Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/kva9v8qwuzs9AIC6M0Yymc62a-k.roa
File: kva9v8qwuzs9AIC6M0Yymc62a-k.roa (raw, json)
Hash identifier: jqE5ifSnUoFbCpac7mHFBsd4Kmtc6sUUCcFu2fSyvUU=
Subject key identifier: 92:F6:BD:BF:CA:B0:BB:3B:3D:00:80:BA:33:46:32:99:CE:B6:6B:E9
Certificate issuer: /CN=24704dd704fc4b0afb76087d6f796dbb3f880092
Certificate serial: 019F2368B4C5BD47C2FC2EC0B38DA2CE8D1D
Authority key identifier: 24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/kva9v8qwuzs9AIC6M0Yymc62a-k.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40551
IP address blocks: 185.22.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b4:c5:bd:47:c2:fc:2e:c0:b3:8d:a2:ce:8d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24704dd704fc4b0afb76087d6f796dbb3f880092
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92f6bdbfcab0bb3b3d0080ba33463299ceb66be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:fe:ba:a6:f8:e0:4d:a5:2b:17:1c:6e:0a:
c7:f4:5a:66:7f:08:e1:d5:4b:87:b9:a5:c0:ba:75:
c6:e1:33:81:04:71:8e:03:08:d0:ff:5a:e4:35:3b:
8b:1b:6e:00:20:56:25:c3:6e:08:c3:e6:aa:6c:f9:
1e:75:64:05:fd:c0:77:50:f5:2f:cb:47:0e:1c:84:
eb:37:4a:c7:cd:08:51:c6:a3:84:5d:c3:56:85:46:
39:19:dd:4a:10:df:70:9d:eb:e3:69:6a:7d:44:cf:
22:c2:42:f3:5e:50:46:72:72:66:8d:da:b7:72:51:
9f:40:66:7f:1d:d6:3f:9b:2b:26:dd:76:28:5a:eb:
e4:57:ec:fc:98:d5:79:cb:cf:a4:16:79:bc:40:40:
b4:cc:5b:b8:3f:46:a2:cb:90:df:d5:9c:4e:80:ef:
e0:cd:0b:e7:32:7a:e6:18:f3:e9:cc:6f:5b:18:87:
64:ed:80:a7:11:7a:35:c4:65:59:a7:f1:9a:81:c4:
98:94:3d:cb:7a:bb:89:2d:b8:cc:96:84:81:1e:16:
02:85:a0:92:e7:eb:83:ea:81:9f:f2:48:07:c9:c7:
5d:c1:d4:f9:c2:d2:0e:8d:4f:d4:1e:96:06:8c:b7:
f5:5e:0b:a2:75:14:c6:63:c4:3e:e6:23:43:18:4c:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F6:BD:BF:CA:B0:BB:3B:3D:00:80:BA:33:46:32:99:CE:B6:6B:E9
X509v3 Authority Key Identifier:
keyid:24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/kva9v8qwuzs9AIC6M0Yymc62a-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.83.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b7:fa:82:67:d1:8a:97:ba:3a:10:3e:40:ca:03:df:2a:06:
45:1a:de:ac:16:04:ee:59:95:6b:52:fa:53:31:92:0d:cd:78:
5b:72:46:84:7e:80:88:90:a0:f4:65:e9:bb:43:f5:65:c3:45:
6b:46:75:9b:8e:dc:fb:9c:a7:4b:a0:a1:aa:9d:1c:54:7e:90:
ef:62:97:22:33:a4:92:c4:64:e4:7f:bc:57:d9:db:10:83:7c:
77:d1:46:a5:f5:58:9d:0f:6e:79:b6:f1:11:81:3f:ae:a0:25:
bf:8c:9e:80:67:e7:85:9c:76:f8:02:69:69:ee:cf:3d:64:13:
5f:06:48:62:d8:40:26:c3:b7:20:26:b7:cf:b9:83:1f:70:c6:
6a:ac:04:2a:18:58:ee:bb:4c:e9:ae:9d:82:5f:d5:e3:4a:da:
0c:ba:7a:13:a3:d7:38:18:15:e1:84:ed:9a:fc:51:55:32:d7:
ae:28:29:aa:67:4c:83:5a:fb:19:39:9e:67:4a:ab:99:a2:92:
eb:59:de:ed:cc:bc:6c:06:e0:13:8f:dd:0e:99:a9:84:2c:af:
b0:cd:1c:ba:6a:54:74:1a:cd:44:c5:1f:91:c3:f7:b7:3d:de:
db:4c:f7:1d:6a:28:2d:6b:ff:23:68:cf:ab:18:db:eb:4b:9a:
fc:d2:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:41 2026 by rpki-client