Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/kxoI3tnE9aYoA4v-ZLKv8i_BQx4.roa
File: kxoI3tnE9aYoA4v-ZLKv8i_BQx4.roa (raw, json)
Hash identifier: l4BQilcKqCp6clXu8XgqddZ6lxjo67lqHjYTl9GbYZM=
Subject key identifier: 93:1A:08:DE:D9:C4:F5:A6:28:03:8B:FE:64:B2:AF:F2:2F:C1:43:1E
Certificate issuer: /CN=8fb972af0b6101479c1d4619912878a7aca55f9b
Certificate serial: 019F236936A84CDA6F46BD99FEBFF4E0362E
Authority key identifier: 8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/kxoI3tnE9aYoA4v-ZLKv8i_BQx4.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39686
IP address blocks: 2.58.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:36:a8:4c:da:6f:46:bd:99:fe:bf:f4:e0:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb972af0b6101479c1d4619912878a7aca55f9b
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=931a08ded9c4f5a628038bfe64b2aff22fc1431e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:52:d4:13:94:27:c6:50:28:c8:d7:1b:d2:42:
88:79:73:50:59:ca:b4:cd:a6:74:cb:68:a1:84:9f:
66:4c:0e:3c:f6:89:0f:26:79:e2:0f:55:cc:9f:4b:
4f:e6:46:df:1f:40:88:db:e3:f5:4c:b0:8c:28:a4:
bc:be:9a:20:39:d5:93:ae:2b:b4:9b:ac:cf:a0:d3:
1c:87:20:29:37:7f:7d:b3:65:1e:43:f1:ae:f1:5f:
ba:78:ae:a8:dc:21:27:5d:38:cc:7a:a8:33:1d:43:
f7:4c:53:53:63:9b:a6:e1:f9:06:8c:62:87:57:c2:
99:e5:20:eb:f1:37:53:d2:c8:bb:3c:13:4d:dd:5d:
e3:f2:82:3a:88:e1:8f:53:77:f5:9d:bd:0c:6e:a4:
4d:c2:d7:f6:6a:23:0b:f0:48:7c:68:39:56:29:15:
fd:0b:ce:fb:6d:b7:c5:6f:73:c8:77:ff:91:14:84:
06:d2:03:50:db:ed:32:5f:b1:2c:01:3f:56:0d:5b:
68:77:eb:2e:cc:85:80:1a:e3:b4:65:87:42:d6:ab:
30:c3:61:8e:47:bf:a5:7a:d5:8a:d6:c6:90:7b:c9:
42:3c:2b:e8:b5:85:76:7e:d9:fe:83:0e:21:b2:b1:
2e:35:ba:a4:bc:da:d7:74:cc:0f:cc:41:b7:2f:6f:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1A:08:DE:D9:C4:F5:A6:28:03:8B:FE:64:B2:AF:F2:2F:C1:43:1E
X509v3 Authority Key Identifier:
keyid:8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/kxoI3tnE9aYoA4v-ZLKv8i_BQx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.108.0/22
Signature Algorithm: sha256WithRSAEncryption
97:e4:26:fd:5a:6c:c8:47:24:56:f6:cf:69:1c:90:81:69:3e:
0b:63:82:fb:36:ae:2e:e6:d0:1e:f3:32:70:5a:07:df:8f:2a:
4f:27:21:24:11:b1:8f:5e:e9:a9:70:f0:99:7d:4a:45:13:84:
88:01:6d:bb:ed:bc:a4:b0:26:29:c9:12:65:cf:b3:b7:0c:0b:
05:99:11:e0:c1:8c:15:33:6b:79:4a:46:98:0d:6b:19:a0:b8:
57:71:29:1c:a8:02:0e:00:81:1d:57:53:35:56:e1:25:1f:b2:
38:e9:53:29:b6:46:b5:b6:6b:5a:b4:04:57:ce:dd:27:1c:1c:
b3:84:4b:a4:8d:90:b6:d0:fb:e8:8d:5d:2a:98:0f:01:37:1e:
64:d8:d2:d4:0e:f7:e9:12:25:24:db:6d:69:12:06:85:f4:09:
fd:72:a8:33:7b:9e:09:0a:14:9a:86:7d:2f:f7:a1:4e:ce:eb:
6b:f4:63:f4:1f:47:ab:2a:23:ab:93:b1:41:95:92:b7:ed:86:
69:0b:03:74:22:85:6c:0c:8b:69:3a:b3:61:f0:22:a9:23:0b:
45:24:83:ae:06:2b:3f:dd:43:ca:6a:a6:1d:d5:58:cd:5b:68:
2e:cd:65:d3:f2:c8:be:41:c0:a3:85:16:ad:c1:24:0c:33:27:
e3:ae:16:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTaoTNpvRr2Z/r/04DYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjk3MmFmMGI2MTAxNDc5YzFkNDYxOTkxMjg3OGE3YWNh
NTVmOWIwHhcNMjYwNzAyMTUxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzFhMDhkZWQ5YzRmNWE2MjgwMzhiZmU2NGIyYWZmMjJmYzE0MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81LUE5QnxlAoyNcb0kKIeXNQWcq0
zaZ0y2ihhJ9mTA489okPJnniD1XMn0tP5kbfH0CI2+P1TLCMKKS8vpogOdWTriu0
m6zPoNMchyApN399s2UeQ/Gu8V+6eK6o3CEnXTjMeqgzHUP3TFNTY5um4fkGjGKH
V8KZ5SDr8TdT0si7PBNN3V3j8oI6iOGPU3f1nb0MbqRNwtf2aiML8Eh8aDlWKRX9
C877bbfFb3PId/+RFIQG0gNQ2+0yX7EsAT9WDVtod+suzIWAGuO0ZYdC1qsww2GO
R7+letWK1saQe8lCPCvotYV2ftn+gw4hsrEuNbqkvNrXdMwPzEG3L2/ByQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMaCN7ZxPWmKAOL/mSyr/IvwUMeMB8GA1UdIwQY
MBaAFI+5cq8LYQFHnB1GGZEoeKespV+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdseXJ3dGhBVWVjSFVZWmtTaDRwNnlsWDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAt
OGY5NWI4NTI0YzM1LzEva3hvSTN0bkU5YVlvQTR2LVpMS3Y4aV9CUXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAtOGY5NWI4NTI0YzM1
LzEvajdseXJ3dGhBVWVjSFVZWmtTaDRwNnlsWDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjpsMA0G
CSqGSIb3DQEBCwUAA4IBAQCX5Cb9WmzIRyRW9s9pHJCBaT4LY4L7Nq4u5tAe8zJw
WgffjypPJyEkEbGPXumpcPCZfUpFE4SIAW277byksCYpyRJlz7O3DAsFmRHgwYwV
M2t5SkaYDWsZoLhXcSkcqAIOAIEdV1M1VuElH7I46VMptka1tmtatARXzt0nHByz
hEukjZC20PvojV0qmA8BNx5k2NLUDvfpEiUk221pEgaF9An9cqgze54JChSahn0v
96FOzutr9GP0H0erKiOrk7FBlZK37YZpCwN0IoVsDItpOrNh8CKpIwtFJIOuBis/
3UPKaqYd1VjNW2guzWXT8si+QcCjhRatwSQMMyfjrhY2
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:00 2026 by rpki-client