Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/kXPy2txtviypD5vwBDji7qgiSxU.roa
File: kXPy2txtviypD5vwBDji7qgiSxU.roa (raw, json)
Hash identifier: fv/wHDl1gYo3IGDSXMLvUCYdHmU4dilfu63Wi3/dV9k=
Subject key identifier: 91:73:F2:DA:DC:6D:BE:2C:A9:0F:9B:F0:04:38:E2:EE:A8:22:4B:15
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 019F3C3DD1AD1A7B3C219CE562F0386326E3
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/kXPy2txtviypD5vwBDji7qgiSxU.roa
Signing time: Tue 07 Jul 2026 11:01:52 +0000
ROA not before: Tue 07 Jul 2026 11:01:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59948
IP address blocks: 89.33.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:3d:d1:ad:1a:7b:3c:21:9c:e5:62:f0:38:63:26:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Jul 7 11:01:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9173f2dadc6dbe2ca90f9bf00438e2eea8224b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:15:3e:c5:06:d2:09:63:58:c0:69:7d:3f:
e5:6d:68:2f:da:10:3a:44:2a:5c:39:b6:f5:c1:7e:
19:9e:e0:c2:ca:4c:de:d2:77:da:63:32:70:26:40:
19:8b:32:33:2d:37:43:e4:43:b6:17:05:c4:eb:3e:
2b:a8:89:ad:c6:45:bd:65:c2:c9:ce:08:d2:b3:fa:
2b:8a:be:2a:37:a2:7c:07:d7:c1:87:94:e7:ad:f8:
fc:33:cb:5a:80:1e:14:93:34:55:cc:94:85:e8:8e:
09:23:88:08:c1:fc:f2:83:9a:2d:b1:f3:3d:36:ad:
c6:7a:bf:d3:42:e2:2f:c9:ce:2d:75:28:fa:c9:b3:
65:52:33:fc:23:e6:c0:67:f6:92:58:06:9d:88:a2:
9a:5c:4f:47:cb:5e:37:2e:8a:9a:3d:ab:9b:93:d0:
00:f4:5f:e2:94:df:35:a5:69:d6:f7:4b:d4:c4:5e:
13:97:d1:af:9c:61:67:b8:6f:5a:c9:5f:88:77:1a:
ba:f9:d4:c1:59:62:71:5c:7d:57:2d:cf:e5:27:2a:
65:14:c3:77:bf:47:ea:1e:0d:64:71:27:57:4e:f3:
d7:ca:7d:75:84:34:25:a1:de:6a:9c:39:b2:65:39:
01:61:b3:b4:27:e5:95:14:dc:c0:e3:ad:b1:35:ca:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:73:F2:DA:DC:6D:BE:2C:A9:0F:9B:F0:04:38:E2:EE:A8:22:4B:15
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/kXPy2txtviypD5vwBDji7qgiSxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.167.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7f:d6:26:58:11:72:1d:4c:7e:7d:7e:e0:72:af:18:61:75:
d2:d7:6e:65:7e:f7:25:a1:66:d0:8d:98:ef:8c:0d:3d:9c:d8:
52:47:ad:9b:97:d0:3a:9f:bf:39:c6:86:ac:94:10:52:76:06:
b2:34:36:31:fb:e3:1a:32:01:9d:af:83:3d:bc:64:15:fb:7c:
17:0c:81:99:8f:1b:20:a9:47:9f:a5:6b:7e:54:1c:84:bb:45:
8a:c2:6b:b5:67:69:55:2b:49:3c:e1:ca:81:7e:cc:da:08:21:
2f:46:78:75:81:ba:8e:d6:b7:a1:58:a0:a6:e3:14:dc:0a:31:
fe:ca:de:76:5a:41:a3:1b:b9:fd:d8:cc:52:9f:11:7b:34:d7:
f4:3f:c3:cc:58:a0:27:a0:8e:df:ba:6f:0a:7c:31:87:a7:e9:
b9:cb:0b:e7:70:33:50:eb:eb:79:c0:f1:79:8c:36:c9:39:a3:
9d:68:0a:b5:00:b1:5b:52:71:26:19:46:e4:de:e5:3b:3c:c6:
02:34:e5:dd:59:f3:23:9a:16:c5:8c:5b:c4:e4:2f:54:ee:17:
7b:3d:e7:98:68:a7:e8:a4:a3:aa:f1:09:c0:93:39:f6:5a:69:
e3:fb:d1:07:1d:e5:0a:9e:89:67:58:f4:ce:85:58:83:fb:84:
64:60:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:44 2026 by rpki-client