Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/K51zXkg1aSl_rsYaPgBKlZz7NZk.roa
File: K51zXkg1aSl_rsYaPgBKlZz7NZk.roa (raw, json)
Hash identifier: fiZ7r/he+qme26623UWVqiKQ/igOBcXXkogZZFlFQfg=
Subject key identifier: 2B:9D:73:5E:48:35:69:29:7F:AE:C6:1A:3E:00:4A:95:9C:FB:35:99
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019C7D813A394B34EEBAE4BA97766ED86ACD
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/K51zXkg1aSl_rsYaPgBKlZz7NZk.roa
Signing time: Sat 21 Feb 2026 00:02:26 +0000
ROA not before: Sat 21 Feb 2026 00:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47309
IP address blocks: 130.0.20.0/23 maxlen: 23
130.0.22.0/23 maxlen: 23
194.8.90.0/23 maxlen: 23
212.99.128.0/19 maxlen: 19
212.99.177.0/24 maxlen: 24
2a02:e240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:81:3a:39:4b:34:ee:ba:e4:ba:97:76:6e:d8:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Feb 21 00:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b9d735e483569297faec61a3e004a959cfb3599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:bf:43:77:87:cf:e2:a9:62:67:aa:bc:ca:
b3:be:e8:a0:09:14:be:a3:ba:cf:25:0f:24:d6:b6:
97:02:58:1e:93:1e:0d:89:9e:23:4f:28:14:01:9a:
c4:5c:f3:46:cc:92:ae:ab:6e:88:89:51:5c:5e:d1:
20:d3:61:a3:dd:7f:6c:0b:fd:d1:a5:e1:28:27:72:
20:5d:1e:9e:10:18:ab:0f:2c:ce:e9:db:a8:5b:05:
af:43:08:a6:1b:88:e1:de:53:74:07:f8:5e:05:57:
99:f4:29:c9:34:c1:9b:2d:14:50:cf:36:42:8b:5d:
b2:ef:4f:44:f2:ac:7b:4d:09:59:2c:7d:c9:a5:b6:
cc:14:4d:92:c8:db:2a:ee:51:2e:f7:01:4e:ed:d7:
27:47:c4:cf:79:5d:f6:21:b3:c0:88:5c:29:26:46:
c5:8a:9e:f4:b4:38:38:b0:65:de:55:e2:35:33:95:
51:fa:43:8e:01:d1:6d:e6:a6:99:40:b8:81:b7:9e:
f5:fc:e2:21:a2:c3:cd:94:02:7a:04:45:72:f0:ef:
8a:da:9a:62:ad:bb:7f:5e:0d:82:a3:7f:0b:1a:66:
2f:81:5f:bb:9b:a9:70:38:a9:e3:80:77:bb:cd:46:
22:c6:32:85:66:8f:a9:a4:f9:aa:c3:f9:d5:10:bc:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:73:5E:48:35:69:29:7F:AE:C6:1A:3E:00:4A:95:9C:FB:35:99
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/K51zXkg1aSl_rsYaPgBKlZz7NZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.20.0/22
194.8.90.0/23
212.99.128.0/19
212.99.177.0/24
IPv6:
2a02:e240::/29
Signature Algorithm: sha256WithRSAEncryption
60:c8:d0:c0:59:1b:8d:6d:c3:2d:8e:46:4f:d7:e2:c6:b4:0f:
43:2d:7a:d3:f2:b3:d5:4f:00:7e:81:a2:1f:23:95:04:aa:9e:
02:2c:1b:78:9e:9b:ca:63:a2:7b:d8:81:a6:fd:0a:86:cb:62:
ae:28:1d:60:bb:0d:9f:81:c8:ea:8f:91:5e:85:22:ad:cb:fd:
03:4c:55:bf:46:44:91:bf:b1:08:60:ca:a0:8f:67:0b:2f:78:
4c:6c:31:b7:d9:67:ea:96:0c:d1:b5:05:7a:07:c0:1b:cc:3a:
43:72:7b:2d:49:bf:2e:86:99:92:0e:73:c3:05:ab:ce:8c:54:
08:31:4b:0c:24:8a:a8:52:cc:ac:bc:eb:df:56:8a:80:9f:9b:
be:8f:65:90:3a:d8:87:f6:a4:f6:57:d9:4f:b5:a2:27:0c:dc:
92:e4:86:36:6e:9d:d3:cd:92:a4:cd:ef:34:13:41:c7:6d:a5:
2b:39:a3:6f:64:7a:c2:8a:c4:82:30:78:84:b7:4c:85:0f:4e:
69:38:ae:68:6c:01:6a:1a:9a:e3:3f:f0:cc:a0:ec:ae:f9:89:
fc:1b:f5:21:44:1e:9b:7f:a0:45:1c:e4:17:4f:eb:10:f1:16:
9e:76:c1:a0:4e:cd:9c:fd:9d:ed:b5:1a:7d:f0:82:24:a9:e9:
f1:d5:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:37:43 2026 by rpki-client