Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/KHKZ9oAR4pOjsmM70Mx2jjXuCSc.roa
File: KHKZ9oAR4pOjsmM70Mx2jjXuCSc.roa (raw, json)
Hash identifier: KQJvV0lMLENSykGh1gJfx02ynaMwFLdd0OilipOgatU=
Subject key identifier: 28:72:99:F6:80:11:E2:93:A3:B2:63:3B:D0:CC:76:8E:35:EE:09:27
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019F8588F8EFA01D9A0E9A44328E55E5B79B
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/KHKZ9oAR4pOjsmM70Mx2jjXuCSc.roa
Signing time: Tue 21 Jul 2026 16:36:14 +0000
ROA not before: Tue 21 Jul 2026 16:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 85.204.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:88:f8:ef:a0:1d:9a:0e:9a:44:32:8e:55:e5:b7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jul 21 16:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=287299f68011e293a3b2633bd0cc768e35ee0927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:8c:19:0e:f5:af:16:7e:ef:61:66:41:96:
0c:75:30:7a:66:7e:a8:13:13:d8:20:67:b0:c7:5d:
0f:e3:9a:c6:55:8a:7f:70:bb:ca:9e:9e:23:aa:6f:
b8:be:b3:6b:83:28:70:bd:cc:20:0b:59:3c:db:b4:
38:5f:45:1b:9f:2c:9e:a6:d0:15:18:92:ab:9d:68:
e0:b3:4c:1a:5e:55:bd:3e:27:f4:4c:cc:1f:09:fd:
31:ae:f5:47:ed:65:78:f3:c7:8f:cf:4a:11:bb:c3:
6a:38:0b:dc:ef:c6:6e:55:6e:dd:d0:78:88:bf:fa:
c8:eb:5f:fd:dc:9d:3d:71:3a:c4:7d:84:12:c1:bb:
52:43:21:46:8f:31:c9:c4:00:ea:bf:29:31:1d:7d:
18:c5:48:f6:9b:76:4d:05:f0:97:93:31:05:83:cc:
bd:98:69:ad:1d:62:13:af:c8:32:4b:88:03:df:ce:
a8:60:14:c8:7d:61:f3:a1:c2:b3:c8:ea:77:49:5b:
fc:37:0f:26:cf:e6:8b:66:8e:0a:3c:fd:85:2d:57:
b9:5a:48:ad:91:a1:38:21:38:d4:92:a3:ac:fb:47:
07:f0:97:33:e3:fa:d0:61:ed:6c:92:22:f8:82:a3:
ab:ea:8c:eb:4d:0a:83:06:e4:21:79:69:42:24:91:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:72:99:F6:80:11:E2:93:A3:B2:63:3B:D0:CC:76:8E:35:EE:09:27
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/KHKZ9oAR4pOjsmM70Mx2jjXuCSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.255.0/24
Signature Algorithm: sha256WithRSAEncryption
80:0f:a6:37:74:03:97:33:c2:73:d8:91:b5:20:41:cd:40:92:
40:bd:6b:42:76:38:ab:0b:54:fe:34:ff:da:04:9b:e2:af:22:
b7:1c:2d:51:73:20:26:06:37:04:60:c5:a1:91:fd:a2:80:d6:
a8:da:6e:fb:e6:9e:47:2f:70:97:7a:7e:d1:26:2a:96:76:78:
2b:dc:fe:30:39:8c:fb:ad:2d:1a:86:32:97:45:34:a0:b6:8a:
2c:1c:bb:ff:8f:53:fb:1e:17:29:6b:15:40:8e:d5:f1:39:48:
dc:1e:a1:87:8b:1e:26:d2:b0:87:7e:2b:dd:a3:6e:d9:56:61:
bc:a7:5d:61:c5:b3:9d:fe:00:34:a7:a9:bb:0c:95:2a:43:c0:
70:75:92:ba:2a:32:c8:22:27:0e:c5:27:6d:0e:1a:a3:3a:e6:
99:46:7d:75:eb:e3:3a:8d:c0:2f:99:a4:55:9f:01:ad:96:da:
7a:bc:d6:d8:7d:5d:2c:7d:a6:ad:39:8e:64:0a:49:df:5d:4c:
4c:78:07:61:b0:00:ec:38:ac:f1:d2:10:82:f9:ee:3f:d9:e4:
a2:77:b8:35:e0:9d:e3:f0:b8:03:16:97:76:7d:14:59:42:04:
58:1b:68:7e:6e:f3:65:36:d9:62:78:b2:e7:fd:6b:49:e9:43:
9d:9f:0f:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+FiPjvoB2aDppEMo5V5bebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjYwNzIxMTYzNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODcyOTlmNjgwMTFlMjkzYTNiMjYzM2JkMGNjNzY4ZTM1ZWUwOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WyMGQ71rxZ+72FmQZYMdTB6Zn6o
ExPYIGewx10P45rGVYp/cLvKnp4jqm+4vrNrgyhwvcwgC1k827Q4X0UbnyyeptAV
GJKrnWjgs0waXlW9Pif0TMwfCf0xrvVH7WV488ePz0oRu8NqOAvc78ZuVW7d0HiI
v/rI61/93J09cTrEfYQSwbtSQyFGjzHJxADqvykxHX0YxUj2m3ZNBfCXkzEFg8y9
mGmtHWITr8gyS4gD386oYBTIfWHzocKzyOp3SVv8Nw8mz+aLZo4KPP2FLVe5Wkit
kaE4ITjUkqOs+0cH8Jcz4/rQYe1skiL4gqOr6ozrTQqDBuQheWlCJJGwFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFChymfaAEeKTo7JjO9DMdo417gknMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvS0hLWjlvQVI0cE9qc21NNzBNeDJqalh1Q1NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcz/MA0G
CSqGSIb3DQEBCwUAA4IBAQCAD6Y3dAOXM8Jz2JG1IEHNQJJAvWtCdjirC1T+NP/a
BJviryK3HC1RcyAmBjcEYMWhkf2igNao2m775p5HL3CXen7RJiqWdngr3P4wOYz7
rS0ahjKXRTSgtoosHLv/j1P7HhcpaxVAjtXxOUjcHqGHix4m0rCHfivdo27ZVmG8
p11hxbOd/gA0p6m7DJUqQ8BwdZK6KjLIIicOxSdtDhqjOuaZRn116+M6jcAvmaRV
nwGtltp6vNbYfV0sfaatOY5kCknfXUxMeAdhsADsOKzx0hCC+e4/2eSid7g14J3j
8LgDFpd2fRRZQgRYG2h+bvNlNtlieLLn/WtJ6UOdnw85
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:52 2026 by rpki-client