Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/KlPEOGtlB3i05KG_kS3O2_AxuUc.roa
File: KlPEOGtlB3i05KG_kS3O2_AxuUc.roa (raw, json)
Hash identifier: MxRgz1VBuPKPnUX3wXFuY/WvaJ5U9mjoah8+v68ieWM=
Subject key identifier: 2A:53:C4:38:6B:65:07:78:B4:E4:A1:BF:91:2D:CE:DB:F0:31:B9:47
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019F6F5E1D08E668997363156E3DC31698E2
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/KlPEOGtlB3i05KG_kS3O2_AxuUc.roa
Signing time: Fri 17 Jul 2026 09:17:46 +0000
ROA not before: Fri 17 Jul 2026 09:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35600
IP address blocks: 14.102.102.0/24 maxlen: 24
45.84.112.0/22 maxlen: 22
91.221.92.0/23 maxlen: 23
91.221.106.0/23 maxlen: 23
185.48.132.0/22 maxlen: 22
185.56.176.0/22 maxlen: 22
194.117.246.0/23 maxlen: 23
2001:67c:184c::/48 maxlen: 48
2a00:4780::/32 maxlen: 32
2a02:5520::/32 maxlen: 32
2a0e:ac80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:5e:1d:08:e6:68:99:73:63:15:6e:3d:c3:16:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jul 17 09:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a53c4386b650778b4e4a1bf912dcedbf031b947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:6c:4b:81:cd:81:b3:86:6e:1b:bd:00:45:
4c:e9:00:f2:b0:36:83:16:e0:e7:44:ea:19:eb:95:
8d:db:6f:31:da:d8:15:d8:05:78:8b:b6:93:0a:52:
8a:dc:48:48:9f:63:ac:12:49:8c:e3:ca:af:29:25:
d4:54:f4:39:5c:76:0d:d7:65:1e:2a:c4:c5:d1:e7:
c4:73:fa:f4:05:1f:ea:64:df:5a:3b:80:57:a9:fe:
3b:ef:b9:ad:19:57:46:45:9b:35:02:0a:a3:05:9b:
64:93:94:15:4a:10:36:ce:ea:44:55:65:8b:07:4f:
9a:5d:96:d4:e0:ec:36:96:6f:dc:25:52:68:8e:c4:
01:16:51:81:b3:66:b3:e7:88:e8:49:99:16:68:61:
de:2a:6b:b3:50:12:09:7e:33:58:4c:ee:ca:cb:0a:
94:f4:3c:0b:d5:1b:de:41:f7:6b:f9:b5:13:70:37:
07:8f:e2:9d:94:35:81:52:d6:2b:42:1f:bf:a2:ea:
73:31:f2:43:3e:af:71:94:97:e3:e8:06:ed:4d:44:
34:b8:cc:31:89:fe:2c:c9:fb:25:3e:02:07:62:08:
4e:40:ff:63:e2:c8:b3:70:54:50:93:76:28:5a:ba:
03:ca:76:b9:8e:91:4c:5f:14:f3:4e:ce:09:cd:fc:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:C4:38:6B:65:07:78:B4:E4:A1:BF:91:2D:CE:DB:F0:31:B9:47
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/KlPEOGtlB3i05KG_kS3O2_AxuUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.102.0/24
45.84.112.0/22
91.221.92.0/23
91.221.106.0/23
185.48.132.0/22
185.56.176.0/22
194.117.246.0/23
IPv6:
2001:67c:184c::/48
2a00:4780::/32
2a02:5520::/32
2a0e:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
65:dc:1c:2e:e5:d9:3b:d6:9c:7c:35:f8:93:5f:bd:66:2a:7e:
15:e9:98:45:7c:ab:a0:8f:d3:aa:18:43:b2:d9:78:1d:fc:84:
ab:8a:22:fb:f1:a6:f4:6e:91:9b:20:e6:7f:c0:dd:4e:5e:76:
8b:88:b8:f4:66:8f:eb:b9:3b:54:c6:b8:ad:22:a1:48:f7:24:
9a:e7:d3:71:ea:8d:a9:cd:1b:99:8d:b1:58:0d:23:fd:73:61:
b4:77:06:85:9c:77:af:46:fd:e0:94:e4:7d:9d:83:b2:14:4b:
74:16:5a:cf:75:13:92:71:b8:d7:4b:33:56:2c:a0:85:70:51:
90:b3:f9:dc:e9:77:bc:2d:27:ff:fb:5c:29:2a:72:64:d7:80:
02:87:53:bc:28:af:a6:ba:20:34:5f:91:cb:db:a5:51:76:14:
d1:a5:76:00:81:83:b2:43:74:bb:b3:28:04:2d:37:14:3e:44:
3f:6f:fe:a4:69:ac:8e:5f:8a:51:43:1a:f8:15:6b:9b:7b:92:
4b:15:e6:44:16:f9:0c:5d:e8:d6:76:3a:9b:bc:e0:f7:0f:45:
be:7e:e9:12:53:ee:80:4b:9a:73:bc:87:f1:f2:a7:63:ba:37:
b6:e3:6b:98:b7:09:58:0b:60:10:f2:e3:80:87:13:96:38:36:
03:30:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:55 2026 by rpki-client