Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa
File: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (raw, json)
Hash identifier: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=
Subject key identifier: 29:DA:C2:7C:B5:43:E7:0E:F2:12:C6:EA:44:D2:07:C6:74:41:57:55
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019D8D68AA61486EF92EF0B8CB8A8CDA4E7D
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa
Signing time: Tue 14 Apr 2026 19:12:20 +0000
ROA not before: Tue 14 Apr 2026 19:12:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214515
IP address blocks: 109.122.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:68:aa:61:48:6e:f9:2e:f0:b8:cb:8a:8c:da:4e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Apr 14 19:12:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29dac27cb543e70ef212c6ea44d207c674415755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:36:16:92:f3:ac:4a:e7:23:68:12:80:12:
e6:45:0f:e1:d4:8a:c9:46:82:03:1a:62:26:76:34:
16:1f:74:ff:34:bc:da:a8:ef:14:de:db:8e:c4:c0:
82:25:da:27:7c:99:cc:44:7f:47:1e:16:e4:38:fd:
f1:7a:a1:04:cf:95:1a:8d:e3:38:fe:7b:cc:26:64:
eb:eb:af:06:64:7f:2f:6d:d9:c9:f1:f3:e0:b4:d2:
01:5b:12:fd:39:45:d4:db:76:75:dd:28:c5:8d:99:
1a:ed:ee:33:b1:13:2b:eb:49:3c:f0:37:74:41:24:
4c:e4:9f:2a:16:55:46:00:7c:78:69:14:50:91:73:
30:6c:c1:78:1f:ba:0c:6d:f3:0e:cc:57:06:48:42:
16:1f:35:37:f7:f6:ff:33:5a:5a:3f:7b:61:50:1d:
fd:26:ec:e7:5f:e4:94:63:31:26:11:75:d6:c7:5b:
f3:5b:b3:6b:78:d9:9f:a1:7f:f7:bf:01:62:f0:1f:
c9:14:85:66:d6:8c:12:16:09:d0:2e:19:1b:45:fd:
7d:7d:2c:37:9d:2e:0b:6d:cd:64:69:e1:4d:a0:54:
ce:08:92:4a:65:f3:a8:c2:7a:33:4a:79:e8:44:df:
14:6b:66:8b:fe:9f:5a:52:b8:59:6e:18:fd:a3:5a:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:C2:7C:B5:43:E7:0E:F2:12:C6:EA:44:D2:07:C6:74:41:57:55
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.244.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a2:1c:7f:94:6c:b7:88:3d:ec:d4:1d:0e:3e:55:71:9f:12:
62:ff:9d:d6:a5:24:dd:61:c7:d2:b0:76:84:e4:a6:1c:aa:eb:
f9:0d:45:12:aa:4d:57:88:db:f2:3d:fc:b3:0a:7e:30:d7:d8:
8c:9b:31:89:c0:f6:a3:7d:b3:63:7b:a1:d4:fc:81:e7:2e:49:
a2:66:82:5a:e2:86:59:2a:9b:0a:43:c0:9f:4c:1f:5a:11:19:
89:08:d7:81:fb:f3:a8:fc:ef:e1:a2:8d:9a:1f:f5:c7:ec:81:
02:1d:fe:9c:74:d1:00:80:c9:9c:b5:e9:64:b8:48:d4:0c:5c:
9d:6c:1c:a0:c0:56:78:f8:c0:83:02:e4:2c:25:df:4c:11:59:
c2:e9:63:b5:e4:d4:93:cf:fe:e7:3a:4a:ec:31:0a:2e:ec:f3:
f6:cc:15:51:20:30:41:ca:12:6e:da:c6:90:cc:9c:21:57:44:
d1:7f:91:a9:e7:b4:80:8e:35:7e:e1:74:9a:ea:25:46:b8:aa:
93:13:44:c2:d7:4d:e9:cd:ea:7f:40:06:6b:6b:62:a0:71:50:
1b:c1:d6:c9:fd:c8:1d:8c:72:42:3e:ce:c2:ae:ac:75:d5:97:
4d:7f:06:c0:1a:89:c9:b7:c1:f7:83:f9:03:28:95:c3:05:86:
92:59:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:26 2026 by rpki-client