Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/kbQFQOWzDlX0E1V08cvnijkeOTY.roa
File: kbQFQOWzDlX0E1V08cvnijkeOTY.roa (raw, json)
Hash identifier: ZvoM8j+qNFn5EDYwxPR3kym37UjIAoq+nL3E4fERgJ8=
Subject key identifier: 91:B4:05:40:E5:B3:0E:55:F4:13:55:74:F1:CB:E7:8A:39:1E:39:36
Certificate issuer: /CN=278100bfdc37bc799241f83760c9ad115344d8b0
Certificate serial: 019F23688C20E0222644978EA14A43B96E42
Authority key identifier: 27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/kbQFQOWzDlX0E1V08cvnijkeOTY.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61025
IP address blocks: 185.17.236.0/23 maxlen: 24
2a03:dd40::/32 maxlen: 32
2a03:dd42::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8c:20:e0:22:26:44:97:8e:a1:4a:43:b9:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278100bfdc37bc799241f83760c9ad115344d8b0
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91b40540e5b30e55f4135574f1cbe78a391e3936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:c9:d5:ed:89:0d:90:aa:82:e5:fe:be:3b:
dd:d3:0e:49:13:0b:10:8d:63:17:72:22:db:09:10:
bf:68:38:f7:4f:23:31:b8:44:f8:e7:f5:77:b8:c0:
65:c4:34:10:24:78:8a:00:c8:be:c5:30:33:12:ae:
11:cf:49:a5:6b:49:57:31:48:51:e9:c3:b1:87:e1:
3d:5b:1a:0d:5b:1c:d2:f0:68:d1:f5:70:73:ae:7b:
57:1b:fe:34:da:81:9b:52:60:8c:88:80:3f:ee:57:
cd:cc:7e:22:b6:b8:8a:82:6e:4b:01:da:20:04:b0:
fe:3a:a5:55:29:fc:56:0b:78:fb:55:03:67:b7:eb:
7b:15:e6:5a:4f:13:f0:9f:c1:83:60:4f:0e:20:2b:
7d:b9:00:bf:d1:79:7b:c1:26:70:b1:97:9b:38:fa:
12:90:c7:bd:7e:fe:8a:6c:81:3e:4c:70:5c:a2:6a:
23:e2:cb:de:be:3a:57:f0:5e:e4:e3:05:d9:0c:f7:
65:0b:a0:3a:cc:ef:2e:d2:ac:17:72:41:94:f6:f8:
c2:3a:96:e5:e4:f3:30:ee:93:68:01:76:c5:b4:77:
e3:4c:a6:ed:fa:a2:48:10:71:bf:a5:a1:b7:66:54:
df:b7:56:5f:e7:2e:57:72:bf:69:20:e4:f1:8a:a3:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:05:40:E5:B3:0E:55:F4:13:55:74:F1:CB:E7:8A:39:1E:39:36
X509v3 Authority Key Identifier:
keyid:27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/kbQFQOWzDlX0E1V08cvnijkeOTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.236.0/23
IPv6:
2a03:dd40::/32
2a03:dd42::/32
Signature Algorithm: sha256WithRSAEncryption
46:1b:7d:90:1b:7d:46:30:66:ed:3b:df:a9:db:03:1d:56:92:
03:23:4b:5f:44:48:79:50:62:76:d7:37:54:3e:51:e7:53:33:
b7:bb:2b:d3:28:e2:ba:b1:81:86:13:af:6a:b8:ca:55:20:0f:
39:83:f2:72:88:0c:a9:df:e5:20:60:c4:e3:d7:ec:8b:d5:1b:
32:a3:96:fd:64:58:90:c1:5c:ad:e9:07:00:85:bb:cb:2d:46:
10:a6:b1:ef:4d:39:23:54:da:06:7a:78:02:23:32:f3:5f:fb:
1b:a3:1f:f9:f1:76:4d:2c:3a:ef:91:f5:66:5b:4f:ce:35:fe:
62:51:e7:33:93:7e:67:0c:87:c3:28:0e:f5:08:33:f1:8e:3e:
e9:f6:1f:bc:b7:50:12:55:2a:f0:cb:a6:68:b4:6c:01:97:6d:
ef:cb:f3:f7:77:07:eb:d9:d6:07:4e:a0:85:7a:6c:b2:8f:7a:
1f:92:18:8d:1b:e9:a8:3f:c0:1e:88:f2:e3:d8:97:6e:64:4e:
8a:c2:a4:e9:9a:58:e6:25:d1:7c:c4:e2:60:17:86:2e:12:4c:
2c:70:fa:49:4e:d6:41:cb:bc:e2:bb:39:2d:2b:c0:ab:27:05:
53:82:ea:16:a4:83:c6:01:62:a4:98:0a:86:12:22:84:54:9a:
9c:b0:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:56 2026 by rpki-client