Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/knbsustwJvR7vslwhDD07WFKnYw.roa
File: knbsustwJvR7vslwhDD07WFKnYw.roa (raw, json)
Hash identifier: ZsrA7fMZa8y8eHNvmYMSRrSuvix06Iohk5e6MSlICDA=
Subject key identifier: 92:76:EC:BA:CB:70:26:F4:7B:BE:C9:70:84:30:F4:ED:61:4A:9D:8C
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A0816AE36BF274580323F4C7BB6EC1E6FB
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/knbsustwJvR7vslwhDD07WFKnYw.roa
Signing time: Tue 08 Sep 2026 14:27:40 +0000
ROA not before: Tue 08 Sep 2026 14:27:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13009
IP address blocks: 46.235.168.0/21 maxlen: 21
62.89.144.0/24 maxlen: 24
83.98.10.0/24 maxlen: 24
85.118.0.0/19 maxlen: 19
94.199.144.0/21 maxlen: 21
178.250.96.0/21 maxlen: 21
185.65.100.0/22 maxlen: 22
185.81.160.0/22 maxlen: 22
185.81.162.0/24 maxlen: 24
188.95.128.0/21 maxlen: 21
212.44.20.0/24 maxlen: 24
213.146.128.0/19 maxlen: 19
213.146.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:6a:e3:6b:f2:74:58:03:23:f4:c7:bb:6e:c1:e6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Sep 8 14:27:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9276ecbacb7026f47bbec9708430f4ed614a9d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:4b:fd:e0:c2:45:c9:2f:2e:5d:ab:dd:27:
33:61:98:02:e5:5f:c7:d9:c3:ae:65:84:2a:e4:c8:
97:d3:04:d3:4c:d7:09:51:38:f5:bb:1e:28:db:34:
0c:20:a3:15:38:4e:90:7b:a2:48:72:ba:dd:d5:41:
24:99:d1:2a:1f:34:07:d0:52:bb:ad:75:ca:27:44:
86:8a:f5:fd:ac:b9:b8:a8:fd:d5:89:b7:7a:00:62:
66:91:18:d6:8d:1c:d4:5b:6d:41:67:21:e8:ba:2f:
d9:e5:0c:4b:46:8c:4e:4b:27:a2:dd:b9:e1:67:42:
8a:47:69:8d:55:b4:cf:89:a0:78:a1:e3:a8:8e:c8:
47:09:c2:6c:8e:54:94:a6:fb:5f:d4:d6:f8:f3:22:
ad:89:c5:c6:8d:63:82:b0:7a:e9:18:d2:58:0a:dd:
e1:9a:ff:90:81:ab:74:d7:38:1e:b7:fe:e8:8f:76:
99:c3:bd:f5:01:49:2a:02:ef:60:21:70:b1:9d:3c:
65:1d:32:78:2c:bf:99:7f:a0:15:f7:46:2f:33:31:
73:99:10:09:5e:03:8a:8b:52:e3:6f:45:40:64:c7:
72:d3:91:84:06:99:b8:4a:d7:cf:41:34:73:ee:c9:
e9:92:26:37:6b:8e:0a:6c:bf:69:0b:d1:33:f2:b4:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:76:EC:BA:CB:70:26:F4:7B:BE:C9:70:84:30:F4:ED:61:4A:9D:8C
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/knbsustwJvR7vslwhDD07WFKnYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.168.0/21
62.89.144.0/24
83.98.10.0/24
85.118.0.0/19
94.199.144.0/21
178.250.96.0/21
185.65.100.0/22
185.81.160.0/22
188.95.128.0/21
212.44.20.0/24
213.146.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:bd:8e:66:9a:de:bc:d7:0e:f0:ac:0d:6b:c5:5c:a1:8f:38:
60:a9:8b:e5:39:6f:47:52:18:f0:2a:fd:2f:f2:07:cc:3d:96:
d0:6d:38:ac:48:1e:64:ff:71:19:c3:77:dd:34:c7:58:e9:0b:
bb:a8:c7:6e:3e:3b:72:5a:40:d0:d3:74:52:87:18:e9:1c:89:
fc:ad:25:a3:83:87:b5:38:a7:f7:3e:53:45:4c:29:45:e9:7c:
6c:53:3d:33:31:6c:ed:b5:9b:c7:c5:b0:3e:67:fc:75:75:fe:
b6:54:63:fd:83:26:3c:0e:f6:b1:01:a5:bd:7a:6e:ac:8a:c5:
2a:23:67:d7:1e:95:39:88:28:aa:45:07:73:5e:03:22:af:88:
c7:0d:2b:bb:0e:23:9a:d2:54:b8:96:ca:da:59:06:03:44:35:
00:22:2a:ae:28:d1:6f:5c:12:f6:35:83:10:a0:0d:39:57:e5:
90:68:a7:e8:7b:53:0a:37:f4:04:66:92:45:84:61:7e:56:19:
4f:ba:9b:b8:65:aa:bb:ff:65:b2:c5:b6:8b:a7:bd:dd:b6:03:
f7:1c:dc:81:b4:61:00:66:70:4d:dc:2b:cd:49:12:72:51:f0:
7e:30:0d:d6:16:7a:c1:8b:d3:39:50:4b:81:91:d8:14:9e:67:
ed:a3:e0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:29 2026 by rpki-client