Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/kemm2WFFjUfdfPOT05bIGh6Qr8U.roa
File: kemm2WFFjUfdfPOT05bIGh6Qr8U.roa (raw, json)
Hash identifier: KeQbE1A9fOz9QJdCPRsOfpL6c34Chbb6zODaWyyEB6c=
Subject key identifier: 91:E9:A6:D9:61:45:8D:47:DD:7C:F3:93:D3:96:C8:1A:1E:90:AF:C5
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 019D23C09EAC84783D535DE5E97E4199D1D0
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/kemm2WFFjUfdfPOT05bIGh6Qr8U.roa
Signing time: Wed 25 Mar 2026 06:48:39 +0000
ROA not before: Wed 25 Mar 2026 06:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5539
IP address blocks: 82.118.32.0/19 maxlen: 19
185.54.120.0/22 maxlen: 22
185.54.188.0/22 maxlen: 22
185.54.190.0/24 maxlen: 24
185.54.191.0/24 maxlen: 24
193.149.32.0/19 maxlen: 19
194.97.64.0/19 maxlen: 19
194.97.128.0/19 maxlen: 19
194.97.137.0/24 maxlen: 24
195.24.96.0/19 maxlen: 19
195.30.0.0/16 maxlen: 16
195.30.21.0/24 maxlen: 24
195.30.64.0/24 maxlen: 24
195.30.84.0/24 maxlen: 24
195.30.121.0/24 maxlen: 24
195.30.131.0/24 maxlen: 24
2001:608::/32 maxlen: 32
2001:608:804::/48 maxlen: 48
2001:608:e03::/48 maxlen: 48
2001:67c:158c::/48 maxlen: 48
2001:4150::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:c0:9e:ac:84:78:3d:53:5d:e5:e9:7e:41:99:d1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Mar 25 06:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91e9a6d961458d47dd7cf393d396c81a1e90afc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d7:a2:d8:4c:65:94:da:ae:11:a0:cb:46:1f:
54:30:41:01:e1:e8:bb:b9:96:c7:96:16:58:a7:51:
5f:3f:4a:fc:14:5b:cc:96:65:c4:60:e6:4c:f8:b9:
66:38:de:08:30:a7:c3:93:5b:b1:dd:2f:5b:6f:0b:
b1:1c:08:3d:2e:79:7b:0c:4f:34:c8:34:47:ba:a8:
7f:f4:65:c4:44:b7:ed:13:24:d9:4d:47:0b:fc:18:
7b:ae:f0:c7:e6:2f:26:7c:3d:b1:d4:be:c9:9a:42:
61:3c:ed:4b:1d:50:70:e7:91:1f:c9:64:bd:51:5a:
1a:2f:bb:7f:c3:dc:18:bb:03:79:f0:ce:a3:ba:c6:
de:50:0a:d7:f8:f1:f0:ea:9c:55:a5:ed:2a:7e:7b:
31:ec:33:2b:9a:aa:ba:b6:af:39:a0:f9:16:c4:ee:
83:b2:04:a6:72:34:c2:45:c7:c2:4b:6d:62:88:94:
f1:58:d8:8b:f4:eb:be:00:68:cc:81:02:a3:1f:fe:
40:8a:fa:46:72:7d:3e:85:2c:d6:10:93:ad:2f:06:
60:b5:77:20:99:ed:60:29:27:09:f3:d3:b4:c8:70:
ec:f0:c8:92:d3:7f:d5:ed:46:01:b3:11:e6:4d:76:
c6:fd:98:ca:1c:c7:08:ae:20:5b:da:3f:ff:77:a2:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E9:A6:D9:61:45:8D:47:DD:7C:F3:93:D3:96:C8:1A:1E:90:AF:C5
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/kemm2WFFjUfdfPOT05bIGh6Qr8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.32.0/19
185.54.120.0/22
185.54.188.0/22
193.149.32.0/19
194.97.64.0/19
194.97.128.0/19
195.24.96.0/19
195.30.0.0/16
IPv6:
2001:608::/32
2001:67c:158c::/48
2001:4150::/32
Signature Algorithm: sha256WithRSAEncryption
3e:b1:0d:ac:a3:82:c2:05:e7:f2:b4:9e:05:ac:f2:73:46:a7:
a3:e6:31:4a:84:0f:7c:dd:bf:ca:eb:fb:3a:66:f8:93:7b:41:
1a:7e:23:fe:42:02:cb:2d:0f:77:06:90:82:ac:71:58:4f:0c:
66:14:75:29:fa:55:89:1d:87:75:88:3b:b8:8d:48:3e:44:73:
5d:6e:8e:ca:e9:c3:76:85:9d:68:e8:e2:00:2a:de:b3:19:85:
10:a1:9e:0a:45:9a:9c:15:d0:97:0f:a9:de:07:95:59:88:b1:
95:41:59:25:9b:b5:2a:b1:7b:a2:42:a8:88:31:81:2a:1a:00:
49:16:62:c0:e6:bc:a5:45:1c:4f:1d:29:55:7f:01:14:88:18:
4f:92:b6:3e:54:82:aa:01:b7:57:3a:6f:18:a3:f7:92:14:a3:
77:fa:da:6d:9f:0a:3d:88:93:02:cc:80:02:aa:80:28:1c:74:
53:1f:ba:67:d8:22:aa:a7:be:e1:2d:1e:93:9f:27:70:c5:b5:
e8:3a:b3:4c:13:03:fb:b1:cc:52:85:a9:eb:de:22:4b:a8:c2:
08:69:93:03:f1:3b:0d:30:9d:ab:6d:37:82:db:cc:e7:90:b8:
80:48:85:95:43:60:6c:16:84:9e:aa:cb:65:2e:a6:98:48:8a:
aa:91:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:36 2026 by rpki-client