Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KGH_K7rZifIXpwT074TsyjzRHzQ.roa
File: KGH_K7rZifIXpwT074TsyjzRHzQ.roa (raw, json)
Hash identifier: gT95GADISu0r/ueI3AOlXD2byPETZG0dy/q5eM/5sQo=
Subject key identifier: 28:61:FF:2B:BA:D9:89:F2:17:A7:04:F4:EF:84:EC:CA:3C:D1:1F:34
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C26DAF88689CC9C422DC87770AE34853C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KGH_K7rZifIXpwT074TsyjzRHzQ.roa
Signing time: Wed 04 Feb 2026 04:13:30 +0000
ROA not before: Wed 04 Feb 2026 04:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 89.125.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:26:da:f8:86:89:cc:9c:42:2d:c8:77:70:ae:34:85:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 4 04:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2861ff2bbad989f217a704f4ef84ecca3cd11f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:ef:b8:dd:11:18:8b:b9:47:34:a8:63:a7:
20:08:8d:90:38:7d:c7:e3:84:16:6d:54:af:32:01:
72:27:8e:fc:ae:e6:91:85:e0:06:96:9c:56:79:7d:
87:bc:74:e4:a0:be:e6:07:b5:b3:ad:04:bc:56:a3:
6b:cd:45:a3:3c:57:5e:8f:5b:2e:bd:cf:e6:a5:96:
81:d7:b2:b2:fb:41:82:ab:0d:cc:83:7f:0a:e2:b6:
84:72:9c:db:2e:c7:00:8e:cf:f2:cf:ef:1f:b2:35:
5e:7d:07:fd:ab:b6:cb:96:45:d0:78:ba:44:8c:e8:
cf:a5:d4:3b:f4:db:99:09:a3:ae:18:fa:fc:f3:07:
f0:5e:27:3b:fc:e0:05:6e:bf:ea:e2:9e:51:53:f8:
f1:eb:a8:8b:09:c4:76:12:3c:2c:75:5e:c7:94:34:
9a:1c:4b:3e:52:db:14:92:41:78:1b:16:30:47:53:
7a:c5:f9:35:ae:d4:84:5b:bd:d1:8d:94:c0:8c:6f:
5b:09:f8:8c:54:74:b7:cc:c0:0e:d2:6f:76:ea:da:
1d:45:94:29:0e:6c:d8:a1:b6:a7:ba:3c:1c:13:9f:
76:26:1a:ad:e5:04:2a:4c:6e:e3:5f:f4:cf:88:1b:
3e:c9:7e:be:06:67:3a:40:fd:a9:77:da:63:ed:df:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:61:FF:2B:BA:D9:89:F2:17:A7:04:F4:EF:84:EC:CA:3C:D1:1F:34
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KGH_K7rZifIXpwT074TsyjzRHzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.49.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d7:7d:6f:d4:30:54:60:0b:06:a0:d3:65:c2:04:ae:af:ed:
43:fd:82:a7:75:40:5b:27:ab:c6:1e:ae:aa:ab:13:1e:0a:5b:
a8:09:e8:4d:3c:e3:bf:18:94:cc:f3:db:c4:84:14:c3:c8:a9:
0c:50:c5:ab:cc:40:0f:9e:c6:6d:00:ee:54:61:d9:49:e4:8f:
d9:5c:2a:b0:79:ac:70:e5:cb:19:93:0e:db:8b:30:d1:08:54:
f7:b8:1e:ea:27:84:b5:5a:b3:67:3f:d2:11:36:f4:3c:53:c0:
fc:7a:91:d5:82:f0:6a:50:8e:b8:1a:da:ce:fb:40:31:aa:47:
3e:b7:97:2a:eb:00:b4:0b:77:c4:27:08:8b:49:67:8e:fb:05:
3b:84:8d:16:83:5d:9b:ea:5a:9e:00:21:c2:2a:01:8a:c5:f1:
2a:fd:2b:9b:e6:c6:fa:ac:c5:ba:c8:74:9e:38:a5:88:8a:96:
65:5d:8d:23:8c:e9:a2:11:52:98:ba:d3:1d:16:07:eb:9e:6c:
af:7d:56:2c:21:1d:1f:f0:4e:77:69:49:93:5f:26:39:5e:e9:
ef:dc:a4:f9:59:15:e3:71:1a:49:a7:80:9c:ce:18:23:8b:95:
50:ab:48:0b:c7:d6:33:b8:d4:3c:81:02:58:97:c5:d6:a1:f3:
f7:2e:b9:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwm2viGicycQi3Id3CuNIU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMjA0MDQxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODYxZmYyYmJhZDk4OWYyMTdhNzA0ZjRlZjg0ZWNjYTNjZDExZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyvvuN0RGIu5RzSoY6cgCI2QOH3H
44QWbVSvMgFyJ478ruaRheAGlpxWeX2HvHTkoL7mB7WzrQS8VqNrzUWjPFdej1su
vc/mpZaB17Ky+0GCqw3Mg38K4raEcpzbLscAjs/yz+8fsjVefQf9q7bLlkXQeLpE
jOjPpdQ79NuZCaOuGPr88wfwXic7/OAFbr/q4p5RU/jx66iLCcR2EjwsdV7HlDSa
HEs+UtsUkkF4GxYwR1N6xfk1rtSEW73RjZTAjG9bCfiMVHS3zMAO0m926todRZQp
DmzYobanujwcE592Jhqt5QQqTG7jX/TPiBs+yX6+Bmc6QP2pd9pj7d9uVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFChh/yu62YnyF6cE9O+E7Mo80R80MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvS0dIX0s3clppZklYcHdUMDc0VHN5anpSSHpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX0xMA0G
CSqGSIb3DQEBCwUAA4IBAQCF131v1DBUYAsGoNNlwgSur+1D/YKndUBbJ6vGHq6q
qxMeCluoCehNPOO/GJTM89vEhBTDyKkMUMWrzEAPnsZtAO5UYdlJ5I/ZXCqweaxw
5csZkw7bizDRCFT3uB7qJ4S1WrNnP9IRNvQ8U8D8epHVgvBqUI64GtrO+0Axqkc+
t5cq6wC0C3fEJwiLSWeO+wU7hI0Wg12b6lqeACHCKgGKxfEq/Sub5sb6rMW6yHSe
OKWIipZlXY0jjOmiEVKYutMdFgfrnmyvfVYsIR0f8E53aUmTXyY5Xunv3KT5WRXj
cRpJp4Cczhgji5VQq0gLx9YzuNQ8gQJYl8XWofP3Lrnw
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:52 2026 by rpki-client