Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/kee-TAF1NP5oKCB1iTJjqT_b2Mc.roa
File: kee-TAF1NP5oKCB1iTJjqT_b2Mc.roa (raw, json)
Hash identifier: N7D6JbWuKqcfI7WtKVNjHFaHj7JY9sozkTCyXD/KWh4=
Subject key identifier: 91:E7:BE:4C:01:75:34:FE:68:28:20:75:89:32:63:A9:3F:DB:D8:C7
Certificate issuer: /CN=52223deb5c3bd1f59fdeac3ce12bdeec74e7363d
Certificate serial: 01A0CE81AA285A226619659E7AD21C160705
Authority key identifier: 52:22:3D:EB:5C:3B:D1:F5:9F:DE:AC:3C:E1:2B:DE:EC:74:E7:36:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiI961w70fWf3qw84Sve7HTnNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/kee-TAF1NP5oKCB1iTJjqT_b2Mc.roa
Signing time: Wed 23 Sep 2026 13:43:19 +0000
ROA not before: Wed 23 Sep 2026 13:43:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58126
IP address blocks: 91.242.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiI961w70fWf3qw84Sve7HTnNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:81:aa:28:5a:22:66:19:65:9e:7a:d2:1c:16:07:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52223deb5c3bd1f59fdeac3ce12bdeec74e7363d
Validity
Not Before: Sep 23 13:43:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91e7be4c017534fe68282075893263a93fdbd8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:14:54:21:97:36:d2:7a:c6:45:6d:75:c6:
ed:9b:f8:a3:92:b4:e2:59:ea:a6:8c:c6:39:bf:a3:
fc:12:a8:92:c4:21:19:fa:38:81:fd:60:83:af:60:
02:a1:f3:46:34:dd:0f:35:6a:e3:11:2d:c0:65:09:
37:50:9b:e9:27:eb:50:df:a3:04:aa:4c:62:54:6c:
ce:a8:3a:4a:7a:7b:a1:59:7e:36:55:34:43:51:f7:
65:fb:92:1c:fe:f3:c9:6a:3c:4b:fd:b3:68:ad:07:
c5:44:0c:ec:47:fe:c1:6b:90:85:20:7d:6a:b2:58:
b0:2b:30:27:ea:b7:4f:54:3f:d9:1f:1b:23:2b:e5:
fe:df:41:8a:31:64:64:66:14:d7:63:97:c9:79:a9:
b4:f7:72:9c:26:73:aa:ad:79:71:71:22:ad:82:cd:
63:0c:a3:5d:0b:f9:26:5e:a3:12:d8:44:3e:1d:45:
3f:6c:ee:1b:c6:a0:93:20:08:7a:1f:b9:26:46:5d:
5c:9a:95:6c:9e:46:c6:99:88:22:26:05:04:e4:0b:
62:a6:27:22:b1:8f:07:2d:da:ce:80:14:11:5d:48:
d2:93:af:65:3e:95:21:bb:3e:b6:6b:92:a9:42:05:
e6:97:b2:55:53:67:00:72:f3:02:f0:c8:99:89:42:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E7:BE:4C:01:75:34:FE:68:28:20:75:89:32:63:A9:3F:DB:D8:C7
X509v3 Authority Key Identifier:
keyid:52:22:3D:EB:5C:3B:D1:F5:9F:DE:AC:3C:E1:2B:DE:EC:74:E7:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiI961w70fWf3qw84Sve7HTnNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/kee-TAF1NP5oKCB1iTJjqT_b2Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:fb:1e:0f:f1:89:49:d9:8a:17:4a:3a:ee:34:e3:5f:8d:d6:
3e:73:60:47:60:63:c4:4d:07:14:86:69:25:11:a6:22:17:7c:
33:85:b2:88:bc:ad:5b:5e:82:61:e6:88:ed:65:2a:3f:5a:86:
fc:17:a6:81:05:1e:95:fd:78:d6:c0:a4:e6:6e:46:f4:88:ae:
04:73:f0:1d:a9:b4:f1:b1:cb:33:58:d5:59:41:5f:a1:ac:36:
2e:f2:8f:83:b3:f9:cd:f5:d7:68:44:a9:10:73:0f:e4:dc:af:
4a:2f:98:75:c1:57:d1:73:94:77:a1:5a:4f:bd:ac:20:6b:8f:
ed:36:ba:f2:13:3f:3e:3e:9a:70:a9:54:46:a8:93:82:f3:68:
2f:2d:6f:e0:2e:01:06:12:60:9a:a9:f1:b2:1f:54:ca:ab:4c:
84:47:25:f0:33:9d:a4:da:75:ab:60:d3:16:52:93:70:e9:24:
0c:88:b0:56:eb:b4:ef:70:3c:29:3a:ac:ec:af:e6:43:31:22:
77:b0:b1:a6:96:28:67:0d:ff:19:8a:63:6d:b1:e5:54:87:83:
f7:a3:e2:84:e9:d5:d0:3f:ee:46:2f:19:65:93:3f:1d:aa:cb:
c3:fb:74:1f:43:cf:75:3f:a2:eb:b0:25:3b:8e:cd:c7:89:64:
4d:28:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:03:05 2026 by rpki-client