Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/Krz6KcFKb_S-pinpl1x9zVxsbrg.roa
File: Krz6KcFKb_S-pinpl1x9zVxsbrg.roa (raw, json)
Hash identifier: tP+LpsElZ/mStZjBLNk0qf3JDfSiqb7wOaoXCtJpOOQ=
Subject key identifier: 2A:BC:FA:29:C1:4A:6F:F4:BE:A6:29:E9:97:5C:7D:CD:5C:6C:6E:B8
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01A11A2FDDB2C5CB71EF2154B37CCF36010B
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/Krz6KcFKb_S-pinpl1x9zVxsbrg.roa
Signing time: Thu 08 Oct 2026 06:25:06 +0000
ROA not before: Thu 08 Oct 2026 06:25:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213455
IP address blocks: 185.60.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:2f:dd:b2:c5:cb:71:ef:21:54:b3:7c:cf:36:01:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Oct 8 06:25:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2abcfa29c14a6ff4bea629e9975c7dcd5c6c6eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:63:3e:cd:79:ca:28:55:9a:d6:9f:0b:83:
7f:e6:27:39:66:8f:58:4e:0f:25:db:19:74:0e:be:
ba:14:bc:4e:06:25:e2:b3:be:ff:7f:e0:c3:bf:af:
d9:63:4b:91:c5:35:98:d4:cf:e6:e0:7c:ae:84:ce:
97:b5:cf:a3:f3:97:80:27:8d:10:c1:c4:87:b9:8e:
99:a9:5f:c7:15:59:36:33:b7:4a:c1:a9:3a:f6:a1:
a9:14:c2:be:db:d6:a4:52:65:e2:ee:f5:11:b5:2d:
16:c5:f3:5d:5b:31:c0:cf:81:fa:f3:78:92:91:7b:
1b:14:b3:07:3c:99:57:cb:1f:d9:c1:dd:59:8b:4a:
ae:1f:e7:24:fb:b4:c7:17:ab:bc:7b:25:64:5e:54:
73:38:47:1d:12:ee:5d:0d:cb:7d:37:7c:d3:10:b1:
5c:0d:20:14:94:96:5b:27:84:61:35:41:54:b7:cc:
92:93:4f:a1:45:0a:23:51:50:04:87:09:90:bb:a6:
b3:3f:49:f2:db:92:9a:4f:3a:24:10:98:6b:7a:94:
d8:f7:b0:83:f4:46:1b:a4:7f:a5:e6:d2:1b:8b:31:
78:27:9b:23:f4:d0:8a:de:e9:8a:73:e4:ef:8d:d2:
ef:10:45:e8:d2:02:d5:c0:d7:0b:f1:f4:ac:c3:39:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BC:FA:29:C1:4A:6F:F4:BE:A6:29:E9:97:5C:7D:CD:5C:6C:6E:B8
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/Krz6KcFKb_S-pinpl1x9zVxsbrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.221.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a6:06:33:3f:31:03:91:f8:61:06:09:7c:78:7a:02:c1:1e:
42:49:af:b5:8d:24:2c:f6:f9:2b:1b:9b:59:ae:2c:16:f3:13:
8e:7d:12:4c:96:91:c5:46:3d:6e:86:31:08:b3:03:f9:ac:9b:
70:f5:c3:b5:c2:a5:54:b3:a8:8b:f2:48:7e:41:19:45:6f:be:
18:b4:24:ca:96:27:ee:f1:e2:1c:48:6a:eb:78:e6:c5:12:6d:
7e:68:3b:9c:fd:c5:8c:a4:8b:5e:9f:e3:82:26:6a:a7:8a:5e:
20:ee:0a:40:8b:a8:45:bb:da:44:4d:bf:77:64:0b:e1:5f:9a:
fb:55:5d:d6:65:b3:bf:cd:27:05:8f:a5:2c:d9:50:8e:73:df:
e3:c9:80:78:a8:fa:ad:9a:9f:0e:dd:b4:47:98:89:49:57:04:
7d:14:71:42:40:b7:e8:84:6a:4e:63:bf:20:30:ef:39:5c:64:
b7:79:98:e2:5c:32:15:e1:60:3c:2b:1f:29:38:95:d5:e4:2d:
2f:f7:b3:dd:f9:ae:a5:ab:d6:f7:c5:2b:30:3c:90:5b:a9:34:
92:42:ef:4e:6f:12:bf:79:db:50:e4:00:2d:06:4a:b0:78:5d:
7f:a9:54:de:c2:5f:0f:53:5e:15:21:91:f0:e9:4b:5d:91:2b:
19:32:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:16:19 2026 by rpki-client