Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/KlHFCK89xwLjHOe31oPYT3QVqvQ.roa
File: KlHFCK89xwLjHOe31oPYT3QVqvQ.roa (raw, json)
Hash identifier: 90ae9iyLyNbPlfxlfFnCXvvdkQb3VowWkH1j8j6A0MQ=
Subject key identifier: 2A:51:C5:08:AF:3D:C7:02:E3:1C:E7:B7:D6:83:D8:4F:74:15:AA:F4
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019FA4040407D87E297793F162F6DAF10225
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/KlHFCK89xwLjHOe31oPYT3QVqvQ.roa
Signing time: Mon 27 Jul 2026 14:39:14 +0000
ROA not before: Mon 27 Jul 2026 14:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 109.122.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:04:04:07:d8:7e:29:77:93:f1:62:f6:da:f1:02:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jul 27 14:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a51c508af3dc702e31ce7b7d683d84f7415aaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:10:70:1b:31:01:e9:3f:e0:8c:83:c5:9e:
0b:91:54:81:43:ac:78:71:d2:ca:2d:7a:5b:95:b7:
92:43:4e:8c:09:26:0e:63:ed:82:8b:e8:e6:c8:f0:
02:24:e3:98:49:f0:91:f9:f9:2d:a1:3f:b5:82:e1:
40:1b:9a:e5:19:65:85:95:c3:f7:98:ae:14:ec:42:
74:88:6d:02:6b:78:ab:80:6f:6d:d3:fb:5e:05:72:
7e:d7:44:ad:7d:e0:95:23:89:3e:4f:b1:a4:df:55:
1c:04:ee:0b:97:b3:82:fb:e9:9b:a3:f3:c9:04:d5:
ca:c8:d0:2b:3c:cb:c1:bb:38:79:c6:71:04:d5:4a:
21:24:5c:8e:7a:62:50:17:76:ff:c8:55:39:a3:3b:
4e:da:6a:51:64:17:db:ea:b5:f1:60:ef:63:95:57:
54:b6:4c:15:29:b1:5f:45:89:58:45:a7:9b:04:52:
a4:23:1b:1d:f8:e5:88:de:bf:1c:8c:67:ed:1e:ca:
11:6c:d9:9c:22:bc:6d:93:01:44:66:2f:ed:8a:25:
31:eb:69:bc:0c:65:5d:56:d5:53:62:16:46:5b:32:
d0:51:06:3b:6b:1e:9c:01:19:ae:f5:84:7b:eb:61:
c4:0d:a9:0a:da:cc:3b:59:7e:ab:b6:8c:5e:d0:33:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:C5:08:AF:3D:C7:02:E3:1C:E7:B7:D6:83:D8:4F:74:15:AA:F4
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/KlHFCK89xwLjHOe31oPYT3QVqvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.56.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8d:39:83:4d:03:47:5e:3a:da:ea:7d:1d:c4:7d:95:e3:4c:
3f:2f:62:f8:e7:17:87:dc:87:ba:d3:27:38:f3:57:f0:26:48:
ab:db:29:02:db:09:44:25:00:ad:76:7c:88:72:97:b0:4f:cb:
ef:54:6d:67:2f:b6:19:ae:df:7e:c3:51:ac:5a:ef:81:60:5e:
c5:ee:3a:a5:da:01:3c:8c:83:ea:bd:e7:46:06:88:da:b2:e3:
3c:6a:1e:d0:97:bc:9a:bb:0f:51:b8:d4:89:69:38:70:af:fa:
21:08:f6:ba:72:ab:c3:e4:eb:ba:f0:5e:ab:ab:9b:ea:63:67:
06:08:87:0f:39:f8:41:11:bb:fd:c1:4b:9e:eb:35:06:7a:8c:
42:ef:13:7f:cb:9f:fa:7f:fe:e7:ff:d3:73:5e:15:75:39:8b:
d0:05:5b:09:af:d3:31:a0:b1:63:70:82:ce:49:de:e6:70:cd:
25:06:63:29:a1:f5:d0:c3:30:fa:60:4e:29:1e:d4:fe:09:2c:
28:51:02:df:40:66:7a:46:30:db:31:cf:8d:d4:78:e9:2c:af:
6e:35:ea:58:d0:fd:a6:6b:78:63:34:90:c0:de:f6:88:93:47:
a3:d9:88:4b:81:a2:99:a5:39:da:37:4f:b8:0c:aa:d4:ef:ba:
75:2e:b1:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+kBAQH2H4pd5PxYvba8QIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjYwNzI3MTQzOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTUxYzUwOGFmM2RjNzAyZTMxY2U3YjdkNjgzZDg0Zjc0MTVhYWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVsQcBsxAek/4IyDxZ4LkVSBQ6x4
cdLKLXpblbeSQ06MCSYOY+2Ci+jmyPACJOOYSfCR+fktoT+1guFAG5rlGWWFlcP3
mK4U7EJ0iG0Ca3irgG9t0/teBXJ+10StfeCVI4k+T7Gk31UcBO4Ll7OC++mbo/PJ
BNXKyNArPMvBuzh5xnEE1UohJFyOemJQF3b/yFU5oztO2mpRZBfb6rXxYO9jlVdU
tkwVKbFfRYlYRaebBFKkIxsd+OWI3r8cjGftHsoRbNmcIrxtkwFEZi/tiiUx62m8
DGVdVtVTYhZGWzLQUQY7ax6cARmu9YR762HEDakK2sw7WX6rtoxe0DPtKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCpRxQivPccC4xznt9aD2E90Far0MB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvS2xIRkNLODl4d0xqSE9lMzFvUFlUM1FWcXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo4MA0G
CSqGSIb3DQEBCwUAA4IBAQAZjTmDTQNHXjra6n0dxH2V40w/L2L45xeH3Ie60yc4
81fwJkir2ykC2wlEJQCtdnyIcpewT8vvVG1nL7YZrt9+w1GsWu+BYF7F7jql2gE8
jIPqvedGBojasuM8ah7Ql7yauw9RuNSJaThwr/ohCPa6cqvD5Ou68F6rq5vqY2cG
CIcPOfhBEbv9wUue6zUGeoxC7xN/y5/6f/7n/9NzXhV1OYvQBVsJr9MxoLFjcILO
Sd7mcM0lBmMpofXQwzD6YE4pHtT+CSwoUQLfQGZ6RjDbMc+N1HjpLK9uNepY0P2m
a3hjNJDA3vaIk0ej2YhLgaKZpTnaN0+4DKrU77p1LrH1
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:15 2026 by rpki-client