Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/kl3oy-dFL14cqnAqsoTUT2p-gAs.roa
File: kl3oy-dFL14cqnAqsoTUT2p-gAs.roa (raw, json)
Hash identifier: 2IH7sBJVtOHKhrFUONXV2aGCQkjnVLJ+vB9vvY8IEzA=
Subject key identifier: 92:5D:E8:CB:E7:45:2F:5E:1C:AA:70:2A:B2:84:D4:4F:6A:7E:80:0B
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 019F363706BDA488FB85F29A90D7C68AE7BB
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/kl3oy-dFL14cqnAqsoTUT2p-gAs.roa
Signing time: Mon 06 Jul 2026 06:56:43 +0000
ROA not before: Mon 06 Jul 2026 06:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52073
IP address blocks: 185.143.241.0/24 maxlen: 24
185.200.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:37:06:bd:a4:88:fb:85:f2:9a:90:d7:c6:8a:e7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jul 6 06:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=925de8cbe7452f5e1caa702ab284d44f6a7e800b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:53:2d:22:51:60:68:a5:61:ad:ba:06:5c:
4c:2b:56:91:09:ff:a1:2b:ff:99:c7:83:4b:6d:c9:
ef:d3:c9:c8:f6:9f:c8:95:47:10:53:a6:7f:0a:b1:
d2:82:0a:f5:d7:b0:27:af:51:06:b7:b4:1c:a7:52:
c2:30:cf:0b:31:a0:00:dd:d7:f3:2a:2d:43:e8:54:
e0:db:f9:7c:75:55:86:6b:4c:a7:61:ab:b7:d0:98:
e3:78:e7:8d:bc:2b:69:ac:cf:99:ba:bf:89:a8:85:
7f:69:b4:b6:0b:88:fa:16:f4:90:0c:fe:72:a1:53:
1d:1d:4d:25:0d:41:c3:b9:bc:91:3f:e1:40:88:73:
29:b4:ab:10:9b:3d:d0:a2:06:ad:a0:22:12:9e:5c:
73:45:6e:cb:93:78:37:25:f5:5e:dc:a8:7c:1a:dc:
b6:f7:dd:ea:60:f5:cf:45:d3:c1:b0:9d:9a:ef:0b:
c8:91:64:84:61:77:c1:9d:a2:2c:f3:9a:f5:5f:3d:
29:05:75:e5:f9:76:fc:31:10:19:77:35:30:b9:51:
de:cc:6d:6f:41:ca:c4:dc:f4:8c:c0:86:09:c3:23:
3b:54:04:6c:c3:4e:0e:a4:3d:10:4c:17:ff:2d:5c:
55:28:eb:7f:1a:c2:ec:c5:e7:44:f2:d8:e0:b1:2f:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5D:E8:CB:E7:45:2F:5E:1C:AA:70:2A:B2:84:D4:4F:6A:7E:80:0B
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/kl3oy-dFL14cqnAqsoTUT2p-gAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.241.0/24
185.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d5:0f:8a:88:99:41:77:92:79:91:a1:03:69:b0:0e:c6:97:
28:04:5f:af:78:1b:fc:51:65:cb:57:57:e9:d0:6a:a7:b2:ab:
4d:ae:2f:17:c1:5f:4b:c1:b6:ed:3d:61:2d:a8:47:06:72:4f:
4e:ee:2a:24:88:85:b1:10:07:53:7c:87:95:72:5d:65:9c:9d:
c4:91:9e:3f:ec:ea:fb:79:2f:71:20:17:26:6d:cd:08:1a:7b:
c3:f3:df:7c:a6:c6:bb:2a:a2:a8:c9:29:08:43:55:d2:d4:31:
1f:7c:93:a2:81:c9:25:d6:70:1c:9a:96:ee:01:17:1d:12:a3:
4e:7d:0b:6e:35:fc:90:2b:42:67:05:de:21:dc:e7:84:db:ec:
88:a1:b9:ed:7b:69:68:6a:6a:74:6d:4c:ef:69:7f:40:20:31:
e0:38:2c:5d:5a:23:06:1c:b7:d7:d0:fc:37:f6:da:e7:fc:02:
f6:6f:7b:5a:98:52:56:94:4b:20:4f:3e:d6:2f:2b:4d:0b:e5:
63:f8:b1:6a:aa:52:bf:2f:32:9e:69:7a:3d:1a:1a:cd:0f:2f:
78:46:b9:d9:1a:b2:e1:bd:92:03:db:e3:24:69:a3:04:74:ba:
88:8d:30:92:84:3c:7c:6c:6d:3c:0f:5b:1c:79:2c:fb:cd:2c:
78:0d:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:30 2026 by rpki-client