Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/klrosDEOjckTGs7uNWRpWVh-PXA.roa
File: klrosDEOjckTGs7uNWRpWVh-PXA.roa (raw, json)
Hash identifier: Mee86lzuSd1BMBKUUa6c68fXrs93E31ysp5BpoC8Y9E=
Subject key identifier: 92:5A:E8:B0:31:0E:8D:C9:13:1A:CE:EE:35:64:69:59:58:7E:3D:70
Certificate issuer: /CN=2562225d32c20db0b81e582015b7be5c3e0996b4
Certificate serial: 01A01A5EAE3173F26EB3EB4CA3C58A90367C
Authority key identifier: 25:62:22:5D:32:C2:0D:B0:B8:1E:58:20:15:B7:BE:5C:3E:09:96:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/klrosDEOjckTGs7uNWRpWVh-PXA.roa
Signing time: Wed 19 Aug 2026 14:13:27 +0000
ROA not before: Wed 19 Aug 2026 14:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51790
IP address blocks: 198.60.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:5e:ae:31:73:f2:6e:b3:eb:4c:a3:c5:8a:90:36:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2562225d32c20db0b81e582015b7be5c3e0996b4
Validity
Not Before: Aug 19 14:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=925ae8b0310e8dc9131aceee35646959587e3d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:dd:00:de:f6:e9:a4:9c:86:9d:57:ee:7b:
f3:90:77:a1:af:59:b2:ed:ce:ce:87:04:7b:9d:aa:
71:01:2e:01:05:d1:da:fe:b9:d4:cb:e5:0e:c8:40:
a9:d6:fc:31:aa:51:b3:7d:a1:99:0e:7a:d2:f6:d0:
fb:26:57:16:91:89:19:10:4c:72:93:b0:7d:d9:e4:
a4:91:7a:df:49:5d:88:69:d1:1f:c4:b1:4a:3c:5e:
37:0f:17:6d:f8:13:67:b6:64:69:95:a3:e6:c6:3c:
ca:d9:98:35:7f:d3:a4:bb:5b:2e:14:b0:1e:10:0d:
10:17:4e:6a:2c:59:5f:72:f2:74:5a:7c:1e:77:e2:
d3:31:99:85:dd:30:d7:61:65:6d:94:80:73:3a:0b:
cc:5c:e9:38:99:7d:44:57:e0:08:54:92:00:dd:c9:
e9:c6:f1:93:d8:12:f6:fc:1c:1f:5d:ed:d0:7a:1d:
05:bf:4b:7a:8c:53:40:75:ff:58:0a:e9:e5:74:74:
2a:95:dc:20:d2:bc:18:d5:28:ae:f7:00:8d:9d:8e:
dd:ab:38:8c:62:33:9e:d8:c2:d8:5a:23:41:31:1d:
4c:cc:4d:85:d4:e3:36:66:28:12:5e:07:55:50:2e:
d4:50:a8:8a:89:b8:49:dd:d9:2d:5a:54:3e:94:2d:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:E8:B0:31:0E:8D:C9:13:1A:CE:EE:35:64:69:59:58:7E:3D:70
X509v3 Authority Key Identifier:
keyid:25:62:22:5D:32:C2:0D:B0:B8:1E:58:20:15:B7:BE:5C:3E:09:96:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/klrosDEOjckTGs7uNWRpWVh-PXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.60.216.0/24
Signature Algorithm: sha256WithRSAEncryption
70:06:98:cd:b9:74:0f:70:6f:a8:e6:e5:04:e5:08:8d:18:6a:
9e:ab:3a:0f:5a:7c:16:65:03:38:c4:f3:0f:36:d1:2f:e2:c8:
e4:35:88:fe:82:10:b5:87:22:e8:60:1c:b9:f4:51:0f:57:8e:
f4:94:f4:ee:7d:c9:93:67:dd:6b:0b:61:fb:a7:77:f7:16:a3:
41:71:6c:84:75:69:0e:39:d3:e6:c0:97:3c:56:8f:10:2c:36:
be:49:6d:c9:cb:99:5c:aa:d0:ed:14:49:a8:d9:28:7c:56:ee:
69:cf:ce:4c:71:95:9d:dc:8d:27:0d:3b:0c:de:65:b4:2b:8c:
59:f1:b4:84:f0:e1:2f:0a:37:f7:44:dd:22:98:03:63:01:2f:
cd:31:b3:77:17:82:93:2a:66:7a:fd:ed:a2:59:ac:df:c5:3e:
37:39:4a:49:1b:24:c7:5b:4a:17:7e:bb:7d:4d:0f:f0:22:23:
cd:56:e0:38:27:96:73:84:1d:67:4f:ba:0c:02:9f:a5:cb:47:
b2:7a:f8:2b:e6:2b:65:7c:e7:0a:39:b7:c4:ff:aa:1c:58:1b:
55:cd:d3:a5:88:17:6b:7d:59:71:67:1b:9f:1c:51:4a:22:0d:
2d:7a:14:ff:7f:6f:e3:30:03:10:2e:a7:a7:95:9b:08:e2:5c:
6f:4b:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:47 2026 by rpki-client