Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KKmH-QmziqPP1-zpT53GhTPtB_I.roa
File: KKmH-QmziqPP1-zpT53GhTPtB_I.roa (raw, json)
Hash identifier: Q1zuWnGD9Y8TZMyhTjDOdW55DhgbT6p/PAP7eIyoWTs=
Subject key identifier: 28:A9:87:F9:09:B3:8A:A3:CF:D7:EC:E9:4F:9D:C6:85:33:ED:07:F2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CADA35794116C44771E547CF6E391A7AC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KKmH-QmziqPP1-zpT53GhTPtB_I.roa
Signing time: Mon 02 Mar 2026 08:21:28 +0000
ROA not before: Mon 02 Mar 2026 08:21:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203057
IP address blocks: 109.176.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:a3:57:94:11:6c:44:77:1e:54:7c:f6:e3:91:a7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 2 08:21:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28a987f909b38aa3cfd7ece94f9dc68533ed07f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:38:99:cc:29:b8:d7:0c:3d:e6:17:1e:7a:
62:8c:99:b3:fe:41:9e:3d:32:88:b1:a6:31:47:dc:
72:57:98:92:ef:64:cc:50:aa:c1:31:27:c1:91:54:
4d:f0:a8:54:32:82:e0:70:4d:d8:b8:96:5a:62:fc:
fc:98:18:8d:1b:29:b6:14:01:7b:89:01:ec:6f:8f:
01:5a:28:8d:56:eb:19:37:1b:14:ea:81:ba:cb:6a:
82:87:03:a3:8f:51:c7:a9:17:47:6b:25:05:98:ae:
92:08:c3:76:09:9e:96:a2:84:18:c5:f3:e8:84:af:
a6:c4:4d:47:2a:56:04:61:1f:d0:c6:63:b4:5a:b0:
b4:d7:1a:6f:8f:fd:57:a8:3c:1c:3e:40:93:ff:f4:
2d:6e:b5:27:96:94:22:4a:59:db:b6:5b:a0:61:15:
1b:e2:b9:ac:05:12:db:a0:48:ee:a8:46:14:06:16:
5f:a5:95:bd:9c:55:2e:47:c6:a3:55:86:3e:fb:b4:
88:a2:bd:71:6e:fb:43:49:65:8c:a2:68:75:fb:a2:
92:42:0e:9b:7d:44:82:31:20:ba:cb:fd:c6:0e:b4:
4c:a4:67:02:72:51:5c:50:98:1a:d5:5b:fb:20:10:
18:ad:4a:9f:31:2d:94:88:d0:92:86:85:b2:ee:c3:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:87:F9:09:B3:8A:A3:CF:D7:EC:E9:4F:9D:C6:85:33:ED:07:F2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KKmH-QmziqPP1-zpT53GhTPtB_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8a:d9:98:da:1b:d8:b1:1f:53:ba:83:df:3f:d3:72:9c:27:
eb:e7:e4:c9:08:f6:d6:6b:2a:b2:ba:dd:75:25:4f:fa:78:b8:
61:e2:62:43:08:f6:9b:fb:23:ee:6d:c8:89:0d:cb:1f:dc:23:
87:65:01:6a:97:6b:d7:63:58:14:33:7c:fe:fb:97:c2:77:3c:
e9:9f:93:c6:5b:ac:3a:05:0d:da:82:77:68:ad:fa:c1:30:06:
19:cc:d5:92:30:3e:51:11:ab:4f:b4:46:ce:ad:87:ca:50:2e:
b2:c7:6a:96:71:67:2d:6e:35:16:d6:3a:dd:89:e4:16:cd:52:
1f:96:3a:e9:c6:56:30:23:ea:ff:4b:0e:ca:6f:b9:db:68:38:
fb:09:dc:e5:df:82:fc:70:37:bb:1f:e4:d2:14:53:03:99:d7:
51:ba:9e:ad:a0:60:73:a4:e2:e9:8d:99:c3:f0:c7:5e:1b:37:
ec:ad:d0:ac:0c:ce:e1:f4:52:3c:d7:84:36:a1:d0:5c:ba:c9:
4b:65:20:bf:ff:ca:80:97:9b:fa:60:4b:0d:50:73:7c:fd:c0:
e8:a0:6d:9f:62:49:be:69:c4:00:40:2a:b5:ce:77:d7:c2:7a:
5e:94:77:d9:19:ff:ef:70:6f:a2:89:cc:c8:c5:b5:3f:35:11:
ea:56:98:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:20:16 2026 by rpki-client