Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/KJhzEQAWLMV6-n64J1IGurNPXJA.roa
File: KJhzEQAWLMV6-n64J1IGurNPXJA.roa (raw, json)
Hash identifier: CtHxiuCIKbij596MTURQ2oG9yHp4BtbuHJNvFD8eVFU=
Subject key identifier: 28:98:73:11:00:16:2C:C5:7A:FA:7E:B8:27:52:06:BA:B3:4F:5C:90
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 019F388BF48F85C62901859AFA8D825987B1
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/KJhzEQAWLMV6-n64J1IGurNPXJA.roa
Signing time: Mon 06 Jul 2026 17:48:43 +0000
ROA not before: Mon 06 Jul 2026 17:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202918
IP address blocks: 185.76.74.0/23 maxlen: 24
185.246.28.0/23 maxlen: 24
2a07:71c0::/29 maxlen: 48
2a0d:7380::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:8b:f4:8f:85:c6:29:01:85:9a:fa:8d:82:59:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jul 6 17:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2898731100162cc57afa7eb8275206bab34f5c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:89:32:9e:2b:5e:90:3b:9c:4d:a3:15:29:
73:59:33:de:86:5d:d3:75:ba:97:b9:1d:5e:ce:dc:
f5:28:d7:b6:a7:c9:75:30:fb:6d:d6:bd:64:87:8c:
18:59:70:b4:b1:a9:16:96:d0:c9:5d:0a:7a:5c:0f:
a2:07:7a:6d:82:2c:13:4f:57:00:dc:af:85:0d:3d:
24:c8:03:2a:66:a6:af:0b:6a:50:86:53:f6:9f:f8:
06:0d:92:56:1c:36:87:bf:09:01:a2:80:57:a7:26:
c4:a2:78:a9:4a:03:03:17:7c:e8:90:ec:5f:50:94:
4d:13:ab:17:b7:66:30:25:76:71:0f:fb:17:08:2f:
27:99:a6:7b:4a:df:5b:d0:0c:86:09:53:4a:01:ac:
d1:4f:65:30:32:58:0d:5e:4a:7b:c6:ff:05:0b:d9:
09:da:f1:5b:08:d8:1a:b4:65:07:8d:73:4e:3b:ac:
31:92:6c:66:82:6a:4a:17:cb:2c:22:65:0d:3c:a9:
8f:c2:9a:6e:3c:31:9d:af:73:83:49:0a:46:e3:fa:
e0:71:ba:59:4b:de:42:03:88:b0:fc:0c:0d:65:40:
df:95:a1:55:31:5e:7a:06:9b:e7:d5:cb:e2:17:4a:
5c:e6:e3:d0:ca:bc:a8:11:72:a2:50:94:98:df:9c:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:73:11:00:16:2C:C5:7A:FA:7E:B8:27:52:06:BA:B3:4F:5C:90
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/KJhzEQAWLMV6-n64J1IGurNPXJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.74.0/23
185.246.28.0/23
IPv6:
2a07:71c0::/29
2a0d:7380::/29
Signature Algorithm: sha256WithRSAEncryption
23:a1:c1:9a:71:ad:c6:ec:10:49:4e:46:ab:3c:90:20:75:43:
c3:0a:5d:05:9f:b2:1a:43:19:e9:c1:c6:fb:56:a6:cb:12:88:
ec:19:a7:12:55:bb:b8:d7:79:54:bc:de:2f:03:e2:16:a7:94:
95:33:61:9e:98:09:c9:de:81:04:51:1c:33:9e:16:80:77:88:
a0:47:08:92:66:4a:b3:1d:d1:09:bb:5e:0d:e9:7a:30:91:88:
13:c0:f0:99:44:95:e7:c6:0c:b2:aa:7a:dc:9f:e8:5c:5e:38:
71:43:6b:22:87:a0:6a:10:81:d4:29:92:0a:33:b5:21:c8:38:
d4:2d:d3:00:f2:ab:53:69:76:b8:49:ab:d9:a4:f8:fc:27:d3:
20:be:ea:3d:87:c3:6f:c3:13:8b:7d:6c:a0:7b:52:0c:d4:b2:
6d:49:41:0f:33:2d:d7:c1:54:fd:f2:c9:59:e0:93:8f:f1:53:
5a:e8:48:0a:48:a8:ca:66:e3:f9:20:82:d7:9b:be:d4:b0:ba:
39:0e:7e:49:8d:30:0e:7f:0a:69:3a:09:17:09:35:4e:fb:16:
18:f5:26:7d:f2:44:46:9a:a5:87:17:ec:23:db:a1:70:15:c4:
47:69:00:74:05:bf:de:61:fd:2a:1b:a2:f0:a1:72:85:01:c6:
74:e3:63:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ84i/SPhcYpAYWa+o2CWYexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjM5YzA4ZWFkOTRiYjA0ZmMzZTZiNGE2NWU2ZTFjN2Rj
ZjM4ZjQwHhcNMjYwNzA2MTc0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk4NzMxMTAwMTYyY2M1N2FmYTdlYjgyNzUyMDZiYWIzNGY1YzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWiJMp4rXpA7nE2jFSlzWTPehl3T
dbqXuR1eztz1KNe2p8l1MPtt1r1kh4wYWXC0sakWltDJXQp6XA+iB3ptgiwTT1cA
3K+FDT0kyAMqZqavC2pQhlP2n/gGDZJWHDaHvwkBooBXpybEonipSgMDF3zokOxf
UJRNE6sXt2YwJXZxD/sXCC8nmaZ7St9b0AyGCVNKAazRT2UwMlgNXkp7xv8FC9kJ
2vFbCNgatGUHjXNOO6wxkmxmgmpKF8ssImUNPKmPwppuPDGdr3ODSQpG4/rgcbpZ
S95CA4iw/AwNZUDflaFVMV56Bpvn1cviF0pc5uPQyryoEXKiUJSY35x/iwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCiYcxEAFizFevp+uCdSBrqzT1yQMB8GA1UdIwQY
MBaAFJ0jnAjq2UuwT8PmtKZebhx9zzj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wNjA4NTktNzcwNy00MTJhLTk4MTAt
ZGJiMjkzMWEwZjY0LzEvS0poekVRQVdMTVY2LW42NEoxSUd1ck5QWEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wNjA4NTktNzcwNy00MTJhLTk4MTAtZGJiMjkzMWEwZjY0
LzEvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQBuUxKAwQB
ufYcMBQEAgACMA4DBQMqB3HAAwUDKg1zgDANBgkqhkiG9w0BAQsFAAOCAQEAI6HB
mnGtxuwQSU5GqzyQIHVDwwpdBZ+yGkMZ6cHG+1amyxKI7BmnElW7uNd5VLzeLwPi
FqeUlTNhnpgJyd6BBFEcM54WgHeIoEcIkmZKsx3RCbteDel6MJGIE8DwmUSV58YM
sqp63J/oXF44cUNrIoegahCB1CmSCjO1Icg41C3TAPKrU2l2uEmr2aT4/CfTIL7q
PYfDb8MTi31soHtSDNSybUlBDzMt18FU/fLJWeCTj/FTWuhICkioymbj+SCC15u+
1LC6OQ5+SY0wDn8KaToJFwk1TvsWGPUmffJERpqlhxfsI9uhcBXER2kAdAW/3mH9
Khui8KFyhQHGdONjpQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:47 2026 by rpki-client