Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/K_Rx1HTsMsKx4XSEFCWNMtmQzPo.roa
File: K_Rx1HTsMsKx4XSEFCWNMtmQzPo.roa (raw, json)
Hash identifier: 7n2J+fuoN6/SEGxvIM5HDvCu6NPZKIF/c2FabCDSRV4=
Subject key identifier: 2B:F4:71:D4:74:EC:32:C2:B1:E1:74:84:14:25:8D:32:D9:90:CC:FA
Certificate issuer: /CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Certificate serial: 019E9D023D8F8584335494A0D69A8455E38D
Authority key identifier: 23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/K_Rx1HTsMsKx4XSEFCWNMtmQzPo.roa
Signing time: Sat 06 Jun 2026 12:57:10 +0000
ROA not before: Sat 06 Jun 2026 12:57:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 185.43.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:02:3d:8f:85:84:33:54:94:a0:d6:9a:84:55:e3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Validity
Not Before: Jun 6 12:57:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bf471d474ec32c2b1e1748414258d32d990ccfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:c6:1e:7e:fb:dd:63:07:6a:a0:3c:24:85:
11:5e:dc:7e:63:2e:82:fd:31:6e:0a:11:3d:81:72:
f7:ab:8b:29:78:2f:57:ae:ef:57:72:93:1d:84:d3:
9f:f0:23:1d:cf:52:3d:1f:df:fe:64:a5:d7:aa:90:
f6:52:09:a6:a8:45:ab:aa:03:fe:64:b1:5d:5b:d4:
f2:a1:4a:78:96:7b:26:2c:c5:a0:b4:5b:c6:f9:af:
f8:d7:90:ae:85:0d:88:4a:88:bf:6c:1a:2b:cd:74:
52:57:bb:08:4a:8f:2c:51:7f:88:a2:a7:11:56:fb:
89:85:dd:8e:b6:c2:b0:ae:4a:bf:56:ff:e4:cc:e2:
3a:30:37:2f:5d:62:aa:c8:52:9e:22:14:e6:18:e9:
43:25:b9:92:cd:e2:1d:57:42:c0:39:e7:6b:05:94:
43:27:fd:e1:58:67:94:74:db:c1:08:df:f8:bf:0b:
59:d3:a9:70:54:d9:1b:e9:e3:f4:25:37:11:d9:9e:
5b:db:27:2b:99:11:2b:35:f8:37:47:4e:12:b1:ec:
6a:31:55:33:22:fb:7f:71:82:a4:54:84:82:61:ee:
e9:a3:64:f5:82:bd:c0:c7:fd:34:14:e3:3b:ed:cb:
55:b5:65:6e:dd:02:cd:de:dc:a1:55:c4:b9:7b:ff:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F4:71:D4:74:EC:32:C2:B1:E1:74:84:14:25:8D:32:D9:90:CC:FA
X509v3 Authority Key Identifier:
keyid:23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/K_Rx1HTsMsKx4XSEFCWNMtmQzPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.33.0/24
Signature Algorithm: sha256WithRSAEncryption
32:66:56:1f:08:dd:2f:6a:e7:49:57:c7:87:45:89:fc:cd:e0:
1f:47:a4:64:2d:7f:ae:68:cc:97:eb:8d:13:66:4f:9a:b3:c6:
45:13:7a:3a:57:06:8f:92:75:28:a3:09:2d:ff:6d:83:d3:78:
aa:c1:d9:83:c9:82:83:84:aa:a1:5b:f6:0a:4c:d8:03:6e:40:
d5:f6:49:e0:94:32:4e:77:73:39:1e:03:19:1e:eb:37:6c:6b:
5e:ac:cf:28:da:6e:88:85:c2:db:cd:2d:bc:5c:02:d0:28:6e:
ff:1c:ba:11:b5:e3:0c:bc:c9:23:08:5b:4e:a6:4c:f9:88:a8:
f1:a0:8a:7a:10:f9:6a:77:cb:bd:7c:1c:08:60:0f:e6:fb:e0:
d5:96:af:38:5e:5f:fd:8a:b6:a6:9c:1f:fa:3e:47:09:a1:be:
75:f3:4b:53:4f:50:af:45:3c:a6:2e:20:08:41:54:30:d1:e3:
b9:dd:87:c3:74:97:c5:cb:9f:75:e8:20:55:19:e2:06:24:86:
b5:a3:23:8f:98:d2:27:aa:6a:d9:d8:9a:06:b6:b2:cd:15:f6:
3b:3b:ad:e3:e4:22:fd:3a:89:62:0c:f6:2f:2d:55:8b:17:08:
5c:d3:31:ba:87:a7:32:ae:b5:9a:88:29:e2:b8:ba:06:f2:a6:
1d:94:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:14 2026 by rpki-client