Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KNSEdnDpvn_mXk42qCk01n_u6gg.roa
File: KNSEdnDpvn_mXk42qCk01n_u6gg.roa (raw, json)
Hash identifier: E/hiuf0RdPVheZsvO21Y+1iH8gmsQIqkBeoltLMYho0=
Subject key identifier: 28:D4:84:76:70:E9:BE:7F:E6:5E:4E:36:A8:29:34:D6:7F:EE:EA:08
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019F6B619BE19313C3BA36A16B9397D12D1F
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KNSEdnDpvn_mXk42qCk01n_u6gg.roa
Signing time: Thu 16 Jul 2026 14:43:06 +0000
ROA not before: Thu 16 Jul 2026 14:43:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2287
IP address blocks: 80.12.110.104/30 maxlen: 30
80.12.110.108/30 maxlen: 30
90.84.133.0/24 maxlen: 24
90.84.134.0/24 maxlen: 24
90.84.138.0/24 maxlen: 24
90.84.139.0/24 maxlen: 24
90.84.157.0/24 maxlen: 24
90.84.158.0/24 maxlen: 24
90.84.166.0/24 maxlen: 24
90.84.167.0/24 maxlen: 24
2a01:ceff::/48 maxlen: 48
2a01:ceff:1::/48 maxlen: 48
2a01:ceff:2::/48 maxlen: 48
2a01:ceff:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:61:9b:e1:93:13:c3:ba:36:a1:6b:93:97:d1:2d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jul 16 14:43:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28d4847670e9be7fe65e4e36a82934d67feeea08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:c7:15:70:a4:39:38:65:d7:02:7d:e5:68:
78:31:4d:3e:a1:49:0a:92:8b:f9:ea:34:4c:6e:81:
18:77:86:90:18:1d:ec:a9:60:b8:ad:0f:ee:5b:9d:
a2:4d:fa:fe:b5:70:d3:81:5d:85:ed:10:29:16:ed:
82:56:fa:b3:7e:cc:ff:e1:78:3c:5e:6c:df:68:ec:
ca:09:c1:e5:13:36:c6:65:30:f7:7d:d5:19:08:59:
31:9a:30:9d:c5:75:67:8a:93:d1:8a:3e:b0:63:47:
cc:ee:7e:e4:fa:b5:fa:f0:72:9e:b1:6c:f3:f0:26:
fd:0c:74:06:2a:fa:e0:c4:f7:65:2c:45:06:29:c5:
ca:72:a1:03:97:54:9e:43:eb:2b:ac:86:44:50:3c:
b9:fa:f9:ee:db:24:2e:c9:f7:db:f0:d6:cb:f5:7b:
46:4b:af:cf:0e:7b:b0:b6:1b:0d:e2:0f:65:b0:37:
d7:06:9c:de:ff:ac:1a:8a:f6:41:d2:2c:29:2e:39:
65:4c:f3:45:90:e8:39:e2:89:d0:5c:0d:ba:58:e5:
ee:dc:0e:75:90:9e:4e:80:db:87:e9:79:3f:96:96:
47:82:0b:c6:29:89:2b:28:29:2a:c1:64:75:75:96:
fb:23:32:dd:ca:78:13:a6:30:c2:82:7c:ee:a3:9f:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:84:76:70:E9:BE:7F:E6:5E:4E:36:A8:29:34:D6:7F:EE:EA:08
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KNSEdnDpvn_mXk42qCk01n_u6gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.110.104/29
90.84.133.0-90.84.134.255
90.84.138.0/23
90.84.157.0-90.84.158.255
90.84.166.0/23
IPv6:
2a01:ceff::/46
Signature Algorithm: sha256WithRSAEncryption
7e:d0:7f:0a:7f:e0:78:d7:73:90:06:b4:8c:82:83:c0:55:12:
fa:ab:c4:75:f3:15:e7:5c:11:d4:22:1a:02:45:7b:94:35:ad:
0d:2b:02:ed:17:9a:7d:be:7f:be:9a:06:fe:cc:93:04:b8:8f:
1b:a1:fc:62:04:92:14:20:6f:19:8c:89:51:6a:06:d2:d3:5e:
89:72:7b:cc:a4:74:a8:2c:b1:ae:11:79:0a:14:57:b9:55:e1:
a2:e2:6c:9b:2f:b1:39:c9:d5:2a:fe:73:7f:4a:5a:79:df:6a:
7d:82:f1:e2:71:e7:92:71:60:bf:9e:8b:49:29:55:0e:83:76:
cd:b3:70:58:8b:04:9a:4c:4b:22:11:63:1b:83:ef:e0:13:09:
bd:93:eb:fa:72:ab:19:a8:7f:0d:96:ea:aa:b5:3d:53:7d:0f:
c3:35:62:2f:9e:04:0d:3f:80:d0:35:a0:f8:59:0d:25:f2:98:
4c:33:0c:a0:9c:f9:d8:77:5a:5f:17:d3:4a:08:6a:e4:53:a9:
04:69:58:ec:1a:a5:cd:c3:12:34:df:4d:93:79:60:9f:67:96:
99:6f:c5:59:d0:a5:22:b2:ec:f0:8d:3d:22:04:85:df:51:9f:
34:d1:94:b2:24:99:bc:4d:a2:e2:ca:bc:f1:7b:19:c9:c1:3c:
9a:0b:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:29:43 2026 by rpki-client