Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/kdld6jPS4h7qCb7yETrdIyonX4I.roa
File: kdld6jPS4h7qCb7yETrdIyonX4I.roa (raw, json)
Hash identifier: TsAE5GMjgX+T1Uu8DxhOV4EuhDXdBpOqPFL5SGq4GAc=
Subject key identifier: 91:D9:5D:EA:33:D2:E2:1E:EA:09:BE:F2:11:3A:DD:23:2A:27:5F:82
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019E3B589E3D9E4E90B62D2AC7C18AF92C35
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/kdld6jPS4h7qCb7yETrdIyonX4I.roa
Signing time: Mon 18 May 2026 13:48:43 +0000
ROA not before: Mon 18 May 2026 13:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211522
IP address blocks: 77.105.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:58:9e:3d:9e:4e:90:b6:2d:2a:c7:c1:8a:f9:2c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: May 18 13:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91d95dea33d2e21eea09bef2113add232a275f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:1e:e8:4b:37:57:40:6b:c4:24:41:ef:a3:
a6:b9:ff:da:4e:c8:a3:72:b2:33:1b:79:6a:df:43:
18:97:b5:fc:4f:c5:85:71:5a:ab:30:4d:b0:4a:65:
b4:f3:a0:28:be:ef:d5:ca:d2:c6:0f:f4:7b:fb:cb:
cf:5a:c9:9b:e5:30:89:67:d6:3f:0d:bb:87:13:b2:
f8:46:4a:f4:e9:01:0b:cf:8e:a4:1d:83:ce:c7:2f:
4d:8e:f8:2d:8b:ac:b0:5c:37:02:2e:e2:7a:4f:de:
cb:5c:9d:d3:80:6e:e2:dc:47:a6:fb:02:7d:75:42:
0a:50:36:5e:8f:cf:d7:7d:f8:92:6a:35:c0:bc:d1:
82:c3:9f:66:4c:3f:75:a6:be:16:4a:20:de:47:8a:
27:ac:03:72:e3:3f:69:7c:d4:c7:e1:37:3b:75:eb:
4f:87:7e:af:c9:7b:ce:6f:2b:1b:5e:5c:6b:78:d9:
3a:69:0d:f3:d0:2a:3b:64:c4:82:08:73:07:86:c5:
b3:6e:00:a8:52:0b:30:fb:81:c2:ee:9d:5b:2e:b7:
6f:76:7a:1f:2e:67:6a:a7:c5:d6:0e:79:92:92:36:
64:62:34:4e:de:59:4f:84:39:19:b8:f5:d2:5c:f6:
e6:7a:14:9a:f5:9f:ec:4b:8f:fd:6c:9e:58:32:57:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:5D:EA:33:D2:E2:1E:EA:09:BE:F2:11:3A:DD:23:2A:27:5F:82
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/kdld6jPS4h7qCb7yETrdIyonX4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.146.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6e:b4:9d:a7:46:ee:c6:d7:00:05:52:77:24:d5:62:b8:8b:
df:7a:e9:06:47:c6:2d:38:59:20:4e:0f:67:eb:bf:40:2f:20:
b6:30:a7:50:6e:83:e7:29:6b:36:55:83:e8:65:28:24:a5:2d:
2b:ac:6d:a4:50:7d:8d:79:21:10:54:95:eb:3d:b3:5c:72:6e:
5c:a4:ec:1b:21:94:20:15:23:40:2a:45:20:ea:6d:54:82:8c:
f0:5c:ce:8a:88:f8:4d:78:55:1d:a4:3e:50:81:59:d2:40:73:
50:74:ea:40:ca:be:ea:ba:9d:88:97:78:17:24:19:80:d1:4f:
df:5b:3b:fa:3e:c9:81:09:86:1c:e0:88:ad:37:a0:59:81:2b:
46:60:51:cc:0d:af:44:5c:a3:71:5f:9e:69:a4:5e:fc:59:29:
65:fc:03:6a:99:53:3a:6b:cc:9d:0c:b1:e4:9f:12:ad:31:5b:
c6:2f:14:70:41:47:c8:12:cd:f9:d4:a2:80:99:b1:66:86:c2:
a2:df:99:ae:24:07:78:21:38:f0:09:68:1a:93:e1:af:d5:6b:
d8:af:b9:4b:67:97:e2:66:aa:f3:59:90:99:36:cb:b0:90:19:
49:8b:bc:39:43:cc:35:fb:2f:da:7e:4f:d3:f9:f0:32:51:ba:
d5:59:fb:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ47WJ49nk6Qti0qx8GK+Sw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw
MGM5YTQwHhcNMjYwNTE4MTM0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWQ5NWRlYTMzZDJlMjFlZWEwOWJlZjIxMTNhZGQyMzJhMjc1ZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpUe6Es3V0BrxCRB76Omuf/aTsij
crIzG3lq30MYl7X8T8WFcVqrME2wSmW086Aovu/VytLGD/R7+8vPWsmb5TCJZ9Y/
DbuHE7L4Rkr06QELz46kHYPOxy9Njvgti6ywXDcCLuJ6T97LXJ3TgG7i3Eem+wJ9
dUIKUDZej8/XffiSajXAvNGCw59mTD91pr4WSiDeR4onrANy4z9pfNTH4Tc7detP
h36vyXvObysbXlxreNk6aQ3z0Co7ZMSCCHMHhsWzbgCoUgsw+4HC7p1bLrdvdnof
Lmdqp8XWDnmSkjZkYjRO3llPhDkZuPXSXPbmehSa9Z/sS4/9bJ5YMleHpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHZXeoz0uIe6gm+8hE63SMqJ1+CMB8GA1UdIwQY
MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt
MTVmYzBiNjhmODQ0LzEva2RsZDZqUFM0aDdxQ2I3eUVUcmRJeW9uWDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0
LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWmSMA0G
CSqGSIb3DQEBCwUAA4IBAQBobrSdp0buxtcABVJ3JNViuIvfeukGR8YtOFkgTg9n
679ALyC2MKdQboPnKWs2VYPoZSgkpS0rrG2kUH2NeSEQVJXrPbNccm5cpOwbIZQg
FSNAKkUg6m1UgozwXM6KiPhNeFUdpD5QgVnSQHNQdOpAyr7qup2Il3gXJBmA0U/f
Wzv6PsmBCYYc4IitN6BZgStGYFHMDa9EXKNxX55ppF78WSll/ANqmVM6a8ydDLHk
nxKtMVvGLxRwQUfIEs351KKAmbFmhsKi35muJAd4ITjwCWgak+Gv1WvYr7lLZ5fi
ZqrzWZCZNsuwkBlJi7w5Q8w1+y/afk/T+fAyUbrVWfsM
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:45:20 2026 by rpki-client