Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/KFB95yaF5_FIPvwwGwGsxqSxMs8.roa
File: KFB95yaF5_FIPvwwGwGsxqSxMs8.roa (raw, json)
Hash identifier: 3ZADI8L29it0agLfCEEeq7mz9EEsHFHU3bBFXh0L8uI=
Subject key identifier: 28:50:7D:E7:26:85:E7:F1:48:3E:FC:30:1B:01:AC:C6:A4:B1:32:CF
Certificate issuer: /CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Certificate serial: 01A06237D13EE4701266FE3F2A81F8E13A0F
Authority key identifier: 5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/KFB95yaF5_FIPvwwGwGsxqSxMs8.roa
Signing time: Wed 02 Sep 2026 13:03:40 +0000
ROA not before: Wed 02 Sep 2026 13:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197545
IP address blocks: 95.36.128.0/18 maxlen: 24
2a0c:bbc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:37:d1:3e:e4:70:12:66:fe:3f:2a:81:f8:e1:3a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a765feb3e286c8dbaa9b1d62682e44fbe800722
Validity
Not Before: Sep 2 13:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28507de72685e7f1483efc301b01acc6a4b132cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:92:18:1a:3f:3b:a3:e4:ed:f8:7e:aa:26:fd:
5b:4e:73:7c:2a:de:32:37:13:31:02:af:7c:29:06:
32:41:cc:c8:fe:11:bc:6a:f9:12:2b:54:60:cb:63:
f4:b0:64:1f:28:ec:25:99:88:72:40:5e:6d:ba:81:
10:9c:f2:44:5b:9c:d3:fa:97:de:de:aa:2c:52:b8:
a7:02:fd:92:99:dc:3e:a2:4c:0b:84:8f:ee:8b:ee:
8e:0e:1c:a0:47:36:2f:c4:69:ee:88:2f:cb:2a:b0:
6c:fe:ed:67:cb:08:85:d3:6f:44:fb:58:38:54:f7:
f0:84:82:18:65:8f:f3:67:a9:fc:bd:20:7e:79:38:
4b:42:d2:d6:fc:eb:a6:df:ac:16:61:af:00:2d:37:
88:21:b1:ed:a6:5b:6f:45:a8:a9:53:30:22:1d:cd:
ac:73:e5:51:fd:df:9a:f1:2b:a5:0d:64:86:05:68:
23:32:5f:f5:07:49:f7:da:18:73:ba:d8:52:86:9c:
07:de:27:24:5e:ec:05:55:4d:d8:e3:59:9a:53:bd:
f1:83:d5:2b:54:c9:af:e5:d5:23:7b:7d:f3:ab:e7:
82:fc:75:4d:b7:0e:a3:cd:2f:11:ab:85:2e:b3:fd:
a7:47:cb:3c:d5:21:61:0e:96:5b:06:b0:cf:f6:1e:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:50:7D:E7:26:85:E7:F1:48:3E:FC:30:1B:01:AC:C6:A4:B1:32:CF
X509v3 Authority Key Identifier:
keyid:5A:76:5F:EB:3E:28:6C:8D:BA:A9:B1:D6:26:82:E4:4F:BE:80:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnZf6z4obI26qbHWJoLkT76AByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/KFB95yaF5_FIPvwwGwGsxqSxMs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dac523-20c3-4307-abe2-4e7ce1028d14/1/WnZf6z4obI26qbHWJoLkT76AByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.36.128.0/18
IPv6:
2a0c:bbc0::/32
Signature Algorithm: sha256WithRSAEncryption
49:f2:b9:2f:dc:2e:80:0c:32:1c:53:a4:22:82:fa:9d:7a:f5:
d0:f7:e9:bb:70:d3:c5:65:28:2a:3f:2c:0d:7c:af:6a:bb:aa:
d2:fc:7b:85:85:51:4a:16:ab:87:c3:8e:11:40:c1:90:25:20:
17:47:18:a7:d2:8e:01:b2:5e:df:41:53:7d:a5:e4:6d:3b:ac:
e1:df:17:ea:f2:c4:83:ef:04:20:b9:b3:a6:25:e8:e6:71:5d:
02:79:8b:9d:22:36:ad:2c:0c:40:56:92:ea:6d:fc:f2:d0:ea:
a7:b4:a6:b2:f9:2b:a9:a0:71:36:98:38:d5:fe:aa:c7:e9:20:
82:df:ba:9f:4e:03:33:51:75:53:bf:31:53:68:f1:53:c5:4c:
5c:74:e1:b6:16:ba:46:9b:be:68:56:24:ed:17:4a:c0:b5:e3:
18:b1:b1:4e:1b:f1:46:7b:bb:04:c3:1b:23:2a:9d:9d:7d:11:
6b:9d:2d:fc:c6:11:ca:9c:01:c9:58:18:ac:a2:7b:92:ab:f6:
1c:89:73:41:66:dc:d3:ff:57:db:ab:11:25:4a:7f:66:02:13:
55:31:1a:0a:c2:6b:85:e2:ef:93:fc:a5:43:e3:4a:f9:ef:80:
01:19:d6:72:b1:81:0a:9b:be:54:bf:b5:77:be:9d:70:de:8d:
07:87:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:43:06 2026 by rpki-client