Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/KLKSPBmIoAckM_2zX1kcfv1RrIA.roa
File: KLKSPBmIoAckM_2zX1kcfv1RrIA.roa (raw, json)
Hash identifier: e5cmcWcfsQcMYd5C3G20wyHPZjtC4smNjex/8EyXnIs=
Subject key identifier: 28:B2:92:3C:19:88:A0:07:24:33:FD:B3:5F:59:1C:7E:FD:51:AC:80
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01A1A6BA23B9250B0095E9DC841ED7C388A7
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/KLKSPBmIoAckM_2zX1kcfv1RrIA.roa
Signing time: Wed 04 Nov 2026 13:22:59 +0000
ROA not before: Wed 04 Nov 2026 13:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219521
IP address blocks: 84.54.13.0/24 maxlen: 24
176.98.41.0/24 maxlen: 24
185.127.42.0/24 maxlen: 24
193.31.116.0/24 maxlen: 24
213.226.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:ba:23:b9:25:0b:00:95:e9:dc:84:1e:d7:c3:88:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Nov 4 13:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28b2923c1988a0072433fdb35f591c7efd51ac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:b3:7e:ec:f1:4c:9d:08:1a:e4:3f:c6:1f:
01:a2:8d:ca:d2:e1:31:27:44:24:de:75:d1:48:e4:
1d:c9:40:3b:af:b1:94:b3:e3:d7:5b:8c:bb:c1:75:
46:ac:3b:fd:0c:cd:b5:96:5d:9c:b7:e3:2d:63:94:
f4:d8:42:a6:89:ee:32:71:98:35:05:88:ab:6d:01:
40:11:ff:f3:3b:9a:8b:ce:e1:84:fc:60:9b:58:42:
e2:31:0a:44:8a:87:2d:29:b9:32:7a:fe:7f:93:bf:
85:09:ea:95:69:ba:7b:9d:3a:c5:ef:2d:72:26:59:
89:01:68:be:7a:d4:be:a6:c9:99:1d:ee:31:c8:8e:
e0:90:fd:f4:20:58:1b:8e:9c:4e:62:9e:22:89:ab:
b1:95:36:4c:bf:0d:b7:63:c8:f0:73:25:66:e7:7c:
32:30:14:33:d1:5e:cc:68:0c:62:c0:19:e7:97:57:
ed:97:ed:2b:25:e7:10:5f:3f:4f:33:51:74:89:c1:
a9:3a:45:1f:b3:16:50:49:30:b4:b6:b8:72:73:77:
e7:89:d9:8b:9b:46:bb:ea:c7:01:c0:7c:2b:6f:69:
00:70:bc:93:66:e2:cc:4a:b3:13:ab:21:54:d0:0d:
7b:0a:71:42:70:da:0e:a4:f8:42:8a:61:4a:dc:db:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B2:92:3C:19:88:A0:07:24:33:FD:B3:5F:59:1C:7E:FD:51:AC:80
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/KLKSPBmIoAckM_2zX1kcfv1RrIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.13.0/24
176.98.41.0/24
185.127.42.0/24
193.31.116.0/24
213.226.119.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2b:75:79:ed:09:d1:8a:b2:4e:7e:f1:31:9d:48:c7:f0:fb:
d1:e8:e9:87:f7:32:c4:09:39:dd:d4:2f:3f:34:d1:3e:f7:44:
48:46:df:bd:c0:75:f8:d7:1e:cf:76:22:d3:c7:e8:bd:96:e3:
bb:23:16:4f:30:57:17:cb:ba:cd:2d:b7:74:4f:ec:d4:01:14:
9b:40:2c:d6:83:ba:99:24:02:ac:b2:70:82:b6:00:de:72:8f:
89:04:84:db:f0:ae:c7:bb:8c:0f:c9:72:ee:ef:15:57:bd:1d:
ca:71:5f:3f:f1:da:48:45:b8:dc:e4:0b:50:a9:e0:75:12:1e:
e9:b2:ee:5d:28:8a:16:ad:dd:2e:7b:92:41:58:d3:ee:55:77:
66:0c:6a:3d:d0:16:c2:06:a6:7c:40:b9:1b:d4:1d:a0:9f:d5:
cf:e0:6d:1a:7d:16:4e:c1:57:a0:80:ad:b2:97:ff:c6:48:c3:
36:fd:f9:f4:c9:4c:03:e5:be:95:10:88:5c:34:d1:d8:d0:63:
89:50:d2:cf:df:2a:13:51:08:31:bb:d5:16:65:34:32:03:38:
d9:b0:1f:ba:7a:42:08:9b:bc:92:a5:83:77:89:95:b0:94:64:
ca:bd:44:52:4e:b9:1a:a7:ad:a5:66:46:15:62:0e:d8:4c:18:
29:7d:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:11:59 2026 by rpki-client