Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/KlsUbg9AMOo2OJW_BHZ60riJ1qs.roa
File: KlsUbg9AMOo2OJW_BHZ60riJ1qs.roa (raw, json)
Hash identifier: HzGNBLf/SBMeM+8Ti4aGamBNAQLw7dOBmNy1c8GLu28=
Subject key identifier: 2A:5B:14:6E:0F:40:30:EA:36:38:95:BF:04:76:7A:D2:B8:89:D6:AB
Certificate issuer: /CN=eeee046151c4c8c842836b46ea96844b589045f3
Certificate serial: 019CD2990A3462D3448CD7A2AD26B90B39DF
Authority key identifier: EE:EE:04:61:51:C4:C8:C8:42:83:6B:46:EA:96:84:4B:58:90:45:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u4EYVHEyMhCg2tG6paES1iQRfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/KlsUbg9AMOo2OJW_BHZ60riJ1qs.roa
Signing time: Mon 09 Mar 2026 12:36:10 +0000
ROA not before: Mon 09 Mar 2026 12:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205827
IP address blocks: 185.202.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u4EYVHEyMhCg2tG6paES1iQRfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:99:0a:34:62:d3:44:8c:d7:a2:ad:26:b9:0b:39:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeee046151c4c8c842836b46ea96844b589045f3
Validity
Not Before: Mar 9 12:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a5b146e0f4030ea363895bf04767ad2b889d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:c7:2a:f7:1b:28:53:93:1c:5d:b4:2f:59:
c8:4b:a9:33:db:6d:52:65:36:43:60:1f:68:71:a4:
47:68:41:2f:b7:f3:c3:26:7f:43:8e:7e:5b:f8:0c:
6e:5c:ad:67:1e:a0:3a:bd:36:36:72:96:1c:1d:ee:
cf:39:ba:4e:57:1a:19:59:24:0b:8c:7e:ae:69:61:
14:78:6f:48:5f:1b:7d:d8:b6:af:29:59:4f:44:00:
bf:9f:ae:9b:44:7b:1a:af:62:a3:d2:83:18:bf:5d:
41:a6:b9:96:fa:e3:88:81:14:d5:45:7a:07:1e:98:
1b:91:c2:fb:8c:8b:c0:55:f1:41:3f:5c:ca:b1:d2:
dc:e2:35:22:07:4c:a8:c8:4e:dc:30:d5:b1:dc:e4:
ac:c0:68:15:8a:cf:e6:33:ce:27:86:41:d9:d6:8a:
17:13:c5:0a:12:03:35:a8:08:8f:1c:c4:92:a6:96:
20:b5:8c:ed:64:aa:5f:b8:39:0b:e1:2c:18:51:41:
89:2c:8c:87:28:d5:e7:77:29:d8:12:36:72:e9:51:
b2:5d:fd:a4:f1:40:a1:21:7c:6d:8c:f3:d8:41:ac:
7c:b3:17:65:da:ab:9a:9b:f9:71:9d:a8:81:63:2b:
02:4b:85:a2:6e:0c:a3:c8:24:02:5a:2b:43:f8:58:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5B:14:6E:0F:40:30:EA:36:38:95:BF:04:76:7A:D2:B8:89:D6:AB
X509v3 Authority Key Identifier:
keyid:EE:EE:04:61:51:C4:C8:C8:42:83:6B:46:EA:96:84:4B:58:90:45:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u4EYVHEyMhCg2tG6paES1iQRfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/KlsUbg9AMOo2OJW_BHZ60riJ1qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.160.0/22
Signature Algorithm: sha256WithRSAEncryption
40:74:ab:64:39:2c:92:3d:db:48:5f:66:8b:54:a9:bb:a8:a9:
24:21:25:65:17:cf:5a:a6:3d:3a:61:6c:18:18:7f:bf:a7:f5:
51:a5:de:8d:45:e1:2e:f2:fd:ae:29:47:19:81:78:bc:b3:49:
39:ee:60:bd:a0:b7:70:ce:c6:d8:77:d2:d4:a1:6b:5d:13:97:
83:2b:a6:48:bb:76:a1:2b:83:21:17:b8:9e:08:20:82:62:c5:
65:08:d2:38:1d:a8:16:50:2d:8d:67:c0:b2:5d:6e:00:8d:e7:
59:71:4d:9f:85:67:31:9e:00:49:d7:87:67:cd:13:06:ef:b7:
0e:16:2d:b6:ea:7d:d8:22:70:e7:bb:c6:74:38:b9:ce:0c:bf:
73:9d:d9:2e:dd:66:89:19:81:da:db:98:9f:dc:55:14:bd:8b:
14:bd:13:a8:c1:f9:fd:fd:67:5a:c1:04:d6:2c:e8:85:df:bd:
c8:06:69:39:44:52:e1:4d:a7:7c:c1:25:1a:71:c6:ab:ca:b2:
5e:1b:63:3f:ed:4a:ea:7a:9a:9e:b9:fd:c5:c6:df:f3:c5:f5:
59:50:99:ea:db:fa:f1:1c:e0:79:06:7b:04:ad:09:18:3b:fb:
01:a6:3d:9e:b2:21:9b:68:d4:be:35:16:0a:43:bc:40:aa:71:
54:c0:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:16:23 2026 by rpki-client