Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KSNokGiZchwHNAva84sfV2UaTCY.roa
File: KSNokGiZchwHNAva84sfV2UaTCY.roa (raw, json)
Hash identifier: hmzLJk4e82bBWaaVsksULO6qrGX0QvelXwCQeetC3FU=
Subject key identifier: 29:23:68:90:68:99:72:1C:07:34:0B:DA:F3:8B:1F:57:65:1A:4C:26
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E93DC58E7F348C1B29C5331A5E5290F84
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KSNokGiZchwHNAva84sfV2UaTCY.roa
Signing time: Thu 04 Jun 2026 18:19:11 +0000
ROA not before: Thu 04 Jun 2026 18:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 151.240.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:dc:58:e7:f3:48:c1:b2:9c:53:31:a5:e5:29:0f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 18:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=292368906899721c07340bdaf38b1f57651a4c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:c1:49:e3:c5:46:7d:c6:6c:46:97:f0:82:
23:a2:3f:f0:d0:b6:91:21:02:8b:f9:83:b4:8e:d9:
79:2e:76:17:73:99:8b:f8:36:e6:d3:d8:5f:4c:78:
a5:cf:69:37:fe:4d:8c:4c:41:a1:ab:b8:aa:e6:72:
7f:db:b7:88:22:2f:58:c2:05:c6:bb:41:34:ed:48:
bb:3a:48:91:67:7e:6b:4b:b7:bb:83:28:28:d2:c0:
dc:58:9f:d3:35:36:68:a3:ab:88:f9:e9:14:ab:66:
94:4e:0a:ca:1e:4d:ae:a2:d1:ea:b4:93:33:a5:41:
88:7a:1d:6f:21:49:8b:f8:ba:6e:65:ad:0a:1f:99:
3b:97:7e:2b:d8:85:0e:6b:53:69:48:16:e7:d6:f0:
21:0e:0d:ef:2c:fc:af:92:0d:eb:69:24:88:30:a0:
84:e5:24:3b:9c:63:61:a7:3b:34:c4:c9:84:4e:01:
a2:13:ec:0e:2f:ab:9e:e0:55:84:76:61:c0:e4:9c:
ea:c9:86:e0:5f:03:63:2b:cc:26:25:6d:cb:d0:95:
73:c9:b4:b6:9e:8e:e0:20:58:90:f4:ae:2d:be:7e:
f0:aa:cf:1c:66:0e:70:90:f0:15:eb:6c:03:d0:87:
bf:fd:fc:2b:9e:62:57:0a:71:50:9c:b6:33:cc:3e:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:23:68:90:68:99:72:1C:07:34:0B:DA:F3:8B:1F:57:65:1A:4C:26
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KSNokGiZchwHNAva84sfV2UaTCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.26.0/24
Signature Algorithm: sha256WithRSAEncryption
12:61:6e:39:de:b6:80:c9:57:06:4f:a4:22:f8:d5:56:e6:9c:
4b:0d:7e:bc:66:70:46:ac:30:06:ed:98:d0:92:26:3e:25:04:
2f:a1:36:c2:a6:b6:7d:27:03:36:a6:5e:89:43:05:3b:2e:42:
fe:4a:b7:aa:bc:50:49:46:89:51:13:24:5d:03:e0:19:1d:58:
d5:8e:e4:9f:2d:90:73:8b:79:b8:25:c0:b7:9f:94:e9:0c:77:
26:71:39:0e:41:df:63:f2:97:4d:5a:64:42:2d:1d:20:7b:97:
7b:ad:53:9a:ab:a9:b1:ee:13:f5:1d:0c:98:fd:7e:78:04:ee:
1b:13:57:e5:cd:12:15:f2:4d:53:4b:f2:89:e1:ba:1c:9e:85:
5e:4b:42:3e:66:99:16:85:2c:79:ba:30:38:55:fe:6e:df:cb:
ab:d3:57:2d:76:e7:b4:7f:71:36:2d:37:02:56:a2:e3:0f:11:
ba:23:ac:f0:89:df:1a:b0:4a:7d:7a:24:e2:11:23:a2:d6:27:
ac:be:d2:9a:b6:4b:c9:99:32:b2:ba:44:6e:96:d1:59:c6:38:
3a:7e:d2:f7:ff:44:07:1c:dc:a3:6c:39:12:9d:1d:0a:67:c5:
8f:75:33:c5:57:5a:a1:a6:b3:b8:fb:23:c1:f1:1a:b7:bd:2f:
1a:ca:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:39 2026 by rpki-client