Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/kYP-N6kinjxADOPUDAI1mMqCiMo.roa
File: kYP-N6kinjxADOPUDAI1mMqCiMo.roa (raw, json)
Hash identifier: /T46dbhLvgDMiZ//AOgwguIuo5EQnnNikqQT0mHcCKA=
Subject key identifier: 91:83:FE:37:A9:22:9E:3C:40:0C:E3:D4:0C:02:35:98:CA:82:88:CA
Certificate issuer: /CN=e03f66dd7d1207449073e21e1a364828a1496b94
Certificate serial: 019F236923697B51BE5F17E72D51C3A32A3E
Authority key identifier: E0:3F:66:DD:7D:12:07:44:90:73:E2:1E:1A:36:48:28:A1:49:6B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/kYP-N6kinjxADOPUDAI1mMqCiMo.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204955
IP address blocks: 185.234.192.0/22 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:23:69:7b:51:be:5f:17:e7:2d:51:c3:a3:2a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f66dd7d1207449073e21e1a364828a1496b94
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9183fe37a9229e3c400ce3d40c023598ca8288ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:32:b1:0c:f5:9e:b2:59:62:5c:bc:13:74:
3f:9f:30:05:7e:92:4e:7d:69:45:89:5b:f7:6c:ef:
91:1b:4b:88:ce:25:fb:49:d2:be:2a:a2:95:6b:41:
c9:14:7d:98:63:0c:a3:76:b7:3d:83:ee:a1:3c:90:
7d:d4:61:1e:fe:90:b2:0e:8c:21:19:05:5d:28:14:
19:0d:a5:05:8d:0f:99:57:fa:cc:ea:44:07:bc:1d:
14:d5:48:00:a8:1f:05:9c:b8:d9:25:c3:5b:46:c1:
68:3d:eb:d6:22:34:5b:53:51:63:37:22:fc:15:17:
cc:8d:04:61:a8:30:c0:d5:96:5d:7a:8a:2f:18:42:
64:17:9e:f2:4d:58:5e:a2:9e:7c:a7:2a:8c:77:7c:
73:d5:58:69:ba:99:57:df:19:8d:f6:4f:16:1e:6c:
5a:5d:0d:62:10:d3:81:7a:ba:d5:36:1c:33:dc:da:
d5:2c:be:84:53:95:de:30:27:47:99:38:1e:1f:a6:
4c:04:2a:5f:56:c6:6f:79:4d:22:38:16:8b:fb:78:
90:56:00:3c:b5:ea:f0:04:73:1f:5f:75:27:56:c2:
08:9e:ae:da:02:41:50:3e:db:a7:64:aa:07:25:39:
a5:8c:12:60:16:31:17:b1:fd:84:7a:37:be:19:fc:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:83:FE:37:A9:22:9E:3C:40:0C:E3:D4:0C:02:35:98:CA:82:88:CA
X509v3 Authority Key Identifier:
keyid:E0:3F:66:DD:7D:12:07:44:90:73:E2:1E:1A:36:48:28:A1:49:6B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/kYP-N6kinjxADOPUDAI1mMqCiMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:49:77:63:ff:46:a6:3f:05:23:c3:a6:8d:af:14:f5:2f:a1:
57:72:d7:f7:d7:f4:1f:00:a4:1f:d4:01:d6:87:fa:04:1d:a0:
ff:31:e1:9c:1e:02:1a:b7:69:d2:c0:75:a0:27:48:55:00:ab:
63:4e:71:cd:6e:5b:7b:d5:38:91:d7:24:73:08:8a:08:bf:ff:
b6:44:ca:1c:0f:03:36:b9:b0:f6:75:2f:5b:ad:5d:71:e7:d9:
84:70:8d:95:95:00:20:1f:06:ff:6b:fa:c8:94:31:eb:d9:15:
76:3b:42:58:70:cc:2a:10:d6:15:ae:7e:ad:8f:55:af:f0:3d:
15:dc:63:95:c4:f0:f4:14:6d:ca:4e:6e:23:1d:8b:6e:dc:05:
79:5a:70:58:62:13:4d:cf:cf:9c:59:d4:3c:47:a4:06:68:bf:
1f:17:da:75:15:31:23:2c:31:93:4c:54:fc:a1:a0:8f:07:10:
c7:05:b1:b3:91:b1:3f:a8:67:22:0a:73:c9:9c:5f:9f:8f:d8:
ac:13:e0:53:cd:f6:5f:b6:44:21:a6:eb:d9:6a:46:71:69:3d:
49:a7:fe:97:87:e4:9d:71:84:74:14:3f:3a:c8:99:c0:92:25:
61:c3:57:39:34:7f:60:bd:e5:0b:01:6f:24:9b:5d:c5:b7:a2:
20:eb:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:06 2026 by rpki-client