Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/kRBcjPovwckFGvli-IlLbLa4Jzk.roa
File: kRBcjPovwckFGvli-IlLbLa4Jzk.roa (raw, json)
Hash identifier: zfiv+IwQvlYYccMw7H/uKZZUf4nB+1y4tHOiyoJr35I=
Subject key identifier: 91:10:5C:8C:FA:2F:C1:C9:05:1A:F9:62:F8:89:4B:6C:B6:B8:27:39
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019F69A287714F19ACD65952BEC336A01DDA
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/kRBcjPovwckFGvli-IlLbLa4Jzk.roa
Signing time: Thu 16 Jul 2026 06:34:46 +0000
ROA not before: Thu 16 Jul 2026 06:34:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200220
IP address blocks: 63.251.122.0/24 maxlen: 24
162.248.162.0/24 maxlen: 32
194.154.28.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:a2:87:71:4f:19:ac:d6:59:52:be:c3:36:a0:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jul 16 06:34:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91105c8cfa2fc1c9051af962f8894b6cb6b82739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:32:47:59:d2:e2:c4:aa:11:da:57:b6:1f:
38:cd:3c:02:fd:da:c8:68:c6:55:8f:a0:58:72:56:
b2:7f:99:69:f9:ac:89:d7:46:65:57:3f:a2:ab:b3:
0b:c6:6d:9d:b6:8a:48:73:4a:4e:47:54:de:94:46:
c8:d4:cd:db:53:ce:99:ce:ec:57:b3:9c:a6:ac:98:
54:de:b9:53:fa:2a:60:1b:6d:9f:17:41:7a:3c:40:
a5:34:72:2d:76:f3:02:71:58:bc:0e:5f:c4:7f:53:
90:81:6e:c6:f6:03:86:a3:fd:72:e1:b1:5f:d5:53:
18:a4:57:fc:d8:7d:33:93:54:fb:76:b7:3a:0d:ed:
a2:2d:83:ef:01:17:33:a4:b0:00:0b:c0:6d:98:72:
37:e9:e6:3f:0e:33:5c:c5:e7:76:df:bf:1c:31:ff:
b5:2a:37:58:32:e4:c0:f7:e3:ba:d8:88:45:47:75:
b9:e0:fd:7d:a5:dd:78:ce:69:80:de:35:02:a0:d7:
79:20:eb:bc:67:cf:ea:9b:79:6a:de:66:6a:3d:8a:
a3:70:71:48:81:9c:1e:15:ba:c1:47:a8:ce:29:2c:
09:9c:a7:1a:51:86:0e:94:85:50:2b:1a:da:4c:38:
96:bd:c7:32:08:2e:59:44:dc:6f:87:71:e1:0f:48:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:5C:8C:FA:2F:C1:C9:05:1A:F9:62:F8:89:4B:6C:B6:B8:27:39
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/kRBcjPovwckFGvli-IlLbLa4Jzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.251.122.0/24
162.248.162.0/24
194.154.28.0/24
Signature Algorithm: sha256WithRSAEncryption
40:59:c6:87:bd:6b:1a:e6:f5:f8:83:61:ec:05:bb:41:d8:ec:
67:74:f2:e8:59:c7:0a:54:d3:8f:d4:c4:55:16:5f:a9:cf:90:
8b:ef:aa:0e:a7:ba:42:d2:17:90:77:11:7d:a6:c9:ac:05:bb:
39:ba:30:97:2f:07:0e:79:d1:2e:93:48:61:92:66:7b:16:e9:
06:db:4d:05:bb:1a:d6:16:96:a7:7d:96:d6:ac:d1:c1:bf:77:
63:b7:22:92:e1:ee:f1:d4:15:e8:8a:6f:9a:a1:0e:25:3f:64:
87:05:ad:62:fc:b3:00:ee:91:92:da:ac:13:60:2a:f7:22:3e:
d6:92:18:2a:cf:de:61:8a:e8:b0:21:70:93:d6:81:ab:f8:ef:
90:2c:72:50:c5:d4:01:f2:eb:8f:bd:8e:e8:74:43:18:c7:1a:
07:4d:e9:9a:c3:3b:03:17:77:7e:ff:eb:55:e8:1a:bf:9f:0f:
6e:b2:46:53:d6:c3:ce:dc:36:a6:70:4a:9a:d7:9c:6d:fe:dd:
22:16:bf:90:75:e4:ca:8e:f2:a5:f0:ae:84:d0:6b:93:79:20:
9b:75:bb:b5:ba:17:2b:1f:fd:23:5a:c2:86:8e:e7:cc:fc:69:
bd:65:58:60:d8:bc:49:40:ed:14:72:d2:ae:05:a2:b6:73:20:
6a:13:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:26 2026 by rpki-client