Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kEvfbzSNT_l5WrXv8AjTmOASXQs.roa
File: kEvfbzSNT_l5WrXv8AjTmOASXQs.roa (raw, json)
Hash identifier: l7Uv2aL/dQUZsnULhg2REGKJKcZCjkJ52zvTw5WvWBw=
Subject key identifier: 90:4B:DF:6F:34:8D:4F:F9:79:5A:B5:EF:F0:08:D3:98:E0:12:5D:0B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D999B8CA032B8E49AB22CF2AE9220F852
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kEvfbzSNT_l5WrXv8AjTmOASXQs.roa
Signing time: Fri 17 Apr 2026 04:03:21 +0000
ROA not before: Fri 17 Apr 2026 04:03:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:9b:8c:a0:32:b8:e4:9a:b2:2c:f2:ae:92:20:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 17 04:03:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=904bdf6f348d4ff9795ab5eff008d398e0125d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:90:e2:f0:22:53:1a:fd:c9:05:bc:fe:8b:c2:
58:20:68:d7:67:d0:c0:4f:42:37:7e:db:1c:fa:8b:
cb:14:d2:b4:92:1c:40:e1:55:ac:d8:43:13:8e:b9:
e6:7b:58:7e:df:d1:1d:d1:ae:7e:7d:73:bc:b4:cd:
ce:db:7d:ef:4c:fa:20:b7:7d:ff:2d:e6:70:1b:9a:
c5:86:8b:da:b1:50:5e:a4:02:da:89:93:c6:a0:f3:
27:87:31:4f:b5:d2:5c:31:70:ec:ee:7e:24:0c:1d:
1a:d8:32:80:26:d2:97:de:49:88:81:a4:ad:b8:64:
3e:c2:49:72:a3:f5:0e:03:65:d0:68:91:7b:11:27:
12:6b:27:f9:20:50:d2:bc:4e:3a:24:cd:a1:4f:4b:
41:a8:f9:87:9b:21:2a:98:5c:41:e9:58:04:7f:eb:
0e:18:84:72:38:f6:db:af:01:20:15:b4:eb:13:06:
62:83:0d:e8:3d:d5:61:a2:a9:2b:31:63:5a:5c:4a:
5e:7c:fc:14:68:ad:fc:09:2c:69:56:e1:96:b3:e0:
71:fe:de:90:9b:90:19:19:8c:0c:94:d6:ed:7d:c6:
27:d2:35:4d:98:4d:36:ff:91:88:7c:06:04:29:0a:
b8:52:ce:a5:9a:44:a7:f8:a4:92:85:b0:ad:1a:f8:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:DF:6F:34:8D:4F:F9:79:5A:B5:EF:F0:08:D3:98:E0:12:5D:0B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kEvfbzSNT_l5WrXv8AjTmOASXQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b8:75:9d:1c:31:46:cc:6b:89:fd:15:88:b6:d8:7f:78:32:
4b:60:f9:a4:a8:11:6c:2f:57:78:3f:0e:24:93:89:ad:5e:d8:
c9:ab:01:99:56:84:34:02:0f:28:a3:64:1e:62:83:e7:29:c8:
25:54:b2:d0:d5:52:6a:c7:2b:77:7b:d5:2e:08:e4:46:f3:6d:
ce:3e:ba:b7:cc:2f:63:36:bd:54:7f:80:80:a3:a4:e4:74:53:
d3:ed:a2:6a:8a:48:59:ab:ef:0b:73:da:85:55:8e:75:10:5e:
b4:24:dc:11:de:32:ba:b6:13:08:24:bd:ad:5f:d3:fa:7b:12:
2e:8d:64:63:1f:95:21:09:2e:45:45:62:c5:1c:0c:01:e9:70:
32:26:0f:0c:87:9a:7f:38:d2:34:4b:00:0e:ef:d8:ed:17:03:
10:7f:bb:8a:80:27:35:ce:a1:9b:2f:00:1f:d3:ea:f3:10:e6:
bf:d9:14:2e:df:99:ca:25:86:88:42:a1:d6:b4:bc:9b:d7:54:
c3:04:df:6e:57:bf:21:8f:c6:50:15:91:e5:5c:ae:28:8f:e5:
bf:d8:1d:74:3e:7d:04:93:6d:64:24:8f:1f:aa:05:16:69:cd:
f2:9e:0d:15:56:90:51:ed:bb:95:f3:0e:2d:9f:96:97:61:b2:
7a:50:c7:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2Zm4ygMrjkmrIs8q6SIPhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDE3MDQwMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDRiZGY2ZjM0OGQ0ZmY5Nzk1YWI1ZWZmMDA4ZDM5OGUwMTI1ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55Di8CJTGv3JBbz+i8JYIGjXZ9DA
T0I3ftsc+ovLFNK0khxA4VWs2EMTjrnme1h+39Ed0a5+fXO8tM3O233vTPogt33/
LeZwG5rFhovasVBepALaiZPGoPMnhzFPtdJcMXDs7n4kDB0a2DKAJtKX3kmIgaSt
uGQ+wklyo/UOA2XQaJF7EScSayf5IFDSvE46JM2hT0tBqPmHmyEqmFxB6VgEf+sO
GIRyOPbbrwEgFbTrEwZigw3oPdVhoqkrMWNaXEpefPwUaK38CSxpVuGWs+Bx/t6Q
m5AZGYwMlNbtfcYn0jVNmE02/5GIfAYEKQq4Us6lmkSn+KSShbCtGvg1dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJBL3280jU/5eVq17/AI05jgEl0LMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEva0V2ZmJ6U05UX2w1V3JYdjhBalRtT0FTWFFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UWmMA0G
CSqGSIb3DQEBCwUAA4IBAQAjuHWdHDFGzGuJ/RWItth/eDJLYPmkqBFsL1d4Pw4k
k4mtXtjJqwGZVoQ0Ag8oo2QeYoPnKcglVLLQ1VJqxyt3e9UuCORG823OPrq3zC9j
Nr1Uf4CAo6TkdFPT7aJqikhZq+8Lc9qFVY51EF60JNwR3jK6thMIJL2tX9P6exIu
jWRjH5UhCS5FRWLFHAwB6XAyJg8Mh5p/ONI0SwAO79jtFwMQf7uKgCc1zqGbLwAf
0+rzEOa/2RQu35nKJYaIQqHWtLyb11TDBN9uV78hj8ZQFZHlXK4oj+W/2B10Pn0E
k21kJI8fqgUWac3yng0VVpBR7buV8w4tn5aXYbJ6UMeM
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:44 2026 by rpki-client