Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KPfbEIEpB8_cz_HaDa8T2xC3oWg.roa
File: KPfbEIEpB8_cz_HaDa8T2xC3oWg.roa (raw, json)
Hash identifier: wWXt1xEXqQrUtviFYo9g2pE7VZLLlbTluMzMKH/UDdE=
Subject key identifier: 28:F7:DB:10:81:29:07:CF:DC:CF:F1:DA:0D:AF:13:DB:10:B7:A1:68
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0CA743387C209811DC2C43EE71DEA591D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KPfbEIEpB8_cz_HaDa8T2xC3oWg.roa
Signing time: Tue 22 Sep 2026 18:50:08 +0000
ROA not before: Tue 22 Sep 2026 18:50:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197666
IP address blocks: 194.58.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:74:33:87:c2:09:81:1d:c2:c4:3e:e7:1d:ea:59:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 22 18:50:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28f7db10812907cfdccff1da0daf13db10b7a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:26:3e:49:fa:dc:6f:b9:00:ba:b7:d7:e3:
95:fc:b2:80:c7:c1:9b:00:58:58:51:5b:1a:55:01:
1d:98:fd:ec:99:56:29:97:64:9f:9c:ce:0c:4b:90:
4e:73:b1:67:f3:12:88:dc:64:29:95:9f:b2:7e:53:
05:b3:78:11:a0:0e:9e:ae:d8:7c:d4:ea:71:c7:97:
b1:22:e4:07:55:e0:1c:5d:eb:8d:59:0f:fd:70:bc:
5d:1a:e1:f4:9f:59:63:78:02:d3:c2:b7:94:2c:19:
87:c4:0c:51:a8:1f:b7:b7:65:67:9e:bd:68:5d:09:
09:79:17:16:1f:a0:ec:ba:94:a6:ac:ee:33:b3:af:
3c:68:b1:cb:09:3a:87:8d:53:ea:07:6b:aa:1b:a8:
a6:c8:5a:6a:6e:92:70:6c:2b:7a:28:df:52:58:91:
da:5c:a7:93:83:d6:f7:27:c0:83:14:38:6a:96:cf:
aa:cc:7f:0a:a6:80:10:5d:d6:95:76:4a:69:1e:3a:
e6:df:8b:81:91:ac:10:44:ba:4a:48:a5:9b:4d:56:
2e:2e:06:d3:9f:65:e8:8e:24:b8:0f:32:f9:84:3e:
d6:02:78:7e:8a:ea:c4:dc:2f:e5:11:07:26:e6:7c:
76:cd:13:dc:22:29:ba:56:0d:17:6d:f8:a1:fb:65:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F7:DB:10:81:29:07:CF:DC:CF:F1:DA:0D:AF:13:DB:10:B7:A1:68
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KPfbEIEpB8_cz_HaDa8T2xC3oWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:35:90:19:4c:32:dc:87:89:35:0d:fe:e4:ac:e5:9b:c5:3c:
25:69:2b:49:9f:df:f7:84:a8:93:09:80:de:76:fe:c8:d4:26:
55:8a:fa:d7:37:89:0d:25:41:ad:6b:03:72:b1:b1:9a:cc:98:
42:e5:75:da:79:35:d6:26:da:94:86:56:51:db:80:39:1c:6d:
0f:ad:5d:81:fa:f3:8f:c3:78:5d:88:4a:15:46:e6:24:06:50:
9f:8f:bc:c0:bc:25:69:12:bb:84:30:95:54:fb:33:38:db:f0:
03:e8:fb:04:1a:91:00:e6:cf:23:35:60:7f:96:b4:35:4e:9e:
37:34:35:23:11:d8:d1:f5:d2:c3:63:57:d6:4d:b5:c4:55:bb:
77:a3:2e:b3:dd:2f:58:9c:b0:82:0f:d0:7b:2b:36:27:d4:1c:
45:ee:a7:73:27:24:11:e8:fa:2b:24:a2:7d:aa:28:a5:cd:e9:
94:35:58:5c:6e:ff:7e:ee:30:ee:cd:af:15:e0:3f:7d:9c:46:
92:64:69:64:6a:15:22:73:a2:ce:7a:28:87:f1:ad:08:c1:88:
41:65:9a:14:ff:fd:55:74:db:ab:65:b6:62:08:9d:f3:04:52:
31:2c:e0:73:32:75:a1:c5:7c:f6:a2:06:e7:fb:0f:c1:28:2b:
e0:f4:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:31:49 2026 by rpki-client