Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/KieExLLH22dsTfgefFUYVrce4fw.roa
File: KieExLLH22dsTfgefFUYVrce4fw.roa (raw, json)
Hash identifier: O48/LvqE0Iix4NZFCGtG9bkUpc8sgDU6uyweaWQYkoQ=
Subject key identifier: 2A:27:84:C4:B2:C7:DB:67:6C:4D:F8:1E:7C:55:18:56:B7:1E:E1:FC
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01A078632C419B2103EC14B5B406E0E59219
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/KieExLLH22dsTfgefFUYVrce4fw.roa
Signing time: Sun 06 Sep 2026 20:22:40 +0000
ROA not before: Sun 06 Sep 2026 20:22:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199884
IP address blocks: 109.172.80.0/24 maxlen: 24
109.172.81.0/24 maxlen: 24
109.172.82.0/24 maxlen: 24
109.172.83.0/24 maxlen: 24
130.49.185.0/24 maxlen: 24
138.16.140.0/24 maxlen: 24
138.16.141.0/24 maxlen: 24
138.16.142.0/24 maxlen: 24
138.16.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:78:63:2c:41:9b:21:03:ec:14:b5:b4:06:e0:e5:92:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Sep 6 20:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a2784c4b2c7db676c4df81e7c551856b71ee1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:9d:f0:88:35:91:86:d4:49:12:e8:44:9f:
ee:b4:49:b1:03:96:6a:72:48:56:3c:13:9f:0d:e3:
b5:52:59:f5:7b:41:b5:fc:de:38:72:bf:1e:cb:b4:
34:d6:f0:b3:96:ee:b7:3a:20:22:2a:d2:31:6e:60:
f3:88:9e:4d:d1:fe:b3:99:ba:35:28:a3:a1:53:04:
e6:02:91:49:9a:00:bd:1b:26:bc:c6:14:68:20:02:
f3:42:0a:ba:c1:23:12:f1:19:ab:6c:1a:0d:2c:79:
e5:5e:e7:36:1e:58:45:73:23:5e:cb:8d:0a:ce:e5:
2c:22:b7:fb:6f:e0:7e:4c:c9:6f:67:56:13:2b:53:
9b:83:36:69:50:d2:ea:44:0b:40:9e:e1:12:93:f9:
02:94:1e:b6:3b:61:2c:ec:27:4f:6b:73:ed:1f:aa:
c6:7c:19:ab:f9:e8:33:7d:3e:9e:9e:00:85:18:2a:
09:04:e1:64:06:3c:e9:cd:e5:4f:30:6e:8f:3f:38:
50:d6:76:bc:f9:2a:a8:4d:ea:ee:6a:7f:2b:ee:c1:
61:39:40:a7:8c:b5:12:e7:35:5e:9c:ba:cf:27:4b:
f6:93:27:62:af:a8:25:6c:27:c9:bf:ac:01:cb:a9:
e2:1b:3b:5b:bd:17:71:97:d8:79:ea:a2:c5:d9:d6:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:27:84:C4:B2:C7:DB:67:6C:4D:F8:1E:7C:55:18:56:B7:1E:E1:FC
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/KieExLLH22dsTfgefFUYVrce4fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.80.0/22
130.49.185.0/24
138.16.140.0/22
Signature Algorithm: sha256WithRSAEncryption
24:56:99:3b:96:99:ba:81:a8:e2:d7:3d:3b:c8:4f:85:3f:65:
52:a0:57:fb:bf:b3:cd:94:ea:46:d8:20:a9:18:68:af:a3:06:
32:78:4d:0d:64:41:6b:eb:62:ea:8c:21:2a:96:3c:ba:e3:66:
88:9b:68:4c:d6:57:46:97:84:11:a0:73:15:ee:55:4c:0f:d3:
17:73:1a:7c:e2:97:a9:9b:da:44:48:15:93:0e:60:b4:0f:ff:
f9:08:ac:0c:46:8b:58:42:e1:c6:5d:53:24:43:f7:b8:c1:d4:
b1:b3:e7:a1:1f:f3:51:a2:4a:9c:45:27:42:5f:45:53:dc:3e:
fc:a9:9f:6c:10:6a:06:03:39:4e:36:cc:55:7b:69:48:d7:50:
f0:78:e5:5b:9a:4f:e7:9a:88:e1:1c:08:1a:93:63:2f:97:56:
f5:ca:af:6a:55:01:90:58:dc:76:5e:e1:d5:36:d6:13:a8:95:
d7:dc:cb:e7:b7:f5:78:f0:7c:92:24:de:76:1b:de:3a:99:9b:
90:e4:51:21:14:bb:8d:6b:b1:da:9a:93:a2:d4:b7:e3:94:38:
da:c1:74:79:be:1a:3d:73:c5:3f:87:61:2b:44:2f:12:3d:9f:
2b:93:5e:c9:55:bc:39:85:af:95:8e:39:7f:0a:47:0d:37:42:
78:64:e0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:46:36 2026 by rpki-client