Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/kWyXBWjveVIBD274IP6i2S9A5WM.roa
File: kWyXBWjveVIBD274IP6i2S9A5WM.roa (raw, json)
Hash identifier: UoPeRMZqRLh+CIxXNiVoDISvNXjjlQGF+QNTNPN07As=
Subject key identifier: 91:6C:97:05:68:EF:79:52:01:0F:6E:F8:20:FE:A2:D9:2F:40:E5:63
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019D770F89A71D0416820DC4E724127C99B1
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/kWyXBWjveVIBD274IP6i2S9A5WM.roa
Signing time: Fri 10 Apr 2026 11:03:20 +0000
ROA not before: Fri 10 Apr 2026 11:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 86.110.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:0f:89:a7:1d:04:16:82:0d:c4:e7:24:12:7c:99:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 10 11:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=916c970568ef7952010f6ef820fea2d92f40e563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:8a:16:cb:d2:82:09:72:b2:b0:1f:2b:34:
55:73:33:21:e1:2b:65:a6:a4:58:60:2d:55:51:7d:
3e:bb:4e:fc:8c:03:77:f5:bd:1b:48:14:50:51:ac:
81:ec:4f:50:d4:fa:e5:84:80:52:ea:54:58:36:b8:
51:e2:95:3a:e1:63:50:5c:65:00:9e:06:86:ff:9c:
a8:6d:0c:73:89:d7:d2:7d:3f:79:b2:9b:b0:fb:b9:
a8:9e:0e:cf:a4:dd:73:0e:71:1d:e7:42:6f:b3:26:
7b:bc:19:b8:c3:21:ce:3d:25:65:d5:fb:f6:2e:a7:
7d:ef:46:15:f8:dc:31:4c:e1:b6:1f:c3:a0:10:5d:
45:48:e7:e5:e3:57:f8:05:8a:7f:7f:8e:62:b7:f6:
a1:f4:06:e3:b8:e8:02:e9:ec:53:93:38:d7:62:c8:
37:ec:71:34:2e:5c:0b:c4:58:01:fb:50:12:1c:a5:
a8:3a:f4:47:94:af:23:14:1f:66:24:b8:30:49:4a:
a6:0d:a8:f3:2f:74:78:2b:10:dd:e8:60:39:a4:42:
9b:91:9e:27:7b:c6:2e:32:2e:32:67:e1:6c:01:2b:
4f:78:15:b7:99:6d:f8:56:75:b5:39:df:19:11:f6:
04:2d:85:f1:b8:8a:fc:6e:1b:3e:d2:56:fd:64:62:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:97:05:68:EF:79:52:01:0F:6E:F8:20:FE:A2:D9:2F:40:E5:63
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/kWyXBWjveVIBD274IP6i2S9A5WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1b:f6:6d:44:0a:77:52:84:6a:e0:bb:e3:72:4d:df:3c:8d:
ae:69:28:bb:80:e0:e2:d2:1c:80:3a:9b:2e:9e:39:67:01:d2:
19:86:6d:9d:8c:e6:9d:4f:66:a8:34:41:d3:a5:d4:1d:5b:08:
bd:15:78:2b:ba:e1:e2:f0:5d:a4:17:8d:86:3d:75:e5:d1:e3:
61:66:c8:1a:34:01:da:1d:2b:95:d2:0c:39:f4:54:4b:f4:b4:
65:16:88:de:55:dc:10:42:ef:5a:c3:c2:31:06:7c:4d:2a:b2:
19:b5:a7:e8:0b:c7:57:43:d4:af:27:04:d5:2a:1a:44:e1:ba:
e9:1a:c7:3f:1c:ad:33:bc:4d:6f:36:e6:32:49:d5:b3:df:64:
0a:e7:d8:51:7f:99:70:b2:71:93:49:55:fd:d2:b7:73:0f:cc:
c9:d1:7f:c7:3b:17:31:49:09:95:3c:d4:e7:f7:ac:d8:06:dd:
02:6e:a8:be:6c:18:70:7c:5a:6a:f2:84:22:4c:b4:6b:37:0b:
6c:69:93:ad:dc:7c:d0:c6:15:e6:2a:6b:a5:20:bd:e6:78:03:
9d:d5:82:1a:9d:13:cd:cc:b8:3e:9b:8e:f7:7a:67:c1:81:c6:
eb:61:74:02:4b:66:0b:e6:db:91:31:dc:fa:a8:ef:e8:0d:01:
99:76:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:19 2026 by rpki-client