Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KtoPsg0df-QHvomB9ysl0fys-UY.roa
File: KtoPsg0df-QHvomB9ysl0fys-UY.roa (raw, json)
Hash identifier: xP+TwqdtC7XBqPnQ3y4ox6poDrZdA6owUwXUbbvYaKE=
Subject key identifier: 2A:DA:0F:B2:0D:1D:7F:E4:07:BE:89:81:F7:2B:25:D1:FC:AC:F9:46
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F4DC01D594AA9399FF0296E693541D862
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KtoPsg0df-QHvomB9ysl0fys-UY.roa
Signing time: Fri 10 Jul 2026 20:37:43 +0000
ROA not before: Fri 10 Jul 2026 20:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12083
IP address blocks: 194.41.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:c0:1d:59:4a:a9:39:9f:f0:29:6e:69:35:41:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 10 20:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ada0fb20d1d7fe407be8981f72b25d1fcacf946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:ed:21:c9:2f:7e:cb:f3:2a:17:ab:dc:95:
fa:d3:e1:eb:ab:96:a0:97:9e:5a:d6:7b:dc:b1:b2:
7e:9c:a3:6b:64:57:9b:90:cf:a0:d7:a7:6b:45:cf:
39:d1:18:ab:9f:cf:e0:70:6f:44:cd:09:83:8a:81:
52:1f:d4:e7:e1:f3:f4:20:79:81:ef:08:09:48:83:
49:54:f4:b0:ce:b8:91:d0:31:b6:e6:61:b4:09:92:
42:79:24:6f:63:7c:73:f8:1d:83:7d:1e:47:bb:f9:
fb:b3:15:29:80:58:b8:d4:5e:ca:2f:ba:1e:dc:46:
1c:fd:de:8c:a0:76:c6:1f:0d:f3:d7:c4:f4:14:27:
42:2c:ed:8e:b2:45:c4:6e:82:32:4c:e8:e2:e0:60:
48:7c:e1:3f:bb:b6:af:ff:0e:6e:f7:2c:8c:53:dd:
f2:da:db:4c:d7:7f:c8:83:7f:da:26:7c:d5:14:16:
e1:7e:a4:6a:68:6a:3c:75:be:d1:1c:f2:99:35:7d:
7e:83:51:66:d6:d1:9f:f9:ba:3a:25:2d:4d:2a:26:
41:70:9c:a2:8e:ac:09:a9:18:ec:60:9f:90:63:94:
e4:87:64:38:a9:a7:fa:8c:17:99:17:fa:8e:5a:11:
0a:87:aa:af:fa:45:c5:bb:ac:1a:4a:d3:b5:11:93:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DA:0F:B2:0D:1D:7F:E4:07:BE:89:81:F7:2B:25:D1:FC:AC:F9:46
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KtoPsg0df-QHvomB9ysl0fys-UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:84:67:fa:4c:d1:8f:54:fb:ac:83:32:62:0c:d6:72:5e:fb:
df:84:49:44:c8:84:b9:75:71:d4:b0:5a:49:54:05:63:90:4d:
e3:13:fd:c8:4e:ca:c6:3c:e9:73:8b:aa:6a:8b:64:4b:6b:63:
95:ec:ee:f3:6a:ff:9e:2b:84:91:d1:5d:0a:ed:7f:18:de:cf:
17:f5:31:f2:2d:2c:91:36:ac:be:d5:6e:3d:14:6e:c8:8b:e5:
2e:86:c2:24:74:37:88:cd:aa:5d:fb:c5:d9:6d:5e:95:3b:79:
44:a4:d9:9a:f4:37:90:64:03:5b:5d:b2:6a:b5:9b:da:00:f8:
c2:6d:c0:86:a2:71:cc:2a:b9:f4:88:c2:40:25:c6:49:88:40:
54:16:20:7d:e4:3b:d0:4f:be:7c:a8:1f:eb:9d:7a:2e:f2:e9:
f3:43:15:d2:c8:04:90:41:ff:92:9d:15:b0:04:e2:fc:9b:9f:
34:d3:cc:28:6b:ae:b2:c5:bf:d4:48:a2:72:d6:af:d7:b6:46:
85:34:9b:c2:3c:2e:8d:b8:03:5f:bc:98:06:5b:72:07:fe:3f:
0e:01:6e:c6:98:d2:2d:3a:9f:8c:06:f3:d3:89:e4:eb:96:2c:
55:fd:d6:6d:f8:92:25:40:f8:82:de:0b:09:2c:b9:89:da:5e:
b9:86:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:45 2026 by rpki-client