Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/KIRVZPyCZmLust4zZhdvJfaZC0U.roa
File: KIRVZPyCZmLust4zZhdvJfaZC0U.roa (raw, json)
Hash identifier: X4ylFOU1H68bth1hTWJOCId1OimHsrnAUxe6aJ7+Fpg=
Subject key identifier: 28:84:55:64:FC:82:66:62:EE:B2:DE:33:66:17:6F:25:F6:99:0B:45
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 01A18CCEF30D084F60187576D99D83C66872
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/KIRVZPyCZmLust4zZhdvJfaZC0U.roa
Signing time: Fri 30 Oct 2026 12:35:35 +0000
ROA not before: Fri 30 Oct 2026 12:35:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198024
IP address blocks: 193.56.196.0/23 maxlen: 23
193.56.198.0/23 maxlen: 23
193.56.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:ce:f3:0d:08:4f:60:18:75:76:d9:9d:83:c6:68:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Oct 30 12:35:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28845564fc826662eeb2de3366176f25f6990b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:3e:ea:a0:03:61:b4:1f:ce:c1:d0:2f:bd:
62:1e:4c:a1:96:bd:67:ed:49:88:4c:da:0b:12:44:
fb:51:2d:45:ab:2f:a3:3f:3d:89:2b:f0:fa:06:3e:
a3:61:72:b2:a5:f7:5a:1d:db:aa:af:b7:be:ae:fa:
cc:db:b2:37:21:85:5d:81:f9:48:b2:e4:56:24:df:
c0:f7:bd:2b:21:18:67:5a:2c:cf:65:9c:53:9b:42:
a1:f2:65:13:81:4a:95:bf:9d:c0:8b:61:71:ce:b4:
7d:e0:f1:ad:e3:fb:5c:f6:a9:c2:6a:08:8c:27:af:
0d:f0:ce:65:cb:26:73:d4:51:68:0a:bc:16:76:ed:
a9:ab:cf:8c:70:38:02:56:3e:71:55:42:68:20:8a:
47:54:14:45:4d:15:d7:30:b0:fc:9a:83:7f:91:32:
36:46:a1:ff:fb:7f:ab:d9:42:98:ce:79:f8:c1:ce:
eb:87:11:2b:3c:3f:f7:3e:31:f4:85:6f:4d:ed:d7:
45:ad:3a:9d:85:a9:46:20:b2:d5:88:68:a2:91:8d:
55:f9:f8:f3:2c:3d:19:bc:0d:2e:1e:62:b2:05:56:
7a:f6:07:29:f0:11:55:5c:8c:27:2f:44:44:3d:13:
5d:2c:9e:91:4d:7f:9e:c8:57:42:a8:40:2f:60:b8:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:84:55:64:FC:82:66:62:EE:B2:DE:33:66:17:6F:25:F6:99:0B:45
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/KIRVZPyCZmLust4zZhdvJfaZC0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:2f:65:8b:ab:af:d7:e9:98:75:5a:11:10:6d:bc:3b:cd:05:
04:d5:b2:a2:35:89:73:d6:c0:fa:b6:7c:c7:db:f9:d8:76:9e:
48:3d:e3:1b:94:cf:7c:15:39:d1:7a:2e:a8:ad:6b:d6:d1:d9:
ff:2c:24:9d:b1:78:a8:c1:d9:13:1d:87:1c:fa:27:b4:7e:a7:
ba:19:5c:a6:59:1a:ae:8f:a5:bb:4a:09:57:7f:32:ff:06:71:
f9:96:5d:78:26:b7:39:cd:49:51:2c:8e:0f:2e:9b:5e:ce:7c:
2d:b3:ec:06:d6:da:0e:10:78:bc:fb:70:f2:a8:b7:a3:ed:cf:
f9:dd:84:54:e4:5b:ca:9a:72:85:dc:4f:f7:bf:bd:98:e3:7c:
4d:67:4a:45:29:a3:ad:60:74:9b:e6:3a:65:2a:0f:84:0b:2e:
ae:79:3e:ab:37:c2:cd:58:f5:65:07:6f:23:0c:69:70:b6:b0:
33:5d:18:38:8c:93:5f:8a:0c:16:17:86:88:1b:26:4b:25:28:
03:01:cf:84:8f:a7:83:36:b9:de:d3:ac:15:f4:06:8c:c6:99:
d4:46:db:5e:cd:b5:90:e3:20:d7:7a:c9:76:00:97:0c:db:46:
18:73:21:4b:2e:63:b5:85:20:e0:0f:c7:a5:2f:ae:43:71:9e:
57:d7:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 23:58:13 2026 by rpki-client