Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/KbikO6oO8hb4Gk1MYlyVsqNsnxo.roa
File: KbikO6oO8hb4Gk1MYlyVsqNsnxo.roa (raw, json)
Hash identifier: sXBYM22EzeBBC9W/KtgZQRaartWwzSaiXlspeydyJRI=
Subject key identifier: 29:B8:A4:3B:AA:0E:F2:16:F8:1A:4D:4C:62:5C:95:B2:A3:6C:9F:1A
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 01A135C95B867F9B7C0BF3BD60DB6F41DEB5
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/KbikO6oO8hb4Gk1MYlyVsqNsnxo.roa
Signing time: Tue 13 Oct 2026 15:02:30 +0000
ROA not before: Tue 13 Oct 2026 15:02:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31615
IP address blocks: 84.241.192.0/18 maxlen: 24
89.205.128.0/17 maxlen: 24
91.141.128.0/17 maxlen: 24
95.98.0.0/15 maxlen: 24
178.224.0.0/13 maxlen: 24
188.88.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c9:5b:86:7f:9b:7c:0b:f3:bd:60:db:6f:41:de:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Oct 13 15:02:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29b8a43baa0ef216f81a4d4c625c95b2a36c9f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:80:f9:40:be:d9:ef:4e:5e:48:5c:72:69:
80:af:b4:3a:19:32:51:08:da:89:a1:e0:13:83:6d:
d9:e7:50:00:5e:c0:e2:fa:52:b3:cd:8a:43:7a:f5:
7a:83:c8:35:5f:8a:fd:49:d7:7b:f0:e1:b8:0e:92:
1f:9f:49:80:a2:c7:5c:49:06:1c:74:51:b1:ce:d2:
6b:39:7f:90:21:96:af:ef:3c:7b:39:7d:e6:80:f3:
35:ee:58:79:95:ce:50:a8:18:51:84:b7:e2:1b:07:
be:a6:8a:ae:9b:57:af:8a:bc:b3:17:4c:ff:fb:c1:
9f:45:c1:e7:9e:f8:17:34:cf:0f:1b:12:d3:a5:6a:
02:01:82:5d:db:5b:09:33:ba:85:ef:21:ec:64:bb:
06:20:62:70:ff:45:25:df:66:ea:fc:09:cf:ea:a8:
64:32:9e:d1:ce:88:0c:50:2c:f7:e0:8b:e4:da:58:
bb:44:66:a1:3e:be:8b:e1:d0:db:9c:7d:f8:ec:da:
1d:ad:89:6b:97:9f:29:1e:44:a9:03:05:1f:64:cb:
e9:3e:33:18:98:fc:e2:ad:f7:8c:11:e7:3a:ee:1a:
22:6e:06:ae:95:85:a3:47:44:28:1e:e3:5d:c1:e1:
d2:60:ff:d4:da:52:4b:66:41:54:4a:bf:a3:83:8c:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:A4:3B:AA:0E:F2:16:F8:1A:4D:4C:62:5C:95:B2:A3:6C:9F:1A
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/KbikO6oO8hb4Gk1MYlyVsqNsnxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.241.192.0/18
89.205.128.0/17
91.141.128.0/17
95.98.0.0/15
178.224.0.0/13
188.88.0.0/14
Signature Algorithm: sha256WithRSAEncryption
7c:f2:8e:c2:f1:21:5a:e9:e1:f0:80:fd:a6:07:22:bc:04:1e:
c0:54:de:de:54:08:ee:9b:79:d5:18:b0:a5:88:a4:e1:3a:31:
e0:f7:3a:f7:51:31:eb:a6:e0:2b:93:4e:32:c5:87:8d:13:61:
21:b1:44:2e:65:d0:f3:99:a9:aa:99:e9:b5:62:ff:d1:1e:7e:
77:42:99:54:c9:3b:02:5e:16:6f:b3:68:71:11:ec:68:4f:b6:
2f:b0:e6:98:e0:60:26:9d:62:0d:9a:48:91:2e:b1:56:93:43:
1c:15:0c:00:1d:0d:8d:d3:5f:09:cf:62:76:3e:11:00:66:8e:
96:1c:8c:d1:56:cc:28:9a:e9:30:c8:0c:f5:cf:74:16:b6:bd:
2b:fb:1f:9a:63:45:c9:a8:72:de:3f:66:c2:0b:ac:60:b7:c7:
ee:ca:8d:13:86:92:d9:22:a4:ba:9c:7c:e8:bd:01:7e:0a:47:
e7:51:a2:98:b2:4d:b5:6e:36:38:16:81:61:ab:d8:36:ef:54:
64:84:43:e9:71:37:98:de:cc:30:4c:9f:da:80:31:8b:9c:ab:
09:72:41:4d:2d:7e:00:1e:92:f1:58:d0:1a:87:b6:26:8a:86:
7f:04:27:56:78:90:c6:a8:43:bb:1b:71:83:c6:84:3d:19:bf:
f0:6a:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:55 2026 by rpki-client