Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/KTeFVOJgAkc9XqDAiOWYsxiQ62U.roa
File: KTeFVOJgAkc9XqDAiOWYsxiQ62U.roa (raw, json)
Hash identifier: 3HrheZTZBKhKnCXRTsORbyKJ8VVqCcH1NsTc4u4Dj6c=
Subject key identifier: 29:37:85:54:E2:60:02:47:3D:5E:A0:C0:88:E5:98:B3:18:90:EB:65
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D29596A6C4B5C6E9F81DA44F8CD2E0ECF
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/KTeFVOJgAkc9XqDAiOWYsxiQ62U.roa
Signing time: Thu 26 Mar 2026 08:53:38 +0000
ROA not before: Thu 26 Mar 2026 08:53:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142594
IP address blocks: 5.44.251.0/24 maxlen: 24
194.9.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:59:6a:6c:4b:5c:6e:9f:81:da:44:f8:cd:2e:0e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 26 08:53:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29378554e26002473d5ea0c088e598b31890eb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:d3:04:b6:56:f8:3e:3e:02:4f:32:46:22:
87:d9:de:40:64:67:f1:4e:97:48:54:f0:21:fc:4a:
14:9e:6f:c0:7b:25:12:e1:9b:f5:4a:a0:03:62:6f:
f2:82:54:8f:e5:54:4e:f6:f9:28:b7:aa:b1:fc:ff:
76:4f:53:d0:d5:a3:01:8b:5e:87:84:54:c9:d4:34:
77:fb:5b:90:91:7e:87:93:4c:79:bb:50:95:f0:b6:
16:52:a3:ce:26:6d:bc:01:ba:c6:28:ff:ed:aa:e1:
ac:82:06:df:72:30:ee:b9:4d:b9:da:84:51:5d:99:
40:31:eb:16:6b:1b:70:09:39:30:b0:19:43:58:3e:
44:68:3b:b9:52:ca:c7:a4:11:31:0a:a0:45:7a:34:
61:90:db:99:b4:c5:32:44:27:f2:0d:36:91:3e:53:
61:bf:09:81:b2:50:39:86:79:8a:20:ea:bf:4a:43:
a6:b5:c4:a5:57:95:22:d4:01:c7:80:ba:b3:55:e8:
f8:9c:63:7e:ca:55:4b:70:89:e2:ae:bd:47:36:28:
7a:71:2b:47:fb:c9:9c:08:17:77:96:27:1f:53:9a:
9d:ae:69:f7:37:54:21:42:27:4c:11:e0:f5:b3:10:
b1:01:83:2f:fa:93:7e:ec:df:64:3e:05:e2:2a:a5:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:37:85:54:E2:60:02:47:3D:5E:A0:C0:88:E5:98:B3:18:90:EB:65
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/KTeFVOJgAkc9XqDAiOWYsxiQ62U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.251.0/24
194.9.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:17:24:71:80:e4:51:34:ae:d2:69:b8:a4:4d:1a:5e:a4:5d:
d6:2d:3c:43:e8:7d:17:14:81:d0:2d:87:0b:75:b5:a3:34:14:
d2:6c:1d:68:53:a1:10:d5:15:8d:b1:6f:8a:4f:29:d2:b0:27:
21:c1:63:f7:af:25:a0:cf:60:bd:fc:db:1e:8f:cf:59:d1:b0:
cc:48:1c:8c:fb:7d:ff:3e:a4:d3:b4:de:76:ff:af:33:57:84:
41:17:43:ca:b3:48:35:0f:68:f1:26:59:c3:0c:40:2f:5c:bf:
9b:d4:6b:86:f7:f8:85:83:7c:0c:75:b0:d6:b7:16:fe:77:d0:
a6:bf:bb:65:7a:f5:fe:82:30:2b:47:b9:d1:fd:3c:f4:d0:8a:
79:50:f8:24:0c:ee:1a:19:fc:1e:2d:3d:42:47:d5:c3:94:a6:
31:5a:4d:a1:64:57:62:e2:fb:6d:16:22:b5:ab:61:ec:ab:fb:
7f:ac:73:6e:e9:f2:cb:04:8d:08:a6:20:4b:02:f5:c3:04:0e:
d2:a7:83:4f:d7:d7:67:97:1d:02:b2:07:2a:60:77:1e:55:9b:
28:7a:31:89:09:49:15:13:50:2a:d7:fd:ca:d3:37:a7:08:b3:
97:7f:74:4c:65:1a:ee:86:17:be:c4:30:c9:2e:b8:c4:57:47:
6b:05:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:38 2026 by rpki-client