Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/KvUEBw_c3LAvx8JkTNqlupKNmYM.roa
File: KvUEBw_c3LAvx8JkTNqlupKNmYM.roa (raw, json)
Hash identifier: 69WDGhre8T/PoMvfRVwqXkaaHl64kNVjvBY/md35JrU=
Subject key identifier: 2A:F5:04:07:0F:DC:DC:B0:2F:C7:C2:64:4C:DA:A5:BA:92:8D:99:83
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 01A01DFB34547162EEE926E6B8F7B2E76739
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/KvUEBw_c3LAvx8JkTNqlupKNmYM.roa
Signing time: Thu 20 Aug 2026 07:03:17 +0000
ROA not before: Thu 20 Aug 2026 07:03:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198433
IP address blocks: 193.135.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:fb:34:54:71:62:ee:e9:26:e6:b8:f7:b2:e7:67:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Aug 20 07:03:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2af504070fdcdcb02fc7c2644cdaa5ba928d9983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:8a:2b:59:6f:2c:65:c6:c6:6b:46:0d:91:
41:f2:9a:97:ba:0b:52:66:45:44:24:43:d8:a1:b2:
e1:2d:d7:46:25:ec:69:e4:d1:bf:1e:db:ae:c3:c2:
f4:83:49:fb:e2:f7:e6:66:26:32:88:54:a9:49:07:
dc:0b:30:c5:96:47:f0:a3:bb:be:9f:4e:c3:87:02:
10:b5:48:87:68:86:6a:32:bb:85:90:34:f3:86:3e:
5e:e5:95:22:45:a6:cb:74:ac:2e:1f:29:31:62:8a:
0d:3a:67:0f:af:d5:a3:4c:be:22:be:5d:af:4d:e4:
7e:85:f4:53:47:3a:cc:52:d2:27:ab:16:c2:e2:bb:
58:24:18:32:f5:53:26:f0:5d:dc:1d:e0:40:a6:2b:
a8:5f:cb:29:e2:bb:47:00:fa:ad:bf:99:d9:16:8d:
f8:8b:b5:0e:f6:65:78:08:1a:3a:9d:b9:0a:92:b5:
b1:c3:26:9a:c3:f3:92:49:a6:e8:6a:64:9b:9f:11:
43:c6:c6:65:fd:2a:0b:e4:a4:1a:11:1e:01:d5:b4:
63:42:fd:c9:46:2c:6c:42:c7:f0:11:3e:4f:e2:57:
31:ad:73:63:a8:18:f0:7f:5e:b5:cb:42:dc:9f:8e:
18:ed:bd:a3:b4:d5:5f:24:c1:06:b9:1b:75:f4:58:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F5:04:07:0F:DC:DC:B0:2F:C7:C2:64:4C:DA:A5:BA:92:8D:99:83
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/KvUEBw_c3LAvx8JkTNqlupKNmYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.219.0/24
Signature Algorithm: sha256WithRSAEncryption
85:13:96:8e:0a:e8:e9:68:17:8d:e6:6a:63:82:eb:7b:3d:db:
fc:0a:14:ba:4d:6c:fd:3f:2a:a6:39:3f:73:3a:97:3c:c7:86:
a6:ea:fe:7f:f0:fd:a5:66:c7:bf:85:f7:a1:29:30:cf:eb:fa:
10:96:85:3d:4d:98:52:8b:9e:43:88:df:45:71:c8:90:50:0f:
a2:b4:5d:89:f6:03:85:89:25:81:89:5d:b8:83:16:ed:a7:30:
47:89:c8:a0:23:e1:33:23:43:17:ed:c8:2f:7c:70:93:e5:0f:
2c:a6:52:72:22:ec:f3:e4:c4:47:ea:3e:9f:fd:31:ff:62:4d:
48:f5:a9:db:1e:35:4a:77:c4:47:1a:41:ce:71:dc:10:c9:69:
32:01:bc:67:3f:2d:e4:6a:c6:70:b1:16:e2:2d:b9:63:51:d6:
d5:2b:de:e1:08:53:eb:f7:27:45:2a:06:49:27:03:4b:65:13:
45:88:eb:5f:dd:db:4e:9c:1a:cc:5d:d4:0d:29:03:20:d2:3a:
43:51:d5:64:da:9b:38:a7:1d:ef:5f:8a:e1:b2:ba:0c:f9:30:
4d:5e:7f:fd:24:c1:6c:4c:e8:8c:02:1f:2f:19:8e:cf:a7:d0:
e3:56:ab:ae:73:db:75:81:62:9f:cc:38:ec:99:f6:56:d4:11:
00:14:00:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:39:15 2026 by rpki-client