Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/KfWBelIYPvJTfksD4spPaBRLMlQ.roa
File: KfWBelIYPvJTfksD4spPaBRLMlQ.roa (raw, json)
Hash identifier: HZGmDRLSFINhrYipULOolh9wkARwJbqKGC2RI2U6T5I=
Subject key identifier: 29:F5:81:7A:52:18:3E:F2:53:7E:4B:03:E2:CA:4F:68:14:4B:32:54
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EBFFD09C047399BD09362FAEE8EF7DE13
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/KfWBelIYPvJTfksD4spPaBRLMlQ.roa
Signing time: Sat 13 Jun 2026 07:58:11 +0000
ROA not before: Sat 13 Jun 2026 07:58:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141520
IP address blocks: 194.77.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fd:09:c0:47:39:9b:d0:93:62:fa:ee:8e:f7:de:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 13 07:58:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29f5817a52183ef2537e4b03e2ca4f68144b3254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:99:a8:11:39:4a:6d:07:77:c6:ec:1b:49:
26:bd:c9:f1:72:11:52:d0:f5:e1:cd:94:c4:6b:d7:
a7:32:4e:d6:07:0e:ef:ed:38:69:f4:34:0c:a6:d8:
3c:f8:88:e9:4f:dd:e9:1c:55:3e:0a:e0:14:f1:f0:
8e:00:0a:4a:a7:51:58:83:58:67:3d:78:21:84:11:
d8:58:61:62:a9:7c:85:cb:89:0a:d7:d3:0d:9f:22:
d9:79:ff:5c:29:5c:e8:15:b8:86:c8:9f:b2:60:f4:
e8:14:ca:91:22:c3:6e:b0:ad:c2:d5:1a:f2:ab:67:
b5:3a:84:e5:6d:90:82:8d:c1:bf:2f:99:5c:8e:74:
33:0e:bd:17:21:38:c5:bc:45:4a:a7:e6:ac:7c:a2:
a4:eb:b9:ea:6a:3e:20:e0:f2:8d:25:9f:78:39:77:
3d:87:d4:12:e3:9f:c7:97:c1:ff:fb:f8:0d:39:58:
94:21:85:ec:ab:40:1f:29:f4:73:34:ce:c2:83:3e:
dd:94:d9:d3:da:12:95:1a:1c:e9:f1:37:48:3a:6d:
76:e0:73:93:8b:a1:22:ab:98:a7:62:c0:d4:a9:0b:
7b:2c:50:17:09:ee:50:08:83:28:8e:44:bb:06:d9:
85:12:a3:95:34:d3:cc:91:71:99:70:7d:14:67:07:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:81:7A:52:18:3E:F2:53:7E:4B:03:E2:CA:4F:68:14:4B:32:54
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/KfWBelIYPvJTfksD4spPaBRLMlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.69.0/24
Signature Algorithm: sha256WithRSAEncryption
be:42:06:5a:3a:c1:68:79:9b:eb:33:4e:ac:00:3b:40:a4:a2:
ae:fc:26:7e:15:92:53:a7:40:67:65:27:e8:5d:18:1b:d5:10:
50:dc:15:87:8e:2f:04:a7:ed:5f:a6:1f:d5:c1:e3:98:aa:c5:
ed:af:7f:98:eb:82:54:98:6c:12:08:64:4d:ea:d7:6f:0d:24:
e6:4f:e4:9c:be:f5:09:0c:6f:bc:a1:4a:d1:a9:4c:d6:29:e1:
d8:c1:83:39:1c:16:88:c4:df:1b:d2:ce:59:70:f2:c9:f4:3d:
db:18:5f:43:8e:96:3f:9d:9c:0b:24:08:db:59:e7:fe:42:68:
dd:58:35:3c:1c:1f:f9:15:74:07:3e:8b:ca:50:9d:ab:4b:da:
ef:58:8b:65:25:c0:1f:df:ef:63:98:bc:65:5a:3a:6b:f6:4d:
f0:e3:5a:74:2f:a5:03:49:59:3e:50:d9:d7:b4:a5:9d:c6:75:
95:0b:c3:4f:c0:40:53:a2:15:29:c8:4a:f9:06:6d:26:de:a4:
f4:0f:99:ef:1e:76:8f:02:d7:19:20:d9:12:7a:f1:f2:7b:92:
5d:9e:73:aa:7d:07:b8:e3:de:76:10:32:41:69:4a:aa:d5:a9:
b2:50:91:73:7d:6f:67:51:d0:bd:5c:20:b0:54:de:07:db:94:
fc:3f:58:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:29 2026 by rpki-client