Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KiKrRe2mt8xSa1NHqRaK0AtP5RE.roa
File: KiKrRe2mt8xSa1NHqRaK0AtP5RE.roa (raw, json)
Hash identifier: gRpvFe5GeZgCF6FBINs2UaALv9fjgAxrXnPMR6Qz2RY=
Subject key identifier: 2A:22:AB:45:ED:A6:B7:CC:52:6B:53:47:A9:16:8A:D0:0B:4F:E5:11
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019CFABE1EF8C96DE64BAD82F35C884EB96E
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KiKrRe2mt8xSa1NHqRaK0AtP5RE.roa
Signing time: Tue 17 Mar 2026 07:41:29 +0000
ROA not before: Tue 17 Mar 2026 07:41:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.10.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:be:1e:f8:c9:6d:e6:4b:ad:82:f3:5c:88:4e:b9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Mar 17 07:41:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a22ab45eda6b7cc526b5347a9168ad00b4fe511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:9c:fb:eb:b9:a3:e5:b9:07:7c:f2:44:4f:
55:1c:2e:01:71:b9:7c:2f:31:54:e3:32:47:7a:c0:
f2:bc:48:08:80:bc:36:71:cf:d4:1a:1e:70:e3:eb:
b8:09:35:90:e1:2e:9d:18:15:bc:f3:01:5f:cf:bb:
3b:cb:44:32:5e:ac:00:03:9b:c2:c1:ad:3d:33:0e:
b3:44:c0:5c:9b:eb:0c:98:58:84:03:8e:ca:13:7d:
ca:c6:1d:d6:8f:2c:11:2c:70:ee:12:28:e4:07:96:
b4:c7:b7:ed:ef:35:9e:1a:1b:8b:fd:3c:ae:e4:aa:
b4:1e:73:ea:ed:f6:dc:e3:1c:c4:98:67:62:a6:8b:
fb:8a:8e:e2:42:d3:83:01:4a:9e:b3:51:28:08:af:
2d:f0:d4:96:98:30:10:91:2a:a1:0d:98:a3:9c:7d:
d3:39:95:9f:ef:42:60:c9:2a:b9:80:38:c3:78:4e:
da:a2:b0:db:71:d7:7c:54:9a:92:76:95:20:d3:05:
64:18:8b:ef:a9:1b:ae:43:7b:74:f3:fa:09:e5:b5:
06:87:32:82:6b:c8:51:a5:32:ee:ee:72:79:92:27:
e0:97:cb:fc:c8:7a:22:b1:9d:95:a1:ff:46:cb:39:
53:7d:29:5e:bb:58:76:e6:39:43:60:c9:39:ba:f2:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:22:AB:45:ED:A6:B7:CC:52:6B:53:47:A9:16:8A:D0:0B:4F:E5:11
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KiKrRe2mt8xSa1NHqRaK0AtP5RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d6:01:98:e4:97:7b:3b:6e:37:de:6d:90:80:9c:be:a6:84:
c5:75:0f:1b:26:64:0d:02:ef:34:f4:27:31:a2:20:7d:31:f0:
b6:17:c8:6e:3b:b1:df:7c:28:7f:7e:fa:04:06:cd:14:89:63:
40:d7:ce:9a:07:6e:de:19:0c:1c:05:a8:96:05:86:1e:d9:9c:
c7:0b:3c:21:47:ee:5d:b4:13:1b:ca:e0:03:fa:ec:ac:51:8a:
01:f6:c0:a6:6c:c9:fa:82:9f:7b:36:fd:65:9d:82:8c:67:ce:
3b:84:b0:88:7e:b2:8d:63:f5:d7:d1:ac:c8:4b:0a:44:65:92:
ea:e0:22:af:4a:3d:f0:4b:4d:b7:34:f8:c0:20:c3:c6:6a:6f:
41:99:55:a0:ac:d9:29:5e:43:60:f6:ca:07:fe:bc:89:6f:69:
6c:69:f9:b7:7e:bb:0e:27:f2:d0:c9:42:02:67:96:7d:fc:74:
5f:64:46:11:77:df:ae:46:56:a9:6b:8f:12:42:4c:c1:e0:94:
d2:f0:ee:f1:eb:4a:86:8e:e7:05:bc:e7:b0:50:e7:9e:6e:98:
e4:1f:1e:bd:9d:09:60:18:7b:a9:e2:7c:bc:3f:70:59:7f:1f:
15:9a:9a:23:a1:df:a8:ef:2c:4c:9f:64:0f:c6:35:e0:fa:cf:
36:ce:ae:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZz6vh74yW3mS62C81yITrluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi
NzEzMmYwHhcNMjYwMzE3MDc0MTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTIyYWI0NWVkYTZiN2NjNTI2YjUzNDdhOTE2OGFkMDBiNGZlNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQmc++u5o+W5B3zyRE9VHC4Bcbl8
LzFU4zJHesDyvEgIgLw2cc/UGh5w4+u4CTWQ4S6dGBW88wFfz7s7y0QyXqwAA5vC
wa09Mw6zRMBcm+sMmFiEA47KE33Kxh3WjywRLHDuEijkB5a0x7ft7zWeGhuL/Tyu
5Kq0HnPq7fbc4xzEmGdipov7io7iQtODAUqes1EoCK8t8NSWmDAQkSqhDZijnH3T
OZWf70JgySq5gDjDeE7aorDbcdd8VJqSdpUg0wVkGIvvqRuuQ3t08/oJ5bUGhzKC
a8hRpTLu7nJ5kifgl8v8yHoisZ2Vof9GyzlTfSleu1h25jlDYMk5uvI+7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCoiq0XtprfMUmtTR6kWitALT+URMB8GA1UdIwQY
MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt
ZGVlNzY4NjAwMTNkLzEvS2lLclJlMm10OHhTYTFOSHFSYUswQXRQNVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk
LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQreMA0G
CSqGSIb3DQEBCwUAA4IBAQAH1gGY5Jd7O2433m2QgJy+poTFdQ8bJmQNAu809Ccx
oiB9MfC2F8huO7HffCh/fvoEBs0UiWNA186aB27eGQwcBaiWBYYe2ZzHCzwhR+5d
tBMbyuAD+uysUYoB9sCmbMn6gp97Nv1lnYKMZ847hLCIfrKNY/XX0azISwpEZZLq
4CKvSj3wS023NPjAIMPGam9BmVWgrNkpXkNg9soH/ryJb2lsafm3frsOJ/LQyUIC
Z5Z9/HRfZEYRd9+uRlapa48SQkzB4JTS8O7x60qGjucFvOewUOeebpjkHx69nQlg
GHup4ny8P3BZfx8Vmpojod+o7yxMn2QPxjXg+s82zq64
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:36 2026 by rpki-client