Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa
File: KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa (raw, json)
Hash identifier: XSPZXPjtWmH3tsooKgIJCC9hK4ebdbO48OGaE0GPJDQ=
Subject key identifier: 28:21:B6:8E:17:43:59:CF:5B:39:40:C0:B9:56:09:0F:03:C0:FC:83
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 019F236886502DB9B06C49DB3A7B196BB715
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206786
IP address blocks: 45.86.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:86:50:2d:b9:b0:6c:49:db:3a:7b:19:6b:b7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2821b68e174359cf5b3940c0b956090f03c0fc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:8f:4b:49:55:19:9f:fc:03:8a:58:cf:ff:
b8:3a:bf:eb:54:83:aa:a1:6d:d4:76:9e:e0:2c:9b:
d5:79:3c:27:8b:d1:72:3a:a0:47:79:ed:e5:8f:9f:
a1:3c:27:18:90:b0:65:40:df:24:8f:a9:0f:a3:94:
9f:b7:47:e3:07:a9:30:74:50:37:d3:bd:63:47:cf:
ae:8f:59:26:b3:85:e4:28:9d:b5:2a:0a:a7:4f:f9:
3f:30:7d:4a:a7:94:12:ca:cc:6b:06:8a:6c:c2:36:
26:1b:63:2d:06:17:61:d9:27:92:27:f5:30:0b:0b:
01:3a:0a:9f:25:54:8e:e5:85:33:11:2d:62:aa:5f:
a9:c6:eb:e6:53:54:12:fb:7b:7c:7a:64:24:e3:bd:
e5:67:c0:e0:28:16:d6:76:77:f0:6b:e6:31:f7:80:
f9:97:05:7a:af:50:ca:57:fa:0f:9c:3c:60:85:37:
11:d3:92:cd:03:1a:6c:cf:26:75:98:5f:a1:8a:e8:
ab:4c:4d:a2:11:3f:55:d0:36:28:f6:c7:51:12:2a:
15:8a:9a:6f:5b:e3:ad:63:bd:34:6f:79:98:23:eb:
6c:62:b8:83:f2:fd:7a:19:f3:b7:20:09:65:8e:c3:
0e:6e:a9:4c:65:d6:14:e3:08:9e:8f:cb:94:7a:e4:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:21:B6:8E:17:43:59:CF:5B:39:40:C0:B9:56:09:0F:03:C0:FC:83
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.34.0/24
Signature Algorithm: sha256WithRSAEncryption
94:57:ad:b8:a1:46:a9:75:30:5e:a8:29:c6:a0:cc:54:a3:4d:
ea:0c:ae:14:4a:cc:0c:39:31:86:62:5f:69:d9:e0:ee:54:fe:
5e:4d:a6:9f:3e:39:41:8a:0a:e6:27:31:1a:9f:46:6e:f4:0e:
59:89:76:5c:43:77:55:ac:25:0b:01:fd:e1:47:9b:04:14:00:
4e:3a:5b:fe:1c:fd:59:07:31:d7:e7:5b:0e:9a:b5:9c:3f:09:
15:ca:94:8b:99:82:c5:14:ae:8e:17:eb:4e:c8:68:34:eb:3e:
96:a6:3a:83:25:3e:3c:b6:ba:a3:b4:4e:bc:43:28:4c:be:dd:
be:ee:3c:14:83:ec:ed:c0:ab:22:67:4e:ca:0a:3e:a7:44:08:
ec:d4:74:3a:be:96:81:fb:f4:1d:bb:dc:12:27:c6:5d:23:fd:
6a:79:81:0b:3a:80:48:0c:22:41:00:eb:f8:82:e4:fb:98:ed:
2b:36:27:61:e2:d3:63:24:3e:c2:61:31:fe:86:f1:96:ff:7f:
71:f1:70:8d:2c:8e:b3:58:08:82:47:fa:21:53:1b:4d:e8:93:
13:2c:96:a0:b0:f2:70:4f:0c:9a:f8:8e:b3:dc:e5:d3:50:63:
dd:e5:8d:5a:94:ba:f2:37:9e:bc:46:c6:a0:b5:9c:19:67:70:
ef:ca:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:42:54 2026 by rpki-client