Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/KpBUeLUehx37-G7wc65xLDd7D1o.roa
File: KpBUeLUehx37-G7wc65xLDd7D1o.roa (raw, json)
Hash identifier: 1bXTS2IeX5yHjmO70XE2P5YQwQgs6/gjAu5CE7AyyxM=
Subject key identifier: 2A:90:54:78:B5:1E:87:1D:FB:F8:6E:F0:73:AE:71:2C:37:7B:0F:5A
Certificate issuer: /CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Certificate serial: 019F23690F021972EBA06D7F60C3F3C6BB45
Authority key identifier: DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/KpBUeLUehx37-G7wc65xLDd7D1o.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60611
IP address blocks: 185.15.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0f:02:19:72:eb:a0:6d:7f:60:c3:f3:c6:bb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a905478b51e871dfbf86ef073ae712c377b0f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:e5:44:9b:4d:8f:5d:ed:65:8a:56:14:cf:
f2:df:a4:6d:0f:17:03:3e:09:9f:88:3f:62:d0:54:
22:4f:43:1c:3f:32:19:11:b1:c5:3b:2e:fd:37:bf:
df:37:76:14:2a:a9:78:80:e6:5f:24:91:6d:db:a4:
d8:23:46:64:fd:80:10:26:57:17:93:32:6d:d9:46:
c2:53:a3:1e:5f:79:60:88:00:a3:36:fc:ff:5f:48:
86:ce:55:d9:69:a1:8d:32:a3:45:57:24:b8:cc:61:
5e:97:ca:c4:5a:2a:bc:bf:2f:39:fb:c4:e5:d4:9a:
2d:29:ee:0e:5f:5b:ba:e2:0c:03:b3:a0:9f:34:7b:
0a:7f:5c:93:87:40:89:8f:5e:26:23:80:7e:0c:8b:
1f:64:27:3f:7f:e7:8b:d5:ca:62:03:02:97:89:d1:
26:4f:aa:d3:8c:8d:7b:7a:44:9f:7c:62:29:14:19:
1b:98:0e:e7:33:19:e7:19:02:da:ac:0d:4b:f6:e7:
9d:62:ba:a9:14:ce:7f:88:69:8c:cf:d4:83:26:95:
b1:46:1d:25:87:32:62:8a:ed:aa:9e:61:82:db:14:
c3:6e:8a:c1:1e:45:f2:6d:78:2c:7b:35:d2:2f:1a:
54:45:19:6c:88:8b:9a:b4:a7:62:90:04:7d:fc:a6:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:54:78:B5:1E:87:1D:FB:F8:6E:F0:73:AE:71:2C:37:7B:0F:5A
X509v3 Authority Key Identifier:
keyid:DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/KpBUeLUehx37-G7wc65xLDd7D1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.157.0/24
Signature Algorithm: sha256WithRSAEncryption
34:62:0c:dc:f9:1f:63:1a:6c:db:77:92:4e:60:e7:7b:25:2a:
e5:33:5f:2b:68:f0:e3:66:84:e6:d6:f4:0d:35:37:36:5e:df:
47:e7:f6:d5:b2:5c:31:c9:0b:1e:96:44:c8:33:8b:a9:70:fb:
a2:00:7c:9d:84:18:87:b2:a9:7f:45:0a:9f:b4:2f:b7:51:28:
b9:11:38:86:bd:d1:4f:4e:dd:04:e2:ab:bd:2c:b5:95:23:7b:
22:81:bc:98:f9:ff:05:df:92:36:b7:79:3b:b6:30:c5:f0:95:
7c:7f:84:df:aa:e8:7a:90:fb:63:75:69:d5:16:dd:fc:e2:b6:
c3:58:48:a8:11:3e:d6:cd:d5:25:6c:da:46:db:b9:46:98:a8:
0e:c5:7b:69:37:5a:f1:fa:6a:a8:eb:0b:40:bc:13:ec:7b:d3:
c8:83:31:06:54:b2:30:f3:4c:8d:20:47:b2:4f:ed:fc:30:04:
23:23:4b:32:40:84:d8:05:cf:70:fb:b3:20:52:4d:2a:59:dd:
bc:47:e8:77:2a:ee:57:97:77:21:27:b8:8e:f5:bb:98:9c:0d:
de:2c:35:ee:0e:2d:5f:88:70:46:d3:8f:44:cc:10:ed:22:dc:
97:20:e8:50:77:09:38:52:51:9b:61:48:bc:0f:24:c8:a0:7c:
81:cc:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:36 2026 by rpki-client