Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/KPYpBeEEXx6p-nfrZlZfY5O0QX8.roa
File: KPYpBeEEXx6p-nfrZlZfY5O0QX8.roa (raw, json)
Hash identifier: yVG1/9sI7qWSzQNpDFkzRwS/q2yt6U1XZrKtJFM31aA=
Subject key identifier: 28:F6:29:05:E1:04:5F:1E:A9:FA:77:EB:66:56:5F:63:93:B4:41:7F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA1BA164CA583385262EAB1E0E5406BAF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/KPYpBeEEXx6p-nfrZlZfY5O0QX8.roa
Signing time: Mon 27 Jul 2026 03:59:14 +0000
ROA not before: Mon 27 Jul 2026 03:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 194.77.3.0/24 maxlen: 24
194.77.228.0/24 maxlen: 24
212.189.18.0/24 maxlen: 24
217.8.197.0/24 maxlen: 24
217.8.199.0/24 maxlen: 24
217.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:ba:16:4c:a5:83:38:52:62:ea:b1:e0:e5:40:6b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 27 03:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28f62905e1045f1ea9fa77eb66565f6393b4417f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:b4:02:d0:0c:1f:06:f8:81:af:70:97:a9:
05:e4:61:c6:b5:a3:3a:a1:55:5d:77:f9:49:c8:c7:
06:d9:1e:61:8f:32:d6:b8:e7:c7:46:2d:c6:06:3d:
c6:55:7c:76:2c:54:63:1f:a6:09:e8:4b:9d:76:37:
0c:24:3b:64:c0:f3:ef:aa:76:c0:fb:8c:ed:8c:ce:
49:8a:ee:02:28:e9:52:b9:4a:cd:c8:23:8c:6a:c8:
ab:68:84:5a:cb:3c:be:a1:6a:93:69:74:c9:78:e9:
0b:93:b4:d0:b1:45:23:f8:55:87:bf:4c:80:74:62:
04:ef:07:e8:7a:eb:bb:d3:3c:c9:7c:16:f3:e1:76:
9a:80:d2:31:91:bb:7d:6f:10:f0:09:e7:08:a3:87:
ec:9f:c7:bb:66:e4:73:0f:6c:42:13:bf:5e:e1:3c:
e9:83:84:9f:e6:f1:e2:64:02:3b:e9:d5:47:5c:22:
90:68:98:f7:50:9c:dc:0d:8a:d5:11:74:5d:c9:ad:
10:18:8a:bc:5c:12:23:0a:c6:c1:a7:43:57:e5:26:
b9:38:86:c8:f8:11:8a:b5:5d:5f:e1:90:cb:2f:ab:
dc:76:87:1e:eb:c6:ec:3d:6c:17:08:b6:c4:23:97:
30:2c:a0:c2:76:5e:23:7c:d7:95:11:d0:36:78:e8:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F6:29:05:E1:04:5F:1E:A9:FA:77:EB:66:56:5F:63:93:B4:41:7F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/KPYpBeEEXx6p-nfrZlZfY5O0QX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.3.0/24
194.77.228.0/24
212.189.18.0/24
217.8.197.0/24
217.8.199.0/24
217.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e2:b7:24:6d:3e:3d:60:0a:f6:ca:4a:86:a8:a9:00:22:d8:
78:bf:8f:69:e8:27:81:78:bf:fd:7d:a0:98:3d:fc:1a:69:68:
72:84:f0:10:f6:4d:d3:07:c7:f8:21:07:a1:c6:7f:96:be:83:
4b:7e:21:fd:6e:e4:6f:ed:d3:79:c4:32:0c:11:0d:73:49:79:
6b:35:00:26:43:5c:1b:a6:3e:81:5c:73:55:4f:23:2b:f9:5c:
63:cc:79:3e:f9:ca:8f:27:d3:d7:94:b8:d8:c9:46:43:6f:42:
f4:bc:d4:64:fd:86:bb:44:01:12:8c:02:85:5f:ae:5e:16:f5:
b5:1a:e5:d3:bf:74:a5:ac:31:ab:e6:6e:06:9b:54:9b:2f:b7:
e9:fa:21:fe:a8:18:96:3d:0b:8e:84:09:ae:b0:7d:97:99:64:
d8:14:a0:ab:15:86:63:c8:e8:9e:1c:5d:62:d5:67:2b:04:b7:
6b:e1:7b:31:85:05:5d:16:e9:71:a0:86:8c:ba:6a:c2:2e:cd:
7c:16:6e:d7:69:71:e0:6f:67:10:ab:ec:66:e4:33:53:3b:9d:
37:18:93:bd:02:46:e1:07:7e:31:f8:9f:10:0a:0f:d3:ef:32:
fb:19:32:b9:b6:e8:25:14:58:92:61:03:4d:80:46:c1:d4:ab:
9f:ce:6a:12
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ+huhZMpYM4UmLqseDlQGuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzI3MDM1OTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGY2MjkwNWUxMDQ1ZjFlYTlmYTc3ZWI2NjU2NWY2MzkzYjQ0MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27i0AtAMHwb4ga9wl6kF5GHGtaM6
oVVdd/lJyMcG2R5hjzLWuOfHRi3GBj3GVXx2LFRjH6YJ6EuddjcMJDtkwPPvqnbA
+4ztjM5Jiu4CKOlSuUrNyCOMasiraIRayzy+oWqTaXTJeOkLk7TQsUUj+FWHv0yA
dGIE7wfoeuu70zzJfBbz4XaagNIxkbt9bxDwCecIo4fsn8e7ZuRzD2xCE79e4Tzp
g4Sf5vHiZAI76dVHXCKQaJj3UJzcDYrVEXRdya0QGIq8XBIjCsbBp0NX5Sa5OIbI
+BGKtV1f4ZDLL6vcdoce68bsPWwXCLbEI5cwLKDCdl4jfNeVEdA2eOh4uQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCj2KQXhBF8eqfp362ZWX2OTtEF/MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvS1BZcEJlRUVYeDZwLW5mclpsWmZZNU8wUVg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwk0DAwQA
wk3kAwQA1L0SAwQA2QjFAwQA2QjHAwQA2QjJMA0GCSqGSIb3DQEBCwUAA4IBAQBl
4rckbT49YAr2ykqGqKkAIth4v49p6CeBeL/9faCYPfwaaWhyhPAQ9k3TB8f4IQeh
xn+WvoNLfiH9buRv7dN5xDIMEQ1zSXlrNQAmQ1wbpj6BXHNVTyMr+VxjzHk++cqP
J9PXlLjYyUZDb0L0vNRk/Ya7RAESjAKFX65eFvW1GuXTv3SlrDGr5m4Gm1SbL7fp
+iH+qBiWPQuOhAmusH2XmWTYFKCrFYZjyOieHF1i1WcrBLdr4XsxhQVdFulxoIaM
umrCLs18Fm7XaXHgb2cQq+xm5DNTO503GJO9AkbhB34x+J8QCg/T7zL7GTK5tugl
FFiSYQNNgEbB1KufzmoS
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:11 2026 by rpki-client