Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KP1kWxfJDarDygqki9UFMWy7VsA.roa
File: KP1kWxfJDarDygqki9UFMWy7VsA.roa (raw, json)
Hash identifier: OlLHZX2wX5VxS/QGJqC4IBqlVLCyhQ9nTCBUwwySMiw=
Subject key identifier: 28:FD:64:5B:17:C9:0D:AA:C3:CA:0A:A4:8B:D5:05:31:6C:BB:56:C0
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A02345715EC5C430F0D0080884420C6BE7
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KP1kWxfJDarDygqki9UFMWy7VsA.roa
Signing time: Fri 21 Aug 2026 07:42:28 +0000
ROA not before: Fri 21 Aug 2026 07:42:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219233
IP address blocks: 87.76.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:45:71:5e:c5:c4:30:f0:d0:08:08:84:42:0c:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 21 07:42:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28fd645b17c90daac3ca0aa48bd505316cbb56c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:88:e4:fa:8e:e8:e8:47:ee:ea:3b:6e:89:
ea:db:b5:a2:16:6c:8f:8d:c6:34:af:2d:14:99:f2:
59:fa:b0:03:94:2f:b3:94:3d:f6:b3:28:61:5d:04:
9e:26:de:48:9b:b7:3a:50:4b:cb:8b:33:cd:ef:72:
45:04:cd:ca:88:24:87:8b:38:22:c3:68:42:5c:26:
cf:e3:e6:e0:11:ee:51:af:24:34:35:6b:f7:0f:03:
c6:6e:ee:b7:a0:f7:58:58:b6:49:e9:33:00:69:97:
1f:1b:8c:a1:41:d6:30:15:fb:1b:76:eb:a3:e6:d1:
81:58:2d:9f:64:0c:57:d5:b1:ee:1c:99:01:a9:f8:
0d:76:b3:aa:80:95:72:38:ec:11:74:dc:d8:75:a0:
fa:0e:bd:d5:af:d0:e4:2d:7b:3e:2d:c1:32:af:13:
fc:84:fd:ff:4e:69:32:d9:c8:6a:ef:2a:78:9e:ac:
22:d1:e8:2f:b9:1e:e7:ce:c8:6e:75:fc:0d:10:c1:
4f:4d:e2:a4:a7:9b:a8:4f:1c:45:79:a7:ff:b3:d6:
67:58:9e:91:50:a7:3c:b4:fd:d1:63:23:7c:37:99:
d6:9c:78:1b:51:25:8f:c9:83:74:2d:b0:a9:92:e2:
d1:ab:35:58:80:ed:36:15:df:57:b2:ac:07:14:c0:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:64:5B:17:C9:0D:AA:C3:CA:0A:A4:8B:D5:05:31:6C:BB:56:C0
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/KP1kWxfJDarDygqki9UFMWy7VsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.168.0/24
Signature Algorithm: sha256WithRSAEncryption
91:15:8c:63:70:d7:aa:7e:47:6c:5c:1a:5f:b2:a5:a3:f4:8c:
28:68:51:1e:e4:f4:2b:84:17:27:f7:cb:84:1d:81:f9:9a:28:
31:53:34:df:72:2c:84:4a:a2:8c:72:a9:92:15:97:8b:a4:2d:
50:a3:6b:4d:83:79:62:7b:13:03:43:8d:9e:e8:a3:23:78:ae:
8b:06:3a:90:84:f8:20:30:b9:00:22:28:0b:3d:82:da:05:b4:
71:bc:19:5e:70:51:f4:36:68:5c:ff:23:84:bf:2b:a1:9a:d6:
bf:9c:e5:e6:db:c7:d7:4b:bb:d8:b6:b7:a3:bf:d9:2a:8d:9e:
d8:d7:50:a0:8d:06:0a:6f:6a:cc:42:d8:fc:1a:0c:7a:95:9c:
28:8f:ee:57:bb:41:48:36:3f:b8:66:ca:2b:35:6c:46:a1:26:
e1:be:a3:86:57:38:35:fa:f8:7c:6d:c5:a1:6c:91:09:a1:a3:
29:52:92:13:23:b0:18:4a:9a:ce:ce:30:e4:13:6e:2a:b2:16:
39:e1:6c:ae:3f:85:9c:e7:cd:f5:15:01:e6:06:92:96:1a:53:
2c:53:7a:62:dd:8f:ed:23:da:4b:d0:bf:d4:87:86:b6:6c:e4:
37:8f:cd:a0:ea:f9:e2:e8:e3:6e:d5:c5:49:b6:0a:74:4a:a3:
23:af:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:41 2026 by rpki-client