Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kJ0Vy0B72zssXC26u57KGbX2ct8.roa
File: kJ0Vy0B72zssXC26u57KGbX2ct8.roa (raw, json)
Hash identifier: hSN+a59jsv0SWS/ZOD8c1cKgqSReXutR5ErlmyVzSmA=
Subject key identifier: 90:9D:15:CB:40:7B:DB:3B:2C:5C:2D:BA:BB:9E:CA:19:B5:F6:72:DF
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 019F4AA0DB3C0A4A101CB631C8EB76684765
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kJ0Vy0B72zssXC26u57KGbX2ct8.roa
Signing time: Fri 10 Jul 2026 06:04:43 +0000
ROA not before: Fri 10 Jul 2026 06:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34696
IP address blocks: 5.42.208.0/24 maxlen: 24
81.172.101.0/24 maxlen: 24
2a0d:340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:a0:db:3c:0a:4a:10:1c:b6:31:c8:eb:76:68:47:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Jul 10 06:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=909d15cb407bdb3b2c5c2dbabb9eca19b5f672df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:25:c3:e9:f5:9e:10:da:57:35:20:7e:56:
c1:85:f3:55:6a:eb:d4:c1:42:9d:74:40:f5:de:7e:
8a:6e:da:d5:02:5c:07:90:1b:3f:7e:95:e2:d0:93:
3b:30:bb:1a:72:cf:e2:63:5b:ec:f3:33:11:f6:be:
4b:c5:5a:c2:85:4e:95:f2:63:ca:85:02:99:0c:72:
2b:88:06:3f:1e:13:8f:ad:8f:05:27:d1:32:32:5f:
2e:2b:d9:60:b1:3a:c0:d5:e4:78:f0:0e:20:4f:4f:
23:f1:48:96:bb:d6:cd:81:a4:18:24:06:06:43:d0:
00:64:20:52:c4:c9:07:7d:3a:db:ac:6f:a0:b9:d1:
08:4b:db:ec:9a:62:ca:fd:db:20:10:e5:0e:0d:ac:
03:0e:69:0e:1f:29:73:bb:81:ef:0f:d5:f5:34:7f:
0f:82:6b:9c:d9:04:9c:c4:29:e6:0e:3a:78:b5:8f:
57:00:82:fe:a2:1f:af:f3:bc:1c:3b:30:6d:46:7f:
df:c8:b4:c7:e4:88:4c:18:58:6e:ff:bf:c4:f1:11:
54:3c:61:2f:55:85:a8:56:e9:a1:af:c7:de:a8:ef:
9d:4d:bd:23:30:84:d9:1f:45:38:3e:6b:c1:e0:5a:
ed:f7:0f:50:80:8c:28:97:de:f9:c2:e2:21:87:94:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9D:15:CB:40:7B:DB:3B:2C:5C:2D:BA:BB:9E:CA:19:B5:F6:72:DF
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kJ0Vy0B72zssXC26u57KGbX2ct8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.208.0/24
81.172.101.0/24
IPv6:
2a0d:340::/32
Signature Algorithm: sha256WithRSAEncryption
bc:2d:a1:5e:58:5a:86:0c:c3:1c:a4:7e:be:a2:87:af:f8:aa:
fd:13:56:17:6f:93:a0:59:6b:2b:8a:ba:2f:12:26:73:bf:38:
c1:02:18:0b:4e:c8:15:05:1d:f6:c5:6f:6e:88:63:60:70:4c:
70:e5:3b:b7:d4:0b:78:74:47:fa:80:b4:22:8f:99:02:dc:20:
ab:04:4b:be:1e:ba:de:22:a6:d4:21:b0:87:fb:fc:96:24:52:
60:01:0d:d6:1f:3e:cb:78:3c:bd:82:01:36:b4:b5:ac:0e:f1:
c4:3f:a4:75:31:ba:b0:c3:67:8f:32:a2:4e:3c:b0:fc:a4:72:
bd:bb:60:ff:0e:d5:16:32:b9:48:cc:ea:b0:cf:e5:d2:56:41:
12:42:65:93:bd:c2:98:f2:1f:a8:b5:bd:10:89:99:e2:ab:25:
29:36:9a:e1:20:8e:8d:d8:57:ab:d9:7b:0d:37:b0:7e:53:9d:
e4:0b:5f:47:93:71:86:57:3f:9a:e8:d2:77:41:02:3b:49:ab:
3c:13:84:4a:d8:78:4b:61:e1:34:d7:53:e4:34:39:89:ce:22:
21:d1:47:0c:10:cc:57:2e:21:85:96:fb:60:a0:eb:2f:f0:fe:
d6:37:69:8b:32:8f:2b:03:e7:55:42:f9:47:49:a0:07:47:57:
40:47:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:05 2026 by rpki-client