Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/kLUG7I7zaleUboTqrqB19XXsTkQ.roa
File: kLUG7I7zaleUboTqrqB19XXsTkQ.roa (raw, json)
Hash identifier: cKKeB+BIlOYQDOr355c8ocGK4xiw2EqpjCd7kzeueqs=
Subject key identifier: 90:B5:06:EC:8E:F3:6A:57:94:6E:84:EA:AE:A0:75:F5:75:EC:4E:44
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019DBEFDA2BEC3F9886172F554F5F81FB41A
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/kLUG7I7zaleUboTqrqB19XXsTkQ.roa
Signing time: Fri 24 Apr 2026 10:16:26 +0000
ROA not before: Fri 24 Apr 2026 10:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15510
IP address blocks: 185.119.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:fd:a2:be:c3:f9:88:61:72:f5:54:f5:f8:1f:b4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Apr 24 10:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90b506ec8ef36a57946e84eaaea075f575ec4e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:33:dc:4f:78:cf:4e:94:ec:4e:1e:11:28:
5b:3e:9e:ee:f0:a7:6b:de:77:9e:10:23:47:69:e5:
82:9b:45:f3:c5:c2:c1:b4:c5:8b:a0:b5:0e:1a:e7:
d5:8c:6f:ee:ab:7c:dc:aa:50:fd:88:9d:44:5c:a7:
d2:81:42:3b:b6:11:bf:e5:c6:ef:fa:b2:15:b2:8d:
5d:20:eb:8a:f6:31:ae:3f:8d:8e:19:b2:49:f3:a1:
31:ef:97:b7:37:37:4a:d6:96:3e:2d:7a:46:49:f2:
b3:62:62:cd:b1:02:c1:c1:80:fb:41:db:f5:9c:a5:
ca:66:7d:c5:bf:3d:eb:b6:25:91:56:c4:50:b4:13:
16:c8:ac:00:f8:4f:83:0e:32:8a:46:1c:ea:fe:f1:
c7:21:9f:3f:0a:d4:c9:2b:5d:38:c3:6e:87:a7:36:
09:9f:c0:5c:42:9f:fb:86:eb:12:0c:1a:89:e5:3d:
bb:1b:fb:df:c6:76:76:e1:1c:a1:6e:21:d4:ec:37:
8c:ee:df:a8:e0:ce:df:53:a3:05:c7:67:b8:e3:85:
23:ca:93:74:3a:97:9f:e7:6e:24:26:2d:27:b1:1f:
3d:48:50:c0:05:7e:e2:fa:c0:4d:61:34:7b:b2:84:
56:56:33:7e:01:03:33:9a:9a:b2:8c:b8:6b:04:80:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B5:06:EC:8E:F3:6A:57:94:6E:84:EA:AE:A0:75:F5:75:EC:4E:44
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/kLUG7I7zaleUboTqrqB19XXsTkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:71:6e:74:63:c0:80:62:39:14:a3:e7:14:a4:e1:c2:1e:f3:
eb:14:7a:71:2d:81:df:62:c4:06:3e:b4:71:e7:19:e6:51:9a:
fa:b9:0b:7f:5f:6d:48:68:76:f6:83:54:84:41:d6:d6:54:74:
59:e7:dc:12:a0:47:1f:cb:4e:85:34:10:03:9d:34:45:05:8a:
c7:45:f4:65:36:80:4c:a0:ac:79:01:cb:dc:28:46:65:47:da:
71:58:cc:cf:cf:34:82:9a:81:37:e8:c1:10:24:fe:84:9d:79:
a4:3e:5a:d9:d2:88:b9:29:85:05:ea:43:75:a9:57:5a:74:b2:
df:2c:fb:b0:cf:ba:48:ca:79:99:f1:43:01:f9:83:f2:44:4f:
55:e5:f0:07:38:8d:ba:da:0f:96:6e:b1:9d:0d:e4:5a:b6:2a:
b6:3e:36:13:92:d6:29:13:f2:a2:27:bc:a6:c5:f9:33:48:e7:
59:86:ff:7d:23:89:2a:f1:ba:53:cc:73:0d:96:77:eb:c2:0d:
80:02:85:81:1e:7f:45:2e:83:72:95:60:9a:8a:4a:17:8e:97:
94:fe:36:7e:1e:ce:a8:0a:51:06:82:4a:ef:2c:b4:4e:99:2e:
8d:95:b0:e6:41:79:eb:c0:51:94:f9:e9:3e:13:42:d5:e6:4b:
56:0d:9e:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2+/aK+w/mIYXL1VPX4H7QaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk
ZjI3ZTkwHhcNMjYwNDI0MTAxNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGI1MDZlYzhlZjM2YTU3OTQ2ZTg0ZWFhZWEwNzVmNTc1ZWM0ZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyIz3E94z06U7E4eEShbPp7u8Kdr
3neeECNHaeWCm0XzxcLBtMWLoLUOGufVjG/uq3zcqlD9iJ1EXKfSgUI7thG/5cbv
+rIVso1dIOuK9jGuP42OGbJJ86Ex75e3NzdK1pY+LXpGSfKzYmLNsQLBwYD7Qdv1
nKXKZn3Fvz3rtiWRVsRQtBMWyKwA+E+DDjKKRhzq/vHHIZ8/CtTJK104w26HpzYJ
n8BcQp/7husSDBqJ5T27G/vfxnZ24RyhbiHU7DeM7t+o4M7fU6MFx2e444UjypN0
Opef524kJi0nsR89SFDABX7i+sBNYTR7soRWVjN+AQMzmpqyjLhrBIAwzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJC1BuyO82pXlG6E6q6gdfV17E5EMB8GA1UdIwQY
MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt
MjNiYTRhOTFhMTA1LzEva0xVRzdJN3phbGVVYm9UcXJxQjE5WFhzVGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1
LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXduMA0G
CSqGSIb3DQEBCwUAA4IBAQClcW50Y8CAYjkUo+cUpOHCHvPrFHpxLYHfYsQGPrRx
5xnmUZr6uQt/X21IaHb2g1SEQdbWVHRZ59wSoEcfy06FNBADnTRFBYrHRfRlNoBM
oKx5AcvcKEZlR9pxWMzPzzSCmoE36MEQJP6EnXmkPlrZ0oi5KYUF6kN1qVdadLLf
LPuwz7pIynmZ8UMB+YPyRE9V5fAHOI262g+WbrGdDeRatiq2PjYTktYpE/KiJ7ym
xfkzSOdZhv99I4kq8bpTzHMNlnfrwg2AAoWBHn9FLoNylWCaikoXjpeU/jZ+Hs6o
ClEGgkrvLLROmS6NlbDmQXnrwFGU+ek+E0LV5ktWDZ4f
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:04 2026 by rpki-client