Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa
File: KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa (raw, json)
Hash identifier: AtauxquVGMfNWT+OwoqixJIcGDXl6Ybqcwqx4c3ybJQ=
Subject key identifier: 28:99:99:B8:E1:77:56:FF:63:93:F9:05:54:FE:D8:0C:7E:1C:1E:02
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019E1653E43537C5FAF23F72DF6A50596BEA
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa
Signing time: Mon 11 May 2026 09:17:36 +0000
ROA not before: Mon 11 May 2026 09:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46370
IP address blocks: 185.87.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:53:e4:35:37:c5:fa:f2:3f:72:df:6a:50:59:6b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: May 11 09:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=289999b8e17756ff6393f90554fed80c7e1c1e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:c9:25:41:df:66:48:a9:5d:8a:81:1f:99:
f2:8b:36:1d:31:6c:70:44:27:e7:d7:82:30:0a:45:
0f:7e:c9:48:c1:2d:12:e6:76:39:43:77:ca:23:8f:
4e:91:6d:a4:72:d8:5a:1c:3c:2c:ea:fa:7c:ce:4b:
7c:96:b9:6c:c8:74:e0:80:1c:bc:58:d2:58:e9:ca:
77:3e:25:04:49:c6:b7:a3:95:91:64:1f:f4:0b:2a:
8d:68:c4:93:1a:dd:20:8d:2d:88:95:49:4d:2f:c6:
19:71:02:18:f9:68:bc:54:39:c6:92:15:28:c4:92:
73:fd:42:a8:ee:f3:10:de:0f:34:68:8c:98:a4:14:
c3:79:46:9e:0d:db:f7:9c:97:4c:04:74:7a:8a:06:
b4:9b:a1:c0:a5:a7:1d:ff:83:a2:df:93:3d:ed:79:
4d:3f:8b:5c:8c:ba:6a:b4:1f:83:3e:e2:87:5d:a3:
8c:12:de:3f:1e:e4:6b:98:f7:04:48:06:7a:29:74:
65:d6:65:36:74:a0:ac:52:fe:4d:62:61:79:8b:fc:
e7:3e:63:81:90:0e:93:22:1b:fc:f0:6c:90:f5:d9:
83:0b:44:10:02:58:95:41:94:b8:45:c3:4e:d6:24:
b8:cb:5b:ee:99:fb:8b:02:00:95:99:48:da:df:09:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:99:B8:E1:77:56:FF:63:93:F9:05:54:FE:D8:0C:7E:1C:1E:02
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.59.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:a9:2e:9f:c9:f7:2e:73:bb:42:b0:44:d4:35:90:69:ec:73:
5c:b8:b7:d4:86:f1:42:ca:91:4e:6f:7a:7d:a1:82:1c:5e:c9:
9d:0c:4b:b7:9e:f7:32:4d:04:ec:92:69:57:1b:68:d5:08:29:
ae:55:6b:0f:5d:30:f1:90:18:60:5d:b6:4e:a9:5a:08:e3:68:
25:bf:b0:1a:94:d5:5c:21:cf:ea:24:f8:fd:02:8b:f8:19:48:
77:d9:ef:69:f4:bc:af:82:d7:52:43:37:7c:e2:20:7f:c7:06:
c9:16:f2:fa:44:82:f5:8d:d6:c6:74:a6:70:19:c1:b6:7d:d2:
a6:a8:97:06:db:27:58:23:db:f9:f3:89:0a:29:2a:53:f1:5c:
1d:68:3f:23:4a:52:71:d1:aa:88:17:8a:09:6e:b5:57:0c:33:
dc:87:e9:a1:53:2a:71:c6:17:cc:96:2f:9e:d9:4a:33:c3:8b:
5b:de:9c:ca:42:2e:e8:d5:73:73:f9:3b:a2:1b:a0:a1:73:55:
e6:d2:15:1c:1b:ff:4e:29:6a:29:55:2d:95:d7:25:52:bd:16:
0e:c7:f8:e0:0f:83:96:70:98:fb:bf:59:10:d4:0d:20:de:da:
c7:06:44:54:47:7d:57:e4:3a:b7:93:c4:41:36:99:5c:12:77:
e0:05:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:48 2026 by rpki-client