Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/Kb_I90fGou_SJKSEl9rMWZ6WdbE.roa
File: Kb_I90fGou_SJKSEl9rMWZ6WdbE.roa (raw, json)
Hash identifier: Dp4lQ4Ot5TWIuhtp86AoHVlBiynZMqEi1oxvAPPpgfI=
Subject key identifier: 29:BF:C8:F7:47:C6:A2:EF:D2:24:A4:84:97:DA:CC:59:9E:96:75:B1
Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial: 019F86316EEC1B4F2A866C1BA75E7C96BC8F
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/Kb_I90fGou_SJKSEl9rMWZ6WdbE.roa
Signing time: Tue 21 Jul 2026 19:40:14 +0000
ROA not before: Tue 21 Jul 2026 19:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13030
IP address blocks: 185.182.25.0/24 maxlen: 24
2a0a:df80:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:31:6e:ec:1b:4f:2a:86:6c:1b:a7:5e:7c:96:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
Validity
Not Before: Jul 21 19:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29bfc8f747c6a2efd224a48497dacc599e9675b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:d3:ca:5e:38:b0:c4:56:75:ae:a6:14:6b:
21:e9:2b:75:28:6c:9b:2e:e9:7e:a2:04:b1:7d:b6:
e0:ee:3d:c3:cf:b9:11:51:cd:d7:d1:42:cc:f7:6e:
9c:e1:e2:0e:54:26:60:8a:c1:17:ab:1b:c3:a4:67:
54:9f:a2:74:ad:e7:4d:84:6a:dd:d1:04:e5:71:a6:
d5:d0:e6:34:33:41:1a:ab:b5:d2:a5:69:83:79:73:
e3:ce:88:66:77:ee:f0:cb:e6:00:70:5e:e1:39:18:
78:c1:c4:a6:17:0d:a4:80:1d:88:6d:30:2b:77:87:
33:ec:31:98:72:d9:4c:4a:a0:bd:35:b2:97:57:60:
78:83:d5:7f:69:e3:7f:d9:2c:91:e3:02:fa:f9:1f:
70:70:b8:96:a7:0e:37:17:03:99:3b:18:99:a1:93:
67:94:b2:80:0b:71:9f:21:5e:eb:0e:f0:7b:e1:7f:
b1:66:d7:bd:91:d7:3d:2e:a5:97:a7:12:cd:f0:0c:
ba:a2:7b:e9:a8:b8:7c:83:c4:c0:3c:d0:cc:eb:b4:
c3:e9:ad:7e:bb:d9:3e:7b:87:80:aa:42:8b:10:f1:
0c:a9:dd:89:d9:2f:dc:57:4e:aa:2c:bb:5e:5d:8b:
70:b3:64:2a:9a:3a:60:7b:2b:a8:e3:a8:83:8d:4f:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BF:C8:F7:47:C6:A2:EF:D2:24:A4:84:97:DA:CC:59:9E:96:75:B1
X509v3 Authority Key Identifier:
keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/Kb_I90fGou_SJKSEl9rMWZ6WdbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.25.0/24
IPv6:
2a0a:df80:25::/48
Signature Algorithm: sha256WithRSAEncryption
24:0e:81:1a:c8:5b:6e:31:c7:b4:e3:42:38:32:78:81:57:df:
c4:c4:de:d6:b4:a2:d4:b2:9e:3d:8e:36:91:a9:01:c6:e3:be:
60:94:86:f2:28:fe:56:2a:15:5f:e1:7e:58:26:98:77:5b:05:
e5:ca:e8:88:71:84:27:a0:e8:c6:65:0d:81:00:26:f1:93:79:
96:74:86:8d:c7:82:42:2d:24:4a:e3:2f:32:41:9f:5c:c9:91:
a3:33:ed:2d:72:92:c8:5b:e6:5d:97:1b:e3:32:54:ef:a7:ec:
8a:08:3e:b8:47:39:e4:8b:be:1f:69:f8:12:9d:12:98:7c:bb:
51:88:4d:a6:18:9e:e1:07:43:53:56:e5:9a:90:58:16:68:31:
1f:b7:10:53:cc:88:0d:13:5c:a6:2c:47:55:4c:c0:17:d2:40:
aa:76:d7:2b:bd:15:8a:e5:f2:6c:34:c5:46:f7:56:18:68:8e:
92:e0:28:8b:12:b2:55:2e:05:84:e9:fd:03:e9:df:bb:5c:0e:
19:36:5e:c7:53:88:3b:95:c9:1c:44:51:98:40:0e:a6:94:7b:
86:1e:a8:14:28:52:dc:18:81:95:84:66:c9:5e:8e:86:0e:ba:
f4:1e:0a:9c:cd:23:6b:19:a0:c2:ab:07:30:8e:c1:99:3c:42:
01:7c:c1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:41 2026 by rpki-client