Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/kFL249yBJc4sSXnfovKwJ6mjCww.roa
File: kFL249yBJc4sSXnfovKwJ6mjCww.roa (raw, json)
Hash identifier: HJelDmFXzIdgkYrGpNACjTkxKKW9AU78etwdV7+OHDE=
Subject key identifier: 90:52:F6:E3:DC:81:25:CE:2C:49:79:DF:A2:F2:B0:27:A9:A3:0B:0C
Certificate issuer: /CN=3220cd6cf3f865ef6cfa04222c223cf20ee7e048
Certificate serial: 019F236901C54B3FEA6C922F47BC27671A95
Authority key identifier: 32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/kFL249yBJc4sSXnfovKwJ6mjCww.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201661
IP address blocks: 185.53.152.0/22 maxlen: 22
2a04:cdc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:01:c5:4b:3f:ea:6c:92:2f:47:bc:27:67:1a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3220cd6cf3f865ef6cfa04222c223cf20ee7e048
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9052f6e3dc8125ce2c4979dfa2f2b027a9a30b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:b2:6b:61:90:74:89:40:e8:d3:be:32:e7:
76:13:d5:2b:a1:ae:b7:ba:7a:2a:2e:e8:2c:45:2e:
2d:78:d2:0d:bb:ec:62:cb:82:06:91:63:61:34:70:
1e:70:3b:ff:79:e6:2c:b6:c3:ba:83:02:6a:69:1f:
36:7e:06:49:86:27:20:92:e3:93:a3:ee:b0:6e:a2:
e6:0f:91:62:a4:77:02:f0:3c:16:ff:b5:57:76:62:
9c:de:fc:c6:46:e4:61:a8:92:33:95:08:ba:96:dd:
09:d3:4e:a8:3c:19:e3:a8:b5:4b:07:51:37:88:56:
2c:c8:2f:44:9d:69:3c:c7:1a:22:c6:d0:97:c7:38:
64:66:86:28:92:48:7a:d0:2b:dc:f4:fc:68:cf:59:
7a:d6:9b:37:d5:1a:ad:fb:49:d5:aa:ec:16:19:c9:
f5:00:a0:6c:d1:68:09:7e:7b:ea:62:42:71:7b:19:
a7:56:be:75:a6:db:e7:03:89:f2:62:43:64:ff:5c:
39:3e:e8:ac:fd:42:7f:22:71:18:7b:8f:95:86:90:
e4:e4:e5:6e:db:d8:ef:26:1d:a1:70:b4:49:9c:76:
ba:e8:9c:d2:80:35:15:eb:d3:91:85:86:9d:25:2b:
0b:59:ee:a0:a1:09:ad:1d:fc:bc:7e:e5:67:26:05:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:52:F6:E3:DC:81:25:CE:2C:49:79:DF:A2:F2:B0:27:A9:A3:0B:0C
X509v3 Authority Key Identifier:
keyid:32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/kFL249yBJc4sSXnfovKwJ6mjCww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.152.0/22
IPv6:
2a04:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
08:80:f0:3b:89:06:16:fd:f0:78:52:3c:2f:70:1f:54:1f:f5:
da:b7:8e:bf:6e:89:06:1f:e8:e2:5e:1b:b8:5b:65:f4:55:ab:
8e:b4:b3:79:21:91:fe:30:d5:f9:b8:ce:1f:3e:be:91:30:04:
31:fe:35:4c:2c:89:e0:62:e5:12:4b:55:59:89:b7:68:0b:55:
22:ed:dc:53:de:94:f6:22:07:24:df:4f:20:40:b2:b9:60:89:
37:de:5d:e2:41:e8:dc:7f:7e:25:ed:05:69:24:a1:40:c4:6d:
38:5c:50:b8:e9:49:53:6a:d7:37:64:1a:93:38:b9:32:0b:c6:
69:6e:b7:62:a3:49:29:f4:6c:2b:1b:c6:b0:e0:58:4e:d5:f1:
fe:3a:58:3a:e5:f3:b1:53:39:ee:d6:3d:ee:16:8a:2a:fa:fc:
e6:b1:1c:72:2c:c6:87:12:b2:52:89:4c:d9:15:28:36:58:85:
4a:40:11:47:21:3d:7b:d8:a3:a1:eb:12:aa:c0:26:09:7d:9e:
27:4e:e0:11:76:74:e1:a8:a7:ac:2b:07:da:3f:58:63:e5:93:
58:5a:4e:f6:f3:92:8b:74:c4:6b:2e:80:52:ec:65:be:02:8f:
30:48:38:9b:bc:08:63:45:af:db:ca:41:85:e6:da:9f:b3:66:
5d:ed:b6:17
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaQHFSz/qbJIvR7wnZxqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMjBjZDZjZjNmODY1ZWY2Y2ZhMDQyMjJjMjIzY2YyMGVl
N2UwNDgwHhcNMjYwNzAyMTUxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDUyZjZlM2RjODEyNWNlMmM0OTc5ZGZhMmYyYjAyN2E5YTMwYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNOya2GQdIlA6NO+Mud2E9Uroa63
unoqLugsRS4teNINu+xiy4IGkWNhNHAecDv/eeYstsO6gwJqaR82fgZJhicgkuOT
o+6wbqLmD5FipHcC8DwW/7VXdmKc3vzGRuRhqJIzlQi6lt0J006oPBnjqLVLB1E3
iFYsyC9EnWk8xxoixtCXxzhkZoYokkh60Cvc9Pxoz1l61ps31Rqt+0nVquwWGcn1
AKBs0WgJfnvqYkJxexmnVr51ptvnA4nyYkNk/1w5Puis/UJ/InEYe4+VhpDk5OVu
29jvJh2hcLRJnHa66JzSgDUV69ORhYadJSsLWe6goQmtHfy8fuVnJgU2JQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJBS9uPcgSXOLEl536LysCepowsMMB8GA1UdIwQY
MBaAFDIgzWzz+GXvbPoEIiwiPPIO5+BIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWlETmJQUDRaZTlzLWdRaUxDSTg4ZzduNEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYt
MTczODI1MzliMDAwLzEva0ZMMjQ5eUJKYzRzU1huZm92S3dKNm1qQ3d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYtMTczODI1MzliMDAw
LzEvTWlETmJQUDRaZTlzLWdRaUxDSTg4ZzduNEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTWYMA0E
AgACMAcDBQMqBM3AMA0GCSqGSIb3DQEBCwUAA4IBAQAIgPA7iQYW/fB4UjwvcB9U
H/Xat46/bokGH+jiXhu4W2X0VauOtLN5IZH+MNX5uM4fPr6RMAQx/jVMLIngYuUS
S1VZibdoC1Ui7dxT3pT2Igck308gQLK5YIk33l3iQejcf34l7QVpJKFAxG04XFC4
6UlTatc3ZBqTOLkyC8Zpbrdio0kp9GwrG8aw4FhO1fH+Olg65fOxUznu1j3uFooq
+vzmsRxyLMaHErJSiUzZFSg2WIVKQBFHIT172KOh6xKqwCYJfZ4nTuARdnThqKes
KwfaP1hj5ZNYWk7285KLdMRrLoBS7GW+Ao8wSDibvAhjRa/bykGF5tqfs2Zd7bYX
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:06 2026 by rpki-client