Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/KRIPrMfF_pwkDJ36tS1Z9ALClmI.roa
File: KRIPrMfF_pwkDJ36tS1Z9ALClmI.roa (raw, json)
Hash identifier: imuv+blTMUmEZpqPOWhsJtoGrlHWzRuWpyfgDra+OYA=
Subject key identifier: 29:12:0F:AC:C7:C5:FE:9C:24:0C:9D:FA:B5:2D:59:F4:02:C2:96:62
Certificate issuer: /CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Certificate serial: 019F236911393205ADE541A1F451FC8E87A5
Authority key identifier: DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/KRIPrMfF_pwkDJ36tS1Z9ALClmI.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212172
IP address blocks: 217.23.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:11:39:32:05:ad:e5:41:a1:f4:51:fc:8e:87:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29120facc7c5fe9c240c9dfab52d59f402c29662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:ee:f3:86:f5:07:18:02:3b:39:dc:ff:44:
20:ed:ad:80:1c:4b:c9:0c:01:1d:35:92:a7:55:50:
eb:08:69:33:46:1c:77:db:dc:3a:b7:47:bc:19:35:
16:c7:eb:3a:e9:cb:31:82:46:8c:d4:71:ea:c3:7d:
d1:90:ed:19:d1:19:13:b7:6a:44:91:bb:b9:95:3b:
68:54:1b:1e:59:3f:89:ed:4d:ab:8f:0d:0d:83:20:
8d:02:c7:d5:56:44:b4:e4:14:bf:68:a1:64:30:e6:
72:73:bd:bd:a1:de:f3:74:3c:45:01:84:db:d8:ad:
d0:4b:8d:8b:85:dd:fd:e5:40:b5:8e:34:fe:ae:aa:
9f:7b:3d:02:31:3f:3c:0d:dc:b7:10:01:fb:35:d2:
83:85:93:8f:13:0a:b6:d4:f5:f1:52:14:a9:7a:ec:
cb:7c:37:0b:a1:40:37:f5:56:a0:87:df:75:1b:e0:
15:ba:00:90:25:ee:12:2f:53:81:9b:91:ac:f7:f3:
3f:2e:d9:79:d4:82:44:3a:9c:af:1d:1d:0e:93:9f:
17:42:b7:09:16:cb:e9:9c:5c:b1:02:c6:8b:7e:0b:
be:a6:b8:cc:e8:2f:b8:86:8c:1c:59:4a:29:7e:16:
3d:c4:6b:1d:f9:9a:9a:69:60:e8:86:19:64:07:ea:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:12:0F:AC:C7:C5:FE:9C:24:0C:9D:FA:B5:2D:59:F4:02:C2:96:62
X509v3 Authority Key Identifier:
keyid:DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/KRIPrMfF_pwkDJ36tS1Z9ALClmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.23.118.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1b:60:88:1d:a0:f0:c9:11:ee:5d:ff:8f:f1:f4:5f:87:fa:
48:5a:eb:5e:e7:1e:4d:8b:34:84:43:7e:a3:71:b8:c4:82:71:
5c:90:64:79:fa:68:1d:2f:04:ba:6c:6d:01:72:31:bc:32:bb:
6c:0a:f7:65:77:8e:38:b7:15:69:cd:0c:61:4a:b5:c1:dc:85:
de:bb:17:ad:0a:37:cf:18:5f:a9:b0:a2:b0:f1:ea:02:1d:30:
fd:f3:5a:56:38:e6:9b:05:27:d7:35:6f:a5:05:84:56:78:ae:
34:51:29:a6:9e:e2:f3:2b:c6:88:02:6e:39:13:9a:d4:4e:88:
96:c7:5d:68:59:07:09:aa:f6:62:05:c3:06:c8:51:2e:03:c0:
c8:d3:49:ee:ab:fa:b3:10:b7:8c:9b:d6:78:21:67:b4:8d:b6:
96:60:78:03:58:91:dc:fd:18:32:83:8f:0b:e7:5c:0d:3b:ad:
73:ca:2a:75:4b:7f:7d:8d:9f:1f:36:f1:07:b3:b6:60:f7:84:
5f:b7:b7:a9:59:72:c8:e1:c2:c0:10:c5:f1:29:65:88:2d:22:
97:ad:81:cb:80:af:5d:db:ef:3b:49:10:c3:a0:e5:8e:e2:cc:
21:73:da:3f:5f:61:da:e6:46:bb:53:62:83:c8:cf:82:cd:3f:
56:c8:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:27 2026 by rpki-client