Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/KlidTRE0Ld2vhd7LchTBrjDXtCM.roa
File: KlidTRE0Ld2vhd7LchTBrjDXtCM.roa (raw, json)
Hash identifier: oYu7FrAcgyOmxnR9Y/a2v7qA05r9PwyCGoG1X5C3eMU=
Subject key identifier: 2A:58:9D:4D:11:34:2D:DD:AF:85:DE:CB:72:14:C1:AE:30:D7:B4:23
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019D9A50D0067F76B3CEB9B8297865B491F9
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/KlidTRE0Ld2vhd7LchTBrjDXtCM.roa
Signing time: Fri 17 Apr 2026 07:21:20 +0000
ROA not before: Fri 17 Apr 2026 07:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8896
IP address blocks: 81.29.32.0/20 maxlen: 20
2a03:9a00::/29 maxlen: 29
2a03:9a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:50:d0:06:7f:76:b3:ce:b9:b8:29:78:65:b4:91:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Apr 17 07:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a589d4d11342dddaf85decb7214c1ae30d7b423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:2f:e1:d2:58:71:75:e4:28:5a:34:9e:3e:
f7:66:19:2b:98:6f:c7:68:8c:a3:c1:e4:33:e6:69:
a3:38:e9:65:3f:23:9b:40:01:49:94:6d:dc:3e:ba:
e8:e6:3f:59:74:3d:0d:ff:f3:65:f3:05:c6:8e:e5:
8e:a1:7b:2d:41:be:2d:52:cd:d5:11:f0:5f:fc:49:
40:08:38:63:2e:f8:f7:f1:bc:ec:39:59:c0:8c:00:
dc:3f:db:65:3b:53:bb:60:d0:65:3d:4f:6b:d9:95:
01:d3:f9:a3:2c:90:70:61:d4:35:b9:96:3e:20:09:
3b:3f:c5:35:a1:27:a6:a9:c4:b8:c3:c1:12:b7:49:
94:3b:8d:69:64:11:80:8a:fb:14:4c:75:96:69:bf:
f6:55:ef:0e:31:52:f8:6f:9f:39:6e:f2:e2:d7:0e:
48:60:0a:21:6e:c4:46:e8:02:de:2e:fa:37:e7:54:
69:d9:38:45:59:2e:b5:82:25:e8:2a:f1:50:d5:38:
1b:5a:69:09:4c:60:71:4e:de:4e:73:9a:6b:35:e6:
fe:51:f2:a5:c3:03:92:38:fc:23:cc:f6:12:6d:15:
91:3f:d3:e3:74:ab:d2:49:4c:33:a4:85:f7:bb:ff:
a0:c0:69:cc:58:03:45:2e:c3:81:61:c2:04:2a:a2:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:9D:4D:11:34:2D:DD:AF:85:DE:CB:72:14:C1:AE:30:D7:B4:23
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/KlidTRE0Ld2vhd7LchTBrjDXtCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.32.0/20
IPv6:
2a03:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
46:0c:7e:9a:af:4c:29:5a:5a:cd:d1:24:bc:fc:4b:06:e0:e1:
e4:15:4a:ed:bd:cd:fa:57:7c:10:eb:15:90:7e:9f:22:2d:04:
f5:8e:c3:31:cf:d2:db:3c:2d:0b:71:c5:0c:3b:c0:a4:8a:df:
20:09:b5:be:fc:45:23:ac:b7:4d:6d:dd:07:f3:5c:ea:81:d3:
84:14:29:af:d8:f9:7f:ac:13:32:b4:f8:b2:8b:72:db:08:9d:
07:c8:5a:4b:d3:28:44:c1:19:d6:4c:57:9b:42:7e:23:32:6b:
94:f9:3e:4f:b8:2d:11:7f:c0:d3:76:a1:91:a9:2e:67:50:ac:
79:e7:ee:4c:c3:c2:9a:a4:ca:6f:49:10:ad:ad:5c:eb:fb:52:
61:47:58:4e:41:bc:4d:e0:6a:ae:5e:08:b0:03:b7:50:b2:78:
e3:67:6a:c8:c2:3d:bb:63:20:03:c0:e0:8d:ce:3a:fd:22:9a:
4f:33:c6:d5:87:c2:c1:3f:83:27:d2:72:35:d9:84:3c:dc:4e:
c8:59:3e:c7:43:c3:ad:f2:15:19:c5:4c:fb:fa:56:a3:d5:74:
02:e1:b9:c4:86:71:7c:e6:77:06:ed:6f:16:b8:33:29:8b:1b:
ab:05:53:ca:dd:fc:e0:6d:89:b3:4f:48:06:a1:0c:e4:89:c2:
bf:1e:b1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:30 2026 by rpki-client