Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/KCCXTiyEdgg9X9UWZ--_fhYVO_Q.roa
File: KCCXTiyEdgg9X9UWZ--_fhYVO_Q.roa (raw, json)
Hash identifier: 0RPtm2bqma6nOnpNbHsYWDjHVvYXOYQDlwmuFFsHb6M=
Subject key identifier: 28:20:97:4E:2C:84:76:08:3D:5F:D5:16:67:EF:BF:7E:16:15:3B:F4
Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial: 019D96C1A735DCA388E84ECBD6C5107F3A56
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/KCCXTiyEdgg9X9UWZ--_fhYVO_Q.roa
Signing time: Thu 16 Apr 2026 14:46:06 +0000
ROA not before: Thu 16 Apr 2026 14:46:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207627
IP address blocks: 185.225.224.0/24 maxlen: 24
195.253.243.0/24 maxlen: 24
2a06:4740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:c1:a7:35:dc:a3:88:e8:4e:cb:d6:c5:10:7f:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
Validity
Not Before: Apr 16 14:46:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2820974e2c8476083d5fd51667efbf7e16153bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:70:23:81:fa:64:1e:85:70:9a:a0:d3:b7:
e1:5a:30:e9:a7:2f:bb:c2:8c:e7:14:f6:16:65:78:
43:5d:3e:6e:0c:43:0f:d6:6d:ef:a6:5f:e8:42:1d:
ee:aa:40:fe:ea:23:c3:39:cb:9c:99:81:58:a3:74:
45:ee:cb:a0:72:57:1e:d7:47:51:83:82:2e:06:74:
cc:26:e6:6e:12:34:8e:85:2f:fb:c2:a1:ad:c9:14:
d4:56:f5:f2:7c:78:bc:0c:91:36:e4:a1:86:b4:25:
8c:57:35:e2:78:73:df:cd:c8:68:e2:0b:34:60:06:
71:47:c0:34:1d:44:91:e2:d8:80:75:0f:e1:41:a9:
94:ae:4d:7e:13:1d:77:5a:80:3f:9d:87:fe:52:4f:
68:8d:c2:82:74:5c:13:6a:45:b9:99:f2:c6:eb:d7:
7a:d7:65:50:84:48:de:f7:6a:28:56:5c:4b:c9:9a:
98:ac:1a:e0:b3:ac:4b:40:3e:f2:69:ee:b3:de:fa:
7c:ef:52:47:26:30:90:cd:75:59:92:e7:1a:51:83:
90:78:13:db:14:24:4c:f2:cf:65:c4:d5:d8:25:bf:
59:15:0e:8c:61:01:df:6e:56:39:84:48:13:10:45:
4e:fc:4d:4b:03:f3:cc:98:6d:87:7e:be:b6:3f:ec:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:97:4E:2C:84:76:08:3D:5F:D5:16:67:EF:BF:7E:16:15:3B:F4
X509v3 Authority Key Identifier:
keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/KCCXTiyEdgg9X9UWZ--_fhYVO_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.224.0/24
195.253.243.0/24
IPv6:
2a06:4740::/29
Signature Algorithm: sha256WithRSAEncryption
13:1a:3c:11:87:2d:70:19:b4:e4:fa:4c:bb:25:b3:06:66:c5:
10:f5:b7:40:ad:ae:27:ef:1b:a1:57:96:ff:aa:fd:69:d0:f2:
e4:af:c1:2f:c8:11:b0:4d:9a:3e:36:c7:e2:b5:7a:f2:ca:e5:
65:a5:20:4a:42:94:0b:e5:3b:e8:2e:3c:34:da:65:b4:21:98:
b5:c6:e2:81:32:63:25:7b:84:83:33:1c:52:d5:74:1c:f4:53:
bc:ec:98:8c:d0:32:3e:dd:a0:04:3a:64:80:c7:48:f7:2a:da:
db:5f:a0:89:e3:21:1c:5c:98:8f:a6:0d:97:76:b5:06:dc:a6:
b9:86:5d:21:8f:86:b0:76:3f:b3:ec:38:2d:19:ea:21:b6:e4:
2f:6b:66:d6:cf:01:b8:42:9e:ed:31:19:b1:d1:26:70:bd:21:
eb:eb:d5:f7:de:36:b1:b4:98:1f:6c:30:63:5d:09:06:0d:98:
9b:03:31:45:6d:29:fd:c0:6a:9d:88:55:6b:bb:33:5f:5c:f5:
72:57:76:6c:8d:ed:4b:d3:3d:f7:7a:9c:b1:22:3f:4d:ad:8d:
92:87:25:4f:e1:d2:90:fc:ae:5e:30:3b:d1:76:dc:8f:d8:94:
6f:36:a7:75:c4:8c:d4:04:64:2f:39:9d:65:4c:5f:6e:fa:fe:
93:51:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:00 2026 by rpki-client