Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/K4ofE9tuvzlMNYLCASTtqoKoLSc.roa
File: K4ofE9tuvzlMNYLCASTtqoKoLSc.roa (raw, json)
Hash identifier: T09vAUwOK8ZdFSyz6+1KUquNyWt8P9pASMdnny1kB7w=
Subject key identifier: 2B:8A:1F:13:DB:6E:BF:39:4C:35:82:C2:01:24:ED:AA:82:A8:2D:27
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019F6FD51B0E29C7F0949C06E79DBF9E21D4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/K4ofE9tuvzlMNYLCASTtqoKoLSc.roa
Signing time: Fri 17 Jul 2026 11:27:44 +0000
ROA not before: Fri 17 Jul 2026 11:27:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212940
IP address blocks: 95.46.106.0/24 maxlen: 24
95.46.114.0/24 maxlen: 24
95.47.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:d5:1b:0e:29:c7:f0:94:9c:06:e7:9d:bf:9e:21:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 17 11:27:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b8a1f13db6ebf394c3582c20124edaa82a82d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:ff:fb:8c:2d:4e:15:32:6e:56:13:e8:0b:
3f:9b:2e:56:9a:c5:3c:fe:2a:71:a2:d4:f9:04:06:
4c:0c:53:ea:6e:53:dc:ae:cb:70:60:1c:e3:21:1e:
f9:af:e3:f5:84:1e:3d:eb:24:9e:03:76:0c:59:ae:
38:fa:59:13:47:8d:93:bf:4f:8e:c4:9f:d2:86:d4:
0b:bb:27:17:f4:ca:9a:9f:54:fe:8b:39:02:e0:66:
8e:dd:75:d8:b7:ea:42:0e:ed:90:e3:2a:ca:26:05:
15:c2:2f:2b:1e:56:85:d6:9b:a8:3d:ff:c6:4e:4a:
7e:75:1b:75:9e:9d:68:aa:a4:dd:b0:db:9a:52:e8:
27:7a:1f:a8:bd:2e:27:7f:d8:0c:2e:e6:37:6b:9d:
cf:80:8f:6f:79:2a:9b:33:21:72:a7:19:64:4c:4e:
87:2a:f1:3d:62:de:d4:21:5e:09:a3:88:11:3a:20:
61:cd:b2:1a:63:d7:1c:74:25:fd:83:20:51:fd:16:
f3:f3:6c:1b:7f:ad:8d:7f:88:f5:9d:e7:12:86:10:
65:68:f1:d7:0b:c5:8e:f6:a5:ff:8d:96:19:df:66:
ac:d8:0f:cd:ca:5b:25:e4:0d:00:55:23:8b:2c:5f:
b3:04:3e:dd:24:57:3b:67:69:87:3d:97:f2:a1:d2:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:1F:13:DB:6E:BF:39:4C:35:82:C2:01:24:ED:AA:82:A8:2D:27
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/K4ofE9tuvzlMNYLCASTtqoKoLSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.106.0/24
95.46.114.0/24
95.47.177.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c6:bf:d8:8f:bd:2b:12:79:6a:28:2d:92:09:a0:8c:e3:cb:
f1:e9:2e:76:8b:77:82:a3:e4:79:ef:5d:7f:e0:eb:3d:0b:0e:
2a:e8:5f:00:6f:17:ef:ea:fc:87:ed:d3:5b:92:7c:9b:7e:48:
1b:4c:91:81:c8:b1:1f:44:84:8c:71:6b:dd:e4:14:ca:c7:ae:
ed:d5:6f:f8:6e:48:4d:b3:01:20:10:17:d6:c5:06:a7:4d:d3:
88:43:85:71:b8:85:10:7b:39:bf:2d:ff:53:3b:55:53:96:b8:
53:10:31:94:d6:76:c0:57:68:51:84:25:3c:70:ac:c6:a7:bb:
8a:ee:93:55:05:8d:e4:b3:6a:15:95:f7:a1:14:c5:b4:a5:23:
65:7d:cf:e5:c1:d3:b2:00:9d:09:da:9e:39:b8:cc:b2:ee:c9:
9f:b9:ee:7a:b6:1c:5d:fb:6f:29:5d:5e:4b:c8:0f:51:24:cf:
0b:90:27:c1:c5:c4:bc:da:aa:eb:c4:c3:38:e9:31:c0:f4:a4:
50:e7:ac:57:cc:43:f9:bc:c0:e5:fd:b1:a5:f4:d7:62:a4:6a:
da:50:e0:8a:62:1d:00:09:7f:8c:ec:15:8c:1b:c1:ac:bf:75:
13:bf:3d:4d:fd:fd:aa:87:91:63:9b:e3:bf:60:3e:88:8c:1a:
77:4e:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:59 2026 by rpki-client