Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/KGBxaPMSXb3VAR6GIDljoG2LIFc.roa
File: KGBxaPMSXb3VAR6GIDljoG2LIFc.roa (raw, json)
Hash identifier: NOpVXqOJPQOuDoHqFjezkk6SR1W7Dx0rI6JHWqQhetY=
Subject key identifier: 28:60:71:68:F3:12:5D:BD:D5:01:1E:86:20:39:63:A0:6D:8B:20:57
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A120AD1122BB55BD4339E7F2A0C1FAE397
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/KGBxaPMSXb3VAR6GIDljoG2LIFc.roa
Signing time: Fri 09 Oct 2026 12:39:35 +0000
ROA not before: Fri 09 Oct 2026 12:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218447
IP address blocks: 201.7.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:ad:11:22:bb:55:bd:43:39:e7:f2:a0:c1:fa:e3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 9 12:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28607168f3125dbdd5011e86203963a06d8b2057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:66:dc:05:34:7d:62:6b:22:48:d6:90:a6:18:
80:ea:d0:2c:39:9d:db:e1:4d:ae:0e:e4:4e:90:8f:
0c:9a:74:d8:d9:3c:70:e5:8e:c4:65:48:a7:48:ab:
fe:9a:05:a7:0c:54:9c:d3:b1:17:17:a9:8d:23:14:
8d:5f:92:1e:59:75:4d:e4:47:30:ff:cf:ca:f7:fb:
b5:2f:21:4a:df:95:4d:e4:b8:38:38:3b:1b:17:38:
88:f9:32:e2:e7:3d:4a:a6:dc:fc:5f:a3:25:76:e2:
ec:42:0e:e6:de:f7:ac:fb:fe:54:b2:bd:a3:18:92:
5d:9e:6b:4f:3d:e0:d4:c3:ab:fb:fa:0c:6e:bd:4e:
ae:d0:68:ac:65:85:36:50:eb:60:22:28:dc:a4:ce:
fe:69:a5:0d:22:e8:d7:bb:9c:25:e3:1c:aa:c2:f2:
a3:ad:b7:bd:5f:0c:68:37:ff:fd:a3:c5:c7:15:22:
4c:7b:b3:0d:02:fe:e2:ae:f7:d9:18:f8:55:d4:c8:
32:45:83:67:6d:7f:0a:ab:6a:5d:90:38:f6:bd:c2:
a7:a6:a0:3f:1e:cd:01:8c:2c:4a:f4:15:ee:44:97:
54:1a:92:2e:41:d5:ad:e8:c3:2a:06:05:f7:67:f0:
38:e9:ab:be:65:c3:e0:14:e3:22:8e:a1:98:1f:c7:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:60:71:68:F3:12:5D:BD:D5:01:1E:86:20:39:63:A0:6D:8B:20:57
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/KGBxaPMSXb3VAR6GIDljoG2LIFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:21:4e:e8:13:2f:85:af:2c:4b:b6:54:bd:1f:5e:b6:3b:6b:
61:4e:69:56:68:f9:63:cc:c4:2b:ab:90:df:b6:1f:a6:5f:96:
6e:10:34:42:c3:91:93:b9:98:37:fd:99:b1:99:3d:b9:d9:bc:
d4:a8:ff:2a:03:e5:54:75:6e:38:b7:e8:37:b3:fd:57:e7:a2:
81:ce:af:9b:f0:d4:75:27:85:1e:e3:1e:a8:44:86:cd:31:29:
0d:36:e5:9e:05:2d:37:5d:30:79:77:46:02:4e:7a:14:65:99:
a0:ff:47:cb:72:b9:c3:f2:80:c7:a4:4e:d5:e3:e7:1e:2c:5f:
d6:da:47:48:95:8d:51:85:52:a2:41:f0:2f:fc:78:6f:d4:69:
92:88:0f:58:b1:ea:1e:fa:48:c3:ad:28:0e:e9:71:35:d6:ec:
78:0e:88:ae:4a:e7:80:14:d0:0d:d4:03:87:e9:cf:79:cf:e5:
cb:9b:2b:43:52:d8:02:6a:8b:62:80:4c:0e:26:fd:a5:3d:ae:
aa:85:fc:49:6b:2a:84:d0:c2:0a:a8:05:eb:24:a9:5d:a4:51:
8c:f3:1f:db:9d:ee:0a:ac:e2:c9:7f:bd:4d:b7:0f:e0:50:45:
7f:06:16:32:fd:5b:b3:cc:03:d8:bd:9f:17:b7:cd:a3:50:51:
fa:02:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:47:52 2026 by rpki-client