Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/KAkO-7xOFpTAGhNLp1btnqE2bSE.roa
File: KAkO-7xOFpTAGhNLp1btnqE2bSE.roa (raw, json)
Hash identifier: IGYFUhUO628GeghMUJEog11qsWIupQM1Ghm5aRQ86iM=
Subject key identifier: 28:09:0E:FB:BC:4E:16:94:C0:1A:13:4B:A7:56:ED:9E:A1:36:6D:21
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 019F5A8DB4F57E4915B1CC356F956AF52C25
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/KAkO-7xOFpTAGhNLp1btnqE2bSE.roa
Signing time: Mon 13 Jul 2026 08:17:43 +0000
ROA not before: Mon 13 Jul 2026 08:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 130.206.0.0/16 maxlen: 16
158.99.0.0/16 maxlen: 16
185.205.148.0/22 maxlen: 22
192.148.201.0/24 maxlen: 24
192.148.202.0/23 maxlen: 23
192.148.204.0/22 maxlen: 22
192.187.24.0/23 maxlen: 23
193.144.0.0/14 maxlen: 14
212.128.0.0/18 maxlen: 18
212.128.64.0/20 maxlen: 20
212.128.80.0/21 maxlen: 21
212.128.128.0/17 maxlen: 17
2001:720::/29 maxlen: 29
2001:720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:8d:b4:f5:7e:49:15:b1:cc:35:6f:95:6a:f5:2c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Jul 13 08:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28090efbbc4e1694c01a134ba756ed9ea1366d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:06:41:9d:9a:b6:aa:e0:41:c8:98:79:dc:
60:27:8c:df:be:80:6e:8f:71:c4:20:82:0b:f1:78:
7f:8f:34:65:fb:b5:28:4c:18:74:2a:11:59:df:61:
ee:62:55:1a:d8:0c:d9:b1:5c:1d:d6:97:fe:5d:6e:
3e:74:79:cc:7b:16:2f:cf:41:07:a0:91:dc:d7:34:
48:4e:a1:2a:84:7b:a1:db:41:18:5a:cb:db:f7:eb:
2c:14:d0:65:b4:6b:60:17:48:98:3e:cb:11:d4:e8:
e7:c6:6c:35:77:09:32:18:fb:f3:01:05:d9:33:8f:
d7:5d:f0:5b:b6:e3:ff:3b:65:ad:67:ce:49:3d:2f:
1c:1f:6f:01:87:df:2b:43:e0:1c:be:2f:1d:58:a3:
df:34:6d:41:f5:13:8e:10:1d:51:69:f2:03:2b:61:
69:ca:64:70:d6:6b:8d:8a:d1:1f:da:97:12:49:99:
51:80:d7:6b:b9:ed:4b:b9:a2:ec:43:dd:cf:49:72:
db:0c:1a:55:08:da:e0:11:6f:b3:9a:1c:3d:9f:6c:
44:49:82:6e:c2:ca:4c:9b:69:c5:a7:a3:4f:75:f4:
da:85:57:f8:74:d4:38:80:c6:1b:3e:e2:14:37:7f:
66:e3:b2:54:06:f5:c2:df:ed:f1:bd:28:35:a9:02:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:09:0E:FB:BC:4E:16:94:C0:1A:13:4B:A7:56:ED:9E:A1:36:6D:21
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/KAkO-7xOFpTAGhNLp1btnqE2bSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.206.0.0/16
158.99.0.0/16
185.205.148.0/22
192.148.201.0-192.148.207.255
192.187.24.0/23
193.144.0.0/14
212.128.0.0-212.128.87.255
212.128.128.0/17
IPv6:
2001:720::/29
Signature Algorithm: sha256WithRSAEncryption
7d:48:0d:c0:a7:49:c6:c5:07:b1:b7:34:9b:cc:ab:4b:60:8d:
97:2a:bc:95:2d:57:25:3b:45:2f:60:0d:c5:ed:4e:91:44:5f:
6a:2f:d8:3e:6d:6a:0f:eb:4b:e8:0c:af:e3:6d:20:1c:63:52:
94:aa:81:fc:de:fa:a1:8a:94:99:6d:4a:5b:9b:1e:16:d5:d8:
ab:27:a3:fb:f6:84:55:c3:9b:17:36:c3:43:8e:90:f5:63:ad:
29:ca:23:dc:eb:30:b1:f1:9f:5b:49:bb:36:b4:ba:f8:b6:a3:
73:b7:7d:6e:86:96:cc:5f:6e:22:40:bf:00:b9:50:e4:d0:1a:
85:f6:00:87:4d:fb:fc:75:70:95:1f:c1:43:ca:f7:4a:5a:ef:
07:63:eb:18:95:80:fd:b8:1f:68:f1:b9:83:23:24:68:49:60:
f0:7b:75:f0:d4:b2:8c:86:01:ee:86:1e:7f:53:45:fc:2d:f4:
67:b7:7f:54:e3:15:79:8f:94:a6:65:7f:a3:5b:40:49:7d:d7:
b2:9a:4a:ab:71:ff:ba:af:e8:4c:52:82:9c:25:7d:1b:e5:8e:
7e:2c:53:dc:68:ce:82:a5:c9:c3:5b:50:28:99:18:50:cb:2d:
51:53:09:c5:5b:ca:31:25:72:87:99:78:98:f8:e0:6a:bf:c5:
ff:2a:da:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:33 2026 by rpki-client