Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KMkuCMv1xYLMnYISj8u5gSNaLik.roa
File: KMkuCMv1xYLMnYISj8u5gSNaLik.roa (raw, json)
Hash identifier: 9fJqb1k/tq4X1/fn9UJufLAlQr1GrVRKjwqY7cbclO8=
Subject key identifier: 28:C9:2E:08:CB:F5:C5:82:CC:9D:82:12:8F:CB:B9:81:23:5A:2E:29
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019DDE9D0425D2A6B154A954468FF552F999
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KMkuCMv1xYLMnYISj8u5gSNaLik.roa
Signing time: Thu 30 Apr 2026 13:38:45 +0000
ROA not before: Thu 30 Apr 2026 13:38:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203380
IP address blocks: 167.17.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:9d:04:25:d2:a6:b1:54:a9:54:46:8f:f5:52:f9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 30 13:38:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28c92e08cbf5c582cc9d82128fcbb981235a2e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:e5:ed:0c:de:99:f9:02:2f:81:04:86:e1:
27:1c:ee:3a:d4:b9:91:11:be:f1:2a:e1:db:6f:68:
92:3f:fe:09:e8:d4:ec:3f:37:3b:6a:04:4f:c4:b1:
e4:71:8c:20:a9:68:a9:8b:55:74:57:37:ed:f0:1e:
2c:fe:76:a1:d2:a8:7a:d8:55:27:b1:00:a9:26:c7:
77:38:62:ff:d5:85:95:f4:03:66:11:7e:71:8c:29:
1a:0e:f0:73:21:b1:c4:4d:78:33:82:c8:86:f2:5a:
6a:34:3f:b7:72:49:43:6f:db:a7:b5:99:75:bd:85:
5e:34:4b:61:f6:b9:68:74:21:2b:92:19:c5:ad:44:
32:a7:5c:bf:29:4c:bb:d9:f0:b4:43:f0:31:5e:4d:
5e:87:55:0d:87:bc:d9:8c:64:6c:20:e2:0f:74:76:
86:0a:84:27:fd:e5:e3:a8:a2:09:f1:41:67:8d:ec:
1b:5f:a3:00:10:0a:47:0c:42:66:30:2d:8d:43:2f:
ee:d4:e7:88:b7:aa:a7:3c:38:57:15:c2:3c:24:3d:
7b:59:94:38:6c:c4:7b:d6:ac:3b:b8:45:74:58:5e:
1f:7a:1c:95:4c:d4:ce:7a:6d:9f:7c:7e:dc:75:a3:
1f:b1:fe:79:d0:1e:67:cd:4a:9d:97:84:a1:f7:b7:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C9:2E:08:CB:F5:C5:82:CC:9D:82:12:8F:CB:B9:81:23:5A:2E:29
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KMkuCMv1xYLMnYISj8u5gSNaLik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.17.62.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d4:9f:9a:ad:47:65:e6:42:ce:f9:0e:00:2f:23:04:73:a6:
bc:88:63:3e:f9:73:ed:97:84:b2:5a:7c:22:ea:e7:37:86:4b:
f5:2f:da:66:10:d0:da:7b:21:3d:e0:ef:35:ba:db:88:2f:3b:
36:d2:f6:ce:90:a2:b6:43:04:45:6b:aa:a1:6e:05:b1:e8:9f:
59:20:cd:35:52:74:14:8e:a7:fa:be:b0:63:84:ac:e6:29:ee:
1c:59:dc:8b:fc:53:e1:59:98:d6:eb:0e:a7:31:c7:2f:cd:53:
0c:90:6e:5b:db:1d:49:51:c8:cb:1b:8c:b8:75:e9:b2:2c:f7:
6b:99:f8:e1:b1:4d:74:c8:bc:67:04:41:03:f4:84:fa:0a:85:
9b:59:52:cf:f8:e9:c0:16:fc:d8:19:ac:74:26:0b:5e:21:c1:
35:2e:64:82:e0:de:55:57:58:f4:f8:ab:af:86:9d:62:83:ae:
ce:36:54:aa:b5:f8:03:95:3e:2d:0b:af:e9:44:2e:10:b3:fe:
9e:9b:63:04:8d:87:e1:cd:98:48:f7:6d:48:82:cf:90:62:b9:
8b:73:d7:c3:e3:7e:90:17:b3:31:0d:58:6b:3e:df:18:d0:e3:
0e:81:b1:4c:b2:f3:a3:34:8f:74:70:b3:cf:d8:5f:2e:c6:9e:
be:c9:1d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:45:02 2026 by rpki-client