Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/KLEbsUex6kfA2TrHqsrxk6W_jrc.roa
File: KLEbsUex6kfA2TrHqsrxk6W_jrc.roa (raw, json)
Hash identifier: 8GJL4HHRySJ+N/l9kxJIoQ+ji927avPBg8CMqptjZQ8=
Subject key identifier: 28:B1:1B:B1:47:B1:EA:47:C0:D9:3A:C7:AA:CA:F1:93:A5:BF:8E:B7
Certificate issuer: /CN=d5f772d071c513c1e8ce5b9aa67f6891eef50bef
Certificate serial: 019DBB4752AD3729393C66073377B9B5E2FA
Authority key identifier: D5:F7:72:D0:71:C5:13:C1:E8:CE:5B:9A:A6:7F:68:91:EE:F5:0B:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/KLEbsUex6kfA2TrHqsrxk6W_jrc.roa
Signing time: Thu 23 Apr 2026 16:58:26 +0000
ROA not before: Thu 23 Apr 2026 16:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49375
IP address blocks: 178.17.241.0/24 maxlen: 24
178.17.242.0/24 maxlen: 24
178.17.243.0/24 maxlen: 24
178.17.244.0/24 maxlen: 24
178.17.245.0/24 maxlen: 24
178.17.246.0/24 maxlen: 24
178.17.248.0/24 maxlen: 24
178.17.249.0/24 maxlen: 24
178.17.250.0/24 maxlen: 24
178.17.251.0/24 maxlen: 24
178.17.252.0/24 maxlen: 24
178.17.253.0/24 maxlen: 24
178.17.254.0/24 maxlen: 24
178.17.255.0/24 maxlen: 24
188.94.40.0/23 maxlen: 23
188.94.42.0/24 maxlen: 24
188.94.44.0/23 maxlen: 23
188.94.46.0/24 maxlen: 24
2a02:1648::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:47:52:ad:37:29:39:3c:66:07:33:77:b9:b5:e2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f772d071c513c1e8ce5b9aa67f6891eef50bef
Validity
Not Before: Apr 23 16:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28b11bb147b1ea47c0d93ac7aacaf193a5bf8eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:f9:e3:d7:ae:b3:68:8c:f5:bb:61:0c:07:
b7:8d:5b:6f:71:ef:78:3a:76:6e:e3:4c:6c:2d:dc:
44:32:18:a7:91:45:7b:dc:8e:47:c0:f6:9f:b0:ab:
1b:f1:3d:1f:4b:76:24:f4:74:80:06:f7:d6:9e:79:
09:6f:c1:01:ea:ba:57:b8:7a:e5:a9:b7:92:df:5a:
68:1c:59:20:cf:eb:b6:8c:10:80:fc:9e:ee:0e:73:
f2:07:aa:24:fd:50:a3:4b:70:b8:d7:48:64:5d:4d:
e3:05:df:b0:82:20:cb:34:43:c0:50:d8:c7:22:bf:
f4:aa:2e:ee:e8:db:f2:79:db:21:2c:ea:ea:6e:0a:
46:2e:7b:bf:34:83:2e:a6:c3:fe:3f:a8:91:51:85:
7e:7b:9e:5b:2e:23:ee:af:55:5d:5a:44:0e:31:64:
bb:df:87:9b:fb:95:ee:0b:ad:41:31:08:65:e3:ff:
29:f2:7d:31:e7:36:01:17:d3:f2:a7:5d:98:7f:52:
e0:d5:5b:18:a9:d8:bd:54:c4:50:41:1d:fa:e3:fc:
d8:51:96:cc:4e:c5:f6:81:21:c0:d8:87:d1:56:fe:
ad:ab:fb:94:6b:90:42:9e:54:ea:33:c0:fb:d5:19:
47:98:4d:5c:6b:55:51:e1:b0:09:8b:96:d1:45:5a:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B1:1B:B1:47:B1:EA:47:C0:D9:3A:C7:AA:CA:F1:93:A5:BF:8E:B7
X509v3 Authority Key Identifier:
keyid:D5:F7:72:D0:71:C5:13:C1:E8:CE:5B:9A:A6:7F:68:91:EE:F5:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/KLEbsUex6kfA2TrHqsrxk6W_jrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.241.0-178.17.246.255
178.17.248.0/21
188.94.40.0-188.94.42.255
188.94.44.0-188.94.46.255
IPv6:
2a02:1648::/29
Signature Algorithm: sha256WithRSAEncryption
80:d1:de:da:d3:f5:9b:e4:94:9b:2b:fe:5a:64:17:2a:42:dd:
b4:4f:17:4c:a6:1e:75:12:a0:1e:4a:cb:5d:cd:6a:87:64:80:
0c:fc:3f:2a:c6:ef:af:fe:9a:36:af:7c:e0:c0:86:63:b3:57:
f4:42:bb:c2:85:42:53:d6:ad:1c:9f:e0:3f:34:83:1b:af:5e:
d6:eb:ff:88:bc:02:10:6d:d0:ff:b8:a7:1a:3c:2a:0e:46:30:
9e:a7:af:17:e5:76:db:b2:74:43:0e:1b:8b:78:8a:e9:4f:27:
02:a7:f2:b5:60:10:05:09:e7:55:26:ee:4f:74:f5:56:8e:46:
b9:13:49:50:bb:ea:9f:df:09:2d:ae:50:63:79:9e:59:dc:87:
df:b4:30:0c:7c:ae:e2:ff:ff:53:46:55:bd:2e:d6:5f:09:9b:
18:22:21:c9:c7:23:68:10:66:12:b6:eb:dc:d9:4e:bd:27:52:
d3:e0:bc:6a:56:93:35:22:29:91:f3:9b:32:f2:77:da:c6:c5:
23:c9:0f:26:98:04:e0:25:3d:87:e3:ef:c8:43:b1:3b:bb:d0:
4b:95:a3:4f:38:83:7f:a0:c3:b7:e1:ab:4a:e0:44:53:65:e5:
99:f3:57:8c:60:af:82:b1:28:e3:ef:a1:d6:3a:72:e3:ba:29:
b8:03:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:23 2026 by rpki-client