Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/KUG1dAS56WFyM7HpXaZJm_9NZcI.roa
File: KUG1dAS56WFyM7HpXaZJm_9NZcI.roa (raw, json)
Hash identifier: bDHk7s2ypHa/VmIhy+huenZ6Yha/61UKd4WW960McEc=
Subject key identifier: 29:41:B5:74:04:B9:E9:61:72:33:B1:E9:5D:A6:49:9B:FF:4D:65:C2
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019F2CBCE28FCE2AAF2E1884097F4686DBA0
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/KUG1dAS56WFyM7HpXaZJm_9NZcI.roa
Signing time: Sat 04 Jul 2026 10:46:43 +0000
ROA not before: Sat 04 Jul 2026 10:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 87.236.208.0/24 maxlen: 24
2a03:9381:a::/48 maxlen: 48
2a03:9381:b::/48 maxlen: 48
2a03:9381:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2c:bc:e2:8f:ce:2a:af:2e:18:84:09:7f:46:86:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jul 4 10:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2941b57404b9e9617233b1e95da6499bff4d65c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:da:91:c4:d3:d3:2d:fb:a0:ce:23:cc:4d:
04:12:f7:e0:21:db:53:e2:6c:a8:82:8f:8f:fb:b3:
ad:9d:11:2a:f9:bf:1f:68:c5:70:db:d6:36:3f:51:
ee:68:08:e0:36:9c:30:8b:72:0e:6e:32:a6:13:5c:
4f:06:bb:10:5e:67:fc:b8:43:a0:01:e6:29:54:49:
77:2a:63:0a:b7:bb:1d:ff:83:d5:85:e4:36:b2:21:
72:6d:9f:e5:1b:30:d3:f3:cb:56:fd:9c:8e:1f:74:
19:da:7c:33:17:cf:e6:fa:3e:07:70:fa:19:de:90:
de:1f:2b:6e:8d:7b:24:a4:94:67:2c:f4:f9:7e:e8:
11:f7:96:6e:d3:01:8a:1f:77:b9:fb:de:7e:09:ef:
00:47:18:41:f7:4b:7e:08:69:bc:14:ba:ef:2f:5c:
11:a2:36:46:0d:6b:9c:ac:74:1f:4e:c0:9e:b9:5d:
c3:8a:c9:53:e9:32:a4:7e:32:10:bb:fa:f3:4e:d2:
11:14:b7:1b:aa:35:08:f6:24:7b:44:ad:70:76:33:
d8:47:61:22:85:01:0c:be:63:ac:97:e4:bc:89:03:
05:a3:25:b7:52:01:5b:98:97:16:13:c5:97:14:c0:
8d:cf:1d:1b:0f:21:cf:16:d5:2e:fa:19:10:38:41:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:B5:74:04:B9:E9:61:72:33:B1:E9:5D:A6:49:9B:FF:4D:65:C2
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/KUG1dAS56WFyM7HpXaZJm_9NZcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.208.0/24
IPv6:
2a03:9381:a::-2a03:9381:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
45:74:c4:06:52:26:7d:32:09:7c:fa:83:38:a0:1e:62:84:02:
63:81:c5:c5:42:1f:cd:f7:2c:f5:a3:d2:d9:9d:db:c7:9f:18:
c3:5f:30:78:66:d3:ff:c9:43:ee:ee:82:54:e5:6d:8c:8c:52:
93:fa:a9:cd:c9:30:e0:98:23:32:12:e8:4c:a8:57:62:61:7c:
87:d8:67:6a:38:83:b7:2f:91:36:07:32:de:d5:5f:9a:b1:2a:
47:98:56:91:7a:5e:55:61:f7:ff:fd:eb:a2:a5:42:d2:a2:bb:
94:70:d9:72:5b:83:84:4a:05:5d:d2:b5:3f:07:60:fc:ea:29:
7e:83:2d:c6:c0:d1:a1:16:8a:50:b8:ed:ef:01:22:e3:0b:ba:
5a:e6:7c:34:0a:29:16:8b:d5:1d:fc:d9:a7:d8:b5:eb:21:18:
a7:85:68:dc:4e:0d:89:9f:94:11:3b:c7:8f:02:cc:ab:1a:df:
4e:bd:cc:c9:40:5c:74:22:a0:1c:f4:b4:4d:bd:eb:b4:4b:53:
ad:2d:54:3e:cc:f2:64:55:73:7d:75:39:ab:cf:65:2e:af:70:
6f:b7:f4:c2:db:ad:49:a1:16:61:20:61:c3:ac:53:3e:fe:3e:
80:55:18:0c:f4:9d:1b:a1:28:9d:43:0a:db:88:7e:39:22:d2:
04:18:7a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:13 2026 by rpki-client