Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa
File: KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa (raw, json)
Hash identifier: FunXZj+wtacs6pD/kFNFcLd6gqmej6YgcTSrFfpXd0I=
Subject key identifier: 28:20:68:33:13:40:1A:BD:E8:97:AB:3A:44:CE:A9:25:36:1A:F4:4D
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 019F8A5C06ADA0AEB005B347844AAB191680
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa
Signing time: Wed 22 Jul 2026 15:05:14 +0000
ROA not before: Wed 22 Jul 2026 15:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60199
IP address blocks: 141.101.60.0/22 maxlen: 24
2a00:6900:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:5c:06:ad:a0:ae:b0:05:b3:47:84:4a:ab:19:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jul 22 15:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2820683313401abde897ab3a44cea925361af44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:fb:24:21:35:63:55:ba:ab:c7:cd:e0:49:
47:54:42:a9:0b:41:72:2e:68:68:e4:5c:a5:33:39:
ff:04:14:af:f5:49:c2:73:15:e9:1e:fa:9b:f3:b8:
2b:3b:9c:bb:12:04:d6:f2:ec:4f:1e:53:57:3f:fc:
e1:59:71:ba:9d:88:c1:38:3b:b7:65:95:59:40:4d:
bf:0b:ea:a1:9b:6c:93:c9:9d:5f:22:ab:1b:66:e5:
e9:e1:7e:e3:cc:dc:ca:71:40:8a:8f:9d:ad:d2:a1:
3c:58:44:30:15:97:9f:35:70:79:bc:ec:62:b3:47:
38:8b:be:4c:0b:ea:a8:cd:db:05:5b:73:b4:ad:4f:
2e:c6:41:97:a9:6f:c3:17:c1:5b:b1:b8:1e:a3:e5:
4f:8a:b5:13:66:47:cf:c1:ef:1f:e2:4f:fb:0a:9a:
c8:f7:c9:d3:c5:84:59:31:b2:97:27:52:e6:98:a5:
77:6f:5c:df:3b:91:37:44:96:25:1a:3a:90:83:a8:
24:0d:0e:97:af:a7:48:f7:2a:3b:5c:71:0a:65:97:
55:f1:2b:74:4c:d4:aa:00:c0:da:ed:f8:dc:73:0e:
eb:2e:af:b2:32:e3:5b:43:1a:80:a1:21:0e:a5:9b:
b6:f2:03:b0:a9:f4:8e:ae:93:e4:52:20:ae:1f:4d:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:68:33:13:40:1A:BD:E8:97:AB:3A:44:CE:A9:25:36:1A:F4:4D
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.60.0/22
IPv6:
2a00:6900:10::/48
Signature Algorithm: sha256WithRSAEncryption
96:33:7b:dd:b0:3f:9a:09:b1:3c:3a:63:27:65:27:4b:10:07:
de:6d:62:cf:de:aa:ff:11:98:6d:89:c5:0a:96:5a:75:9a:0e:
53:0b:68:6f:c2:39:ad:0e:18:97:dc:69:d9:b7:24:8e:5b:4a:
b7:0b:79:8d:ac:30:58:5f:eb:f9:bc:7f:58:62:0d:10:1d:be:
8c:85:c0:eb:ac:6a:b2:e3:31:71:b1:a7:80:0d:e4:bc:e6:a0:
82:36:be:a2:7b:7f:c5:c3:a7:95:ac:0c:00:51:bd:62:7f:94:
2f:88:bb:93:02:50:b8:45:5b:8e:1c:d7:e3:e4:62:68:34:13:
82:c5:40:f5:18:3e:ec:82:25:5a:a2:ed:e6:e7:c7:2e:46:8e:
86:63:46:e9:a9:f3:1a:a3:5e:a3:6c:76:dd:7b:9b:ab:4b:b7:
87:a5:84:06:46:65:1a:05:0c:26:23:c7:94:75:e8:b5:54:6e:
df:87:88:75:cf:76:8d:d4:90:f9:55:07:24:a3:39:fc:47:6b:
0f:ad:99:ec:6e:eb:c8:50:91:fb:f7:9d:60:52:ec:57:37:f9:
2d:67:b0:45:59:5a:3f:b0:01:74:42:f4:60:36:52:97:7c:fb:
d5:d3:a1:ef:4c:e2:79:8e:9f:d3:b2:bb:87:95:18:38:3c:5e:
1d:22:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:34 2026 by rpki-client