Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KbTBJiswqR_cCN4CRJ1Gfovk198.roa
File: KbTBJiswqR_cCN4CRJ1Gfovk198.roa (raw, json)
Hash identifier: kTRrHUQx1OKOGSYl/QDHKDKACE7m/XS4Vus55DyQ+Cw=
Subject key identifier: 29:B4:C1:26:2B:30:A9:1F:DC:08:DE:02:44:9D:46:7E:8B:E4:D7:DF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D85BDCADB65DDDB65CF0464D6A09DE1A5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KbTBJiswqR_cCN4CRJ1Gfovk198.roa
Signing time: Mon 13 Apr 2026 07:28:21 +0000
ROA not before: Mon 13 Apr 2026 07:28:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 82.152.122.0/24 maxlen: 24
89.31.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:bd:ca:db:65:dd:db:65:cf:04:64:d6:a0:9d:e1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 13 07:28:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29b4c1262b30a91fdc08de02449d467e8be4d7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:df:35:18:65:04:70:59:2f:3a:3b:ad:34:88:
4c:b0:dc:69:93:e9:ae:c4:a2:f1:f8:43:0d:01:40:
b5:5e:4d:8e:84:95:da:7c:3e:c6:1e:bd:6a:ed:5a:
4b:06:74:fc:41:c0:d8:e1:2e:b3:24:16:8e:af:cc:
d0:41:bc:39:0a:88:b1:75:1f:93:ad:65:1b:48:02:
aa:ff:cc:91:42:fe:46:cd:c1:10:af:2a:16:8d:3f:
16:f1:0f:29:4d:ec:95:6f:ff:37:92:b8:9d:c2:dd:
b1:5b:34:47:04:4e:29:d4:b0:c1:7c:96:a1:0a:c8:
d6:c9:87:d8:dc:18:0f:65:8a:8f:32:fd:02:d6:ca:
5a:ec:53:b4:83:73:37:10:32:75:e8:f3:af:24:bd:
11:27:dc:a3:39:db:ff:f1:14:b5:66:d8:f7:4d:41:
5c:00:a5:3b:12:f5:17:bd:3a:19:9c:46:73:23:8d:
ee:6b:c5:af:9e:d9:ea:fb:9f:b8:b7:41:cd:01:20:
06:9e:fc:db:35:7f:0c:8b:4f:1e:8f:f2:d9:42:39:
4b:ab:b1:ce:99:8a:f0:4a:05:5b:0d:47:4d:ee:b7:
c5:5e:31:62:24:f7:91:84:a9:cc:46:3f:82:d0:0b:
e1:f6:1b:1a:52:82:fc:ad:87:5f:03:de:54:6c:75:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B4:C1:26:2B:30:A9:1F:DC:08:DE:02:44:9D:46:7E:8B:E4:D7:DF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KbTBJiswqR_cCN4CRJ1Gfovk198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.122.0/24
89.31.234.0/24
Signature Algorithm: sha256WithRSAEncryption
72:08:a6:b5:99:5e:b0:8b:f7:b8:e7:3e:d8:da:e4:88:47:f6:
de:7e:47:e6:1c:7d:9a:8f:1a:a3:46:ed:b6:55:32:24:06:54:
60:d4:5c:58:56:5b:7d:3d:5c:20:b9:c0:70:c6:1d:8e:98:fd:
5e:74:da:54:1e:47:7f:e4:da:a2:9c:77:2a:da:19:86:97:51:
e7:5a:d8:69:4b:79:ed:f0:64:00:f8:8d:fb:f6:e8:b4:7d:97:
64:f0:29:ad:02:02:48:3b:e0:17:ec:d1:07:46:2a:33:4f:9b:
d0:2a:d6:6e:bd:96:86:f9:79:52:fc:0f:93:b3:34:23:7d:fd:
6a:15:92:8a:dc:88:cc:6e:b6:67:1a:1c:24:41:9c:6f:c5:25:
ab:0e:ce:71:9c:9a:11:00:ca:4f:fd:e8:1a:93:d0:72:33:e7:
7f:bf:2e:de:35:be:3b:27:b4:b8:b3:26:f1:4e:9b:12:3d:31:
5e:d7:6a:f1:15:07:76:b1:cc:4e:63:29:96:e1:35:0b:e4:5c:
99:10:d3:c5:6a:7f:d0:78:eb:9a:c3:be:7b:cc:3e:3c:66:fa:
9f:b5:da:eb:8a:8f:a6:3a:0d:68:d0:5d:86:dd:fe:d3:93:02:
21:7b:65:1b:a1:58:3d:08:7d:57:a8:40:2e:1a:76:e8:09:46:
d2:15:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:46 2026 by rpki-client