13:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:99:9A:E3:1A:A0:CC:41:32:B4:B7:DD:13:EF:4B:AD:FC:C0:7F:8E
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/kpma4xqgzEEytLfdE-9LrfzAf44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b0:9b:10:46:ff:45:cf:fa:d1:27:4d:27:f7:bd:91:1c:f8:
1f:d0:85:ec:4b:26:82:c8:8a:5d:40:db:ed:09:35:83:cd:1f:
4a:49:1e:1e:b3:42:85:ff:a6:7e:2d:4f:6f:53:dd:ba:19:45:
f5:e2:65:90:93:d9:27:df:49:74:cd:65:67:08:26:26:db:8e:
ae:77:60:86:ac:e6:97:fa:6b:7c:f8:57:e0:f0:bd:0a:8d:fc:
f4:cd:c4:96:02:c5:8f:fc:f8:5d:93:9e:23:29:a6:f1:d6:ed:
48:1c:f6:e0:e1:61:6e:71:dd:6a:76:97:19:a3:c4:db:42:ae:
df:9d:9b:c9:f4:bb:da:13:a6:bb:03:24:1f:c4:4d:e9:ec:b2:
15:8a:c1:74:b5:10:43:8d:63:94:ca:19:36:fe:c0:96:92:0e:
98:50:b7:11:d7:8e:e9:f8:fa:e3:cb:fe:d5:e7:df:5d:39:92:
e0:77:58:62:3f:e5:c1:a1:57:0d:55:05:73:b5:bb:dc:a6:b3:
ab:5f:f4:7a:22:e6:74:ab:1b:dc:2a:20:b5:38:44:de:7a:8e:
90:b9:8b:dc:95:71:90:55:94:42:a8:8e:5e:65:b2:8a:b9:eb:
8f:ba:fe:35:6f:5f:7d:93:52:cc:96:d5:3e:b3:a7:0a:22:37:
94:14:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:59:36 2026 by rpki-client