Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa
File: KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa (raw, json)
Hash identifier: 14lNz1dQBEYnlCIOUgTsdTghcHSUoRp4iObiy4bcNE8=
Subject key identifier: 28:8F:CA:B8:E9:0C:D2:64:7F:A3:F9:5B:A0:5C:24:37:E6:E2:D4:59
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368FE964DFC616E0F0DDDE3957F67B5
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208111
IP address blocks: 45.135.212.0/24 maxlen: 24
45.135.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:96:4d:fc:61:6e:0f:0d:dd:e3:95:7f:67:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=288fcab8e90cd2647fa3f95ba05c2437e6e2d459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:b8:7c:f4:cb:00:93:10:c0:a5:44:b6:4a:
41:d4:93:7b:4a:14:a2:2b:f9:a4:5c:d4:2c:48:ae:
b8:07:a0:c8:54:1a:b4:5f:7b:51:cf:b7:47:1f:4f:
fe:b7:3f:71:01:6d:ee:f5:b3:cd:fe:5d:3b:45:7d:
cf:d7:ed:a8:b7:8b:82:a8:b4:7b:4d:46:02:aa:f1:
11:c9:0f:03:66:a0:a7:af:ad:cf:b1:6d:04:b4:de:
bb:69:d5:7c:7f:89:d5:c9:20:f2:f3:11:6b:f4:2c:
ca:48:8c:09:b3:d3:d6:e7:45:07:1b:54:b6:7f:12:
ff:f2:b9:1d:97:13:f5:89:1a:ef:dd:b2:d3:e4:b2:
75:9b:de:d2:d2:28:4d:6a:77:94:36:0a:d6:e1:7f:
8e:b2:9a:dd:4e:12:8a:3f:2d:3d:ce:67:ba:c0:d5:
dd:b4:ab:ca:5e:5f:d8:d2:2a:26:8b:5e:dc:5c:18:
c3:12:c8:4f:43:8e:bf:18:5a:a5:e7:25:91:fd:35:
ed:67:44:91:3d:cc:3d:92:d7:cf:bb:97:3b:1a:d5:
87:c2:0a:54:90:85:f6:44:94:c6:ee:83:92:0b:ea:
a7:1e:7b:2d:f6:a6:0d:0a:3d:78:dd:af:63:72:94:
1f:de:4a:49:fa:f7:85:1e:06:13:07:43:4d:6d:87:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8F:CA:B8:E9:0C:D2:64:7F:A3:F9:5B:A0:5C:24:37:E6:E2:D4:59
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.212.0/23
Signature Algorithm: sha256WithRSAEncryption
30:4b:bd:b4:cd:59:15:1a:f9:92:71:49:1e:14:56:23:ee:e6:
24:2f:90:53:af:c1:f4:ae:3a:4d:9e:48:7c:01:54:c8:52:bd:
38:c0:8a:6f:58:4f:dc:28:f0:0b:5e:34:ed:88:14:cb:5e:5b:
db:04:9f:54:54:79:41:0b:4c:d0:9f:99:3d:4b:37:90:5f:47:
86:e7:78:de:27:86:66:a0:cb:9f:02:3d:81:38:53:6b:5a:34:
9f:f7:f9:d3:32:66:0c:ef:63:3a:fb:76:99:bc:4f:42:81:78:
a4:77:28:2b:5a:63:3d:40:ec:5b:78:1d:90:9b:58:e3:89:ac:
8c:b6:f9:56:a1:5d:c3:7f:1a:64:9c:f7:5d:8a:d7:b5:35:64:
a4:0e:a2:8a:fc:97:08:e6:14:93:ca:bb:65:77:e1:e5:39:68:
df:a8:4c:fd:27:cf:4a:ba:ad:ab:01:2c:45:66:8e:04:f2:48:
0f:d3:29:61:e4:30:27:93:83:a7:a8:a2:a2:02:63:69:8f:e2:
17:f9:ea:ae:a0:27:24:98:4d:d9:30:75:a4:79:38:ee:67:8a:
31:36:d5:f0:1e:79:89:ff:62:ee:26:98:07:2b:e1:51:a4:e4:
b7:8b:c9:b4:0d:ba:cc:42:3a:a3:46:b2:2b:26:b1:ee:31:13:
81:15:cc:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaP6WTfxhbg8N3eOVf2e1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5
NzE5NDIwHhcNMjYwNzAyMTUxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODhmY2FiOGU5MGNkMjY0N2ZhM2Y5NWJhMDVjMjQzN2U2ZTJkNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsly4fPTLAJMQwKVEtkpB1JN7ShSi
K/mkXNQsSK64B6DIVBq0X3tRz7dHH0/+tz9xAW3u9bPN/l07RX3P1+2ot4uCqLR7
TUYCqvERyQ8DZqCnr63PsW0EtN67adV8f4nVySDy8xFr9CzKSIwJs9PW50UHG1S2
fxL/8rkdlxP1iRrv3bLT5LJ1m97S0ihNaneUNgrW4X+OsprdThKKPy09zme6wNXd
tKvKXl/Y0iomi17cXBjDEshPQ46/GFql5yWR/TXtZ0SRPcw9ktfPu5c7GtWHwgpU
kIX2RJTG7oOSC+qnHnst9qYNCj143a9jcpQf3kpJ+veFHgYTB0NNbYeXNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCiPyrjpDNJkf6P5W6BcJDfm4tRZMB8GA1UdIwQY
MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvS0lfS3VPa00wbVJfb19sYm9Gd2tOLWJpMUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYfUMA0G
CSqGSIb3DQEBCwUAA4IBAQAwS720zVkVGvmScUkeFFYj7uYkL5BTr8H0rjpNnkh8
AVTIUr04wIpvWE/cKPALXjTtiBTLXlvbBJ9UVHlBC0zQn5k9SzeQX0eG53jeJ4Zm
oMufAj2BOFNrWjSf9/nTMmYM72M6+3aZvE9CgXikdygrWmM9QOxbeB2Qm1jjiayM
tvlWoV3DfxpknPddite1NWSkDqKK/JcI5hSTyrtld+HlOWjfqEz9J89Kuq2rASxF
Zo4E8kgP0ylh5DAnk4OnqKKiAmNpj+IX+equoCckmE3ZMHWkeTjuZ4oxNtXwHnmJ
/2LuJpgHK+FRpOS3i8m0DbrMQjqjRrIrJrHuMROBFczp
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:12 2026 by rpki-client