Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/K-KFv2ywyMppzBzTy_lEtojdLTU.roa
File: K-KFv2ywyMppzBzTy_lEtojdLTU.roa (raw, json)
Hash identifier: 28NmMoA3sjhuKkfN3w+6Un5F6/GD1m7hb06udz3zdRI=
Subject key identifier: 2B:E2:85:BF:6C:B0:C8:CA:69:CC:1C:D3:CB:F9:44:B6:88:DD:2D:35
Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial: 019EBADA5B22C5CE8C461523FB6DD909A045
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/K-KFv2ywyMppzBzTy_lEtojdLTU.roa
Signing time: Fri 12 Jun 2026 08:02:12 +0000
ROA not before: Fri 12 Jun 2026 08:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401171
IP address blocks: 209.248.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:da:5b:22:c5:ce:8c:46:15:23:fb:6d:d9:09:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
Validity
Not Before: Jun 12 08:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2be285bf6cb0c8ca69cc1cd3cbf944b688dd2d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:85:09:03:29:72:bc:4f:97:6f:1b:72:8d:
cf:a6:9f:74:9b:74:5c:75:e0:7b:38:9f:00:d4:b0:
79:72:a6:54:ad:63:77:52:44:ce:4c:bc:84:62:2b:
05:3e:4d:7e:83:90:a7:cb:e5:57:7d:3d:72:c4:f7:
39:75:8a:c2:4a:89:29:44:5e:2a:df:cb:97:43:63:
41:05:55:fb:18:50:b0:b2:08:7a:c6:f6:03:e4:7f:
ba:ac:10:59:7f:61:35:75:26:27:14:d5:b2:48:18:
49:b1:e6:c6:7c:40:67:dd:1c:e5:12:2c:f4:c9:90:
f6:27:4b:40:ba:7d:57:e6:e1:59:eb:b9:44:ca:89:
3b:83:b6:d5:35:55:a9:fb:9c:05:97:74:5c:48:0a:
c8:23:c8:68:82:09:7e:e1:df:2d:c7:a6:08:93:f8:
44:03:ae:25:93:db:3a:1e:01:85:43:03:55:de:f5:
62:76:a7:ec:08:5d:0a:7e:01:50:b9:26:4b:c1:da:
d0:2e:c4:04:2c:fd:17:9b:17:ee:25:f2:04:80:6e:
bf:a5:62:aa:6b:be:83:6f:66:42:03:4d:56:b0:c7:
ee:b9:bf:c8:f8:94:24:3f:c6:61:a8:41:15:b1:2d:
9f:29:d9:63:49:8f:b4:8d:a2:e2:d5:0e:dd:bc:dd:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E2:85:BF:6C:B0:C8:CA:69:CC:1C:D3:CB:F9:44:B6:88:DD:2D:35
X509v3 Authority Key Identifier:
keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/K-KFv2ywyMppzBzTy_lEtojdLTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.248.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:71:c9:03:df:e0:a4:7c:aa:36:ed:f0:8c:03:c5:ac:5f:b6:
7b:1c:51:cb:a8:07:f0:ee:92:6f:1d:2b:0c:d5:1f:5a:96:24:
b5:70:47:e9:cc:54:a8:bd:4d:b4:76:fb:c5:82:de:b4:67:02:
0c:90:bf:0d:50:7b:ec:6a:d3:ce:86:e6:f6:71:35:ad:b7:06:
27:33:f8:8b:29:34:c5:c0:ee:7d:a4:02:42:8e:36:4d:03:6f:
8c:c6:2d:2b:8c:44:c1:88:ef:64:e2:e0:2a:e1:6b:f4:7a:f3:
9b:69:0f:b4:a4:68:46:28:82:84:d9:60:db:47:e0:f3:3b:40:
f4:3d:dc:e2:bd:43:88:61:65:62:4f:41:e9:6a:25:ac:e3:97:
1f:be:28:7a:07:e9:90:65:32:c0:49:09:4f:a4:04:d3:58:c3:
25:ee:22:9c:16:0f:ef:54:4b:6e:30:4e:a9:1e:06:2f:6b:5c:
e5:cd:b6:3f:89:76:31:7f:3e:b6:b1:98:6b:96:3f:ee:96:98:
97:6d:c4:ba:85:85:29:b4:3a:47:e2:39:15:17:90:cd:47:7d:
88:cc:4e:a0:fb:6a:fc:6a:79:f8:5d:c9:f1:ba:3a:e4:fb:87:
30:c4:00:21:0b:72:26:67:54:44:f2:e4:74:e7:df:30:70:36:
ed:1e:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:55 2026 by rpki-client