Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/kkBwqM6FKohBRjtSHy37ifNbbqU.roa
File: kkBwqM6FKohBRjtSHy37ifNbbqU.roa (raw, json)
Hash identifier: KLotQf93W8LLpw+t99ysaq1+3XO9F6oWK8lyix0qpLA=
Subject key identifier: 92:40:70:A8:CE:85:2A:88:41:46:3B:52:1F:2D:FB:89:F3:5B:6E:A5
Certificate issuer: /CN=0efad7551516f0c4d912da0313c995c9e714e09a
Certificate serial: 019F23682B1A896087010CEBBA30DBDE3827
Authority key identifier: 0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/kkBwqM6FKohBRjtSHy37ifNbbqU.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42336
IP address blocks: 89.45.84.0/22 maxlen: 24
185.39.228.0/22 maxlen: 24
2a01:4aa0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2b:1a:89:60:87:01:0c:eb:ba:30:db:de:38:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efad7551516f0c4d912da0313c995c9e714e09a
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=924070a8ce852a8841463b521f2dfb89f35b6ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:10:c1:44:0f:0f:e0:6c:2f:37:5b:2c:a3:de:
7f:19:df:f4:cc:f6:5a:37:f3:e6:60:e6:6d:43:d0:
eb:c8:2b:4e:1d:72:f2:cc:5e:2e:c0:71:8a:58:e3:
65:39:05:28:79:c8:8a:ae:6f:e4:23:30:ea:3f:13:
29:59:0a:94:01:0e:39:3e:b1:e8:95:69:d5:ba:56:
73:c7:08:7e:da:49:34:0d:08:19:d8:fa:3c:55:33:
86:c9:60:6a:80:a6:48:bf:6c:e2:d1:b7:57:96:0d:
a2:e2:5f:c4:b6:43:f3:b5:53:6e:a8:3e:26:f7:04:
a8:66:c2:a0:01:74:96:ee:e3:ab:a7:04:b4:41:ba:
4a:cb:fe:63:6a:90:17:ac:c9:7f:d5:c6:ee:c6:3a:
e0:5f:82:d8:ee:e4:01:45:26:32:6a:02:58:13:ff:
de:a2:15:37:29:e5:14:83:15:22:1e:e2:29:50:78:
98:5e:be:d5:82:35:aa:52:ee:d9:4a:b4:a6:ad:01:
46:73:b8:d5:e1:86:6a:de:35:c2:0f:1f:c5:6c:93:
e0:3d:8c:5a:fd:77:46:e1:3d:78:34:a7:e5:92:3d:
a5:47:c7:f1:3a:44:f0:49:cc:f6:19:4a:e3:16:a6:
41:a1:7a:fb:c4:08:94:8d:91:1e:b9:3e:d7:ad:61:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:40:70:A8:CE:85:2A:88:41:46:3B:52:1F:2D:FB:89:F3:5B:6E:A5
X509v3 Authority Key Identifier:
keyid:0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/kkBwqM6FKohBRjtSHy37ifNbbqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.84.0/22
185.39.228.0/22
IPv6:
2a01:4aa0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:c4:22:46:8f:bf:15:3e:c3:c3:cf:94:9e:1b:80:c9:6a:2f:
b5:7d:a7:2f:bd:ef:9e:30:15:fe:f9:87:ad:1c:92:04:f0:33:
6e:02:7a:0f:af:b9:16:c1:dc:64:7f:b0:bb:c2:f7:28:07:3e:
42:17:89:2b:d9:b3:b7:a1:8e:9b:dd:68:3d:f9:d6:bd:49:91:
17:55:0e:ec:22:85:6a:71:00:3a:c4:f2:1f:e1:e9:de:0c:cb:
ec:e3:80:73:ea:e6:8b:c8:22:ea:a9:b2:fe:c0:2a:d2:4b:c3:
ea:3e:b9:67:49:1d:d3:f8:83:44:33:a6:a1:be:45:ab:54:a1:
ed:ac:38:1a:07:df:2d:2b:67:27:cc:46:af:88:98:3c:a1:0e:
25:0a:f5:33:2e:33:03:84:3b:eb:c9:ea:7e:57:ac:c1:a7:c3:
6c:4b:2c:a1:22:22:88:6b:ac:47:4c:06:01:b2:3f:5a:c5:66:
9b:a6:11:07:16:af:8c:a5:b4:7a:33:44:7d:d6:7c:a9:df:d9:
fa:c4:02:e3:e4:70:34:23:53:ca:63:b3:94:2f:63:b4:c8:b4:
c2:9c:26:b9:95:86:a7:6c:fc:cf:01:a6:c9:16:db:fb:a4:04:
31:93:83:10:fd:19:a0:b8:5c:93:a1:09:78:37:97:b1:52:ae:
6b:1c:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 09:07:40 2026 by rpki-client