Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/KyNP6vrFF4mQbiJnNsNkIhVm41U.roa
File: KyNP6vrFF4mQbiJnNsNkIhVm41U.roa (raw, json)
Hash identifier: /VyDLYQxGbJ9Gukqe3FlEbzCjBJNPed1JowFzj8+6NQ=
Subject key identifier: 2B:23:4F:EA:FA:C5:17:89:90:6E:22:67:36:C3:64:22:15:66:E3:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019B7835474F956C6973C17702ABA1A222FF
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/KyNP6vrFF4mQbiJnNsNkIhVm41U.roa
Signing time: Thu 01 Jan 2026 06:18:36 +0000
ROA not before: Thu 01 Jan 2026 06:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203285
IP address blocks: 91.195.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:47:4f:95:6c:69:73:c1:77:02:ab:a1:a2:22:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jan 1 06:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b234feafac51789906e226736c364221566e355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:53:d9:b5:b0:64:6a:03:e4:07:6a:56:05:
f2:f9:33:a8:51:2e:14:86:d3:02:60:b6:fe:00:6f:
9e:6e:35:f0:83:5d:f4:be:6b:d0:11:06:0d:aa:f6:
01:c9:6c:b7:70:7d:2a:25:09:e4:5d:22:97:e4:f5:
2b:80:e0:4d:ba:b8:20:ad:68:8a:7c:7b:df:51:28:
ca:f1:2f:0a:4d:9d:be:5e:2b:83:ad:16:eb:5c:8d:
0e:45:f9:3b:a4:a5:04:ef:b9:85:48:ad:8c:65:9c:
9a:47:5b:b7:40:b1:db:a5:02:b1:54:4e:a8:94:8e:
95:70:a2:77:6a:c1:16:f7:19:0a:ae:4d:18:37:13:
06:4b:a0:73:c0:ac:59:b9:0b:6d:d9:ed:7e:17:8b:
46:36:68:06:91:0e:56:ce:73:12:cf:89:cd:c4:8c:
f2:cf:e6:d6:48:ec:6b:be:51:60:8f:5f:33:04:01:
67:16:14:fd:7c:91:65:69:0c:02:a4:57:e7:1d:26:
c2:85:d5:eb:20:10:63:56:e6:5c:51:3c:88:6a:bd:
72:f9:cc:34:9e:fb:be:d6:20:0c:98:37:6c:e6:9b:
b0:d5:bd:03:26:a6:76:38:c8:3e:ec:5a:7c:42:4b:
36:50:ee:c0:13:dc:c8:6d:46:c6:52:1f:f1:28:d4:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:23:4F:EA:FA:C5:17:89:90:6E:22:67:36:C3:64:22:15:66:E3:55
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/KyNP6vrFF4mQbiJnNsNkIhVm41U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0b:15:2c:7b:29:e1:21:26:72:72:92:f3:e3:eb:c2:b7:6f:
97:b6:55:d3:5e:74:01:15:59:8f:b2:cd:16:0a:f2:61:98:19:
95:36:ed:08:96:e0:80:3c:3f:d2:db:b1:aa:3a:0d:38:75:95:
28:f5:1d:7b:4e:8f:c9:fa:ad:b8:20:82:7e:7c:0f:d7:7b:ac:
22:5e:58:2a:66:96:fd:ce:3a:11:2d:60:63:6b:1c:30:b9:dd:
13:ae:56:f0:c5:6c:49:7e:27:e6:bb:7a:44:22:70:44:93:03:
d8:b0:42:e5:ed:0d:4e:19:38:9d:a2:d7:38:fa:76:d2:77:3e:
57:41:23:8c:1b:d6:fc:88:dc:df:53:1f:ac:69:b2:c8:14:82:
a2:1f:14:57:55:6c:96:29:fe:b2:9a:af:94:f2:0c:cd:a7:85:
9c:63:2c:ec:0f:5b:c1:d9:84:63:52:b3:8d:3b:19:ac:2d:ce:
3b:fd:61:db:c5:01:29:bf:d1:58:b2:c5:70:09:35:58:ea:48:
7e:b9:03:e0:d5:08:61:c5:e4:02:bc:c5:3b:37:cd:c6:96:d7:
7e:e6:5c:80:01:4d:a9:9e:2c:26:ae:33:0c:72:c1:9f:b7:62:
0d:cf:af:97:f4:4c:98:88:4f:66:a1:ad:2d:df:2f:6c:7d:bf:
91:13:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:35 2026 by rpki-client