Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/e2b50b-655c-4a72-b3be-74e93da9e8b4/1/KMFlZBE8T8-oCFhaOQq8uWHsZHs.roa
File: KMFlZBE8T8-oCFhaOQq8uWHsZHs.roa (raw, json)
Hash identifier: VCSHLCudz4lApF8feHK+GnnNjOvcyHovJnzXocJPghc=
Subject key identifier: 28:C1:65:64:11:3C:4F:CF:A8:08:58:5A:39:0A:BC:B9:61:EC:64:7B
Certificate issuer: /CN=c25997c6d1f1585d18615dcc06e6c06ebec4534b
Certificate serial: 01A0B8C13DB9157A0EFA5CB74480B22175CA
Authority key identifier: C2:59:97:C6:D1:F1:58:5D:18:61:5D:CC:06:E6:C0:6E:BE:C4:53:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlmXxtHxWF0YYV3MBubAbr7EU0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e2b50b-655c-4a72-b3be-74e93da9e8b4/1/KMFlZBE8T8-oCFhaOQq8uWHsZHs.roa
Signing time: Sat 19 Sep 2026 08:21:07 +0000
ROA not before: Sat 19 Sep 2026 08:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13301
IP address blocks: 164.37.48.0/24 maxlen: 24
2001:67c:fdc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e2b50b-655c-4a72-b3be-74e93da9e8b4/1/wlmXxtHxWF0YYV3MBubAbr7EU0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e2b50b-655c-4a72-b3be-74e93da9e8b4/1/wlmXxtHxWF0YYV3MBubAbr7EU0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlmXxtHxWF0YYV3MBubAbr7EU0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:c1:3d:b9:15:7a:0e:fa:5c:b7:44:80:b2:21:75:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25997c6d1f1585d18615dcc06e6c06ebec4534b
Validity
Not Before: Sep 19 08:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28c16564113c4fcfa808585a390abcb961ec647b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:a1:22:4b:0a:b7:f6:5a:59:b8:a9:b6:dd:
b1:ed:25:89:07:d1:1c:21:cd:ca:b1:eb:69:79:03:
74:b1:f4:45:a3:ce:44:b9:e2:6a:eb:83:22:68:ff:
21:06:50:0c:ff:1d:40:ad:95:65:26:42:90:95:ab:
ba:3a:75:48:0c:0f:cb:4b:b1:08:78:3a:c0:e7:7d:
0f:f3:c9:d7:97:19:eb:79:24:93:31:2d:3d:ea:c9:
84:54:ea:e1:1d:51:c7:38:60:c2:f8:22:e0:07:0b:
0f:f7:12:30:2e:c0:0f:72:05:de:22:d8:bd:61:fd:
5b:d3:36:89:f2:6e:bf:62:a9:f0:33:eb:ca:38:e3:
c0:0c:49:68:91:93:bd:b8:94:dc:3f:03:7f:6d:f5:
d7:d4:c3:e2:b2:06:e3:f3:ec:08:01:43:da:89:60:
de:f8:d6:c8:55:dc:ee:c4:c4:04:51:9a:b5:65:1f:
2b:63:bf:65:5d:89:6d:2f:ed:ca:c0:da:b0:a6:8e:
02:c7:70:d6:9a:13:7d:02:f7:5c:8f:f1:7c:70:a3:
09:3b:d5:ca:9e:84:d7:be:7d:9b:a2:d6:a8:12:12:
2a:84:a9:1c:60:98:e8:89:9f:5f:dc:0d:d1:16:76:
ab:63:85:1f:fb:bb:07:84:80:21:c5:fe:f9:5d:31:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C1:65:64:11:3C:4F:CF:A8:08:58:5A:39:0A:BC:B9:61:EC:64:7B
X509v3 Authority Key Identifier:
keyid:C2:59:97:C6:D1:F1:58:5D:18:61:5D:CC:06:E6:C0:6E:BE:C4:53:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlmXxtHxWF0YYV3MBubAbr7EU0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2b50b-655c-4a72-b3be-74e93da9e8b4/1/KMFlZBE8T8-oCFhaOQq8uWHsZHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2b50b-655c-4a72-b3be-74e93da9e8b4/1/wlmXxtHxWF0YYV3MBubAbr7EU0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.48.0/24
IPv6:
2001:67c:fdc::/48
Signature Algorithm: sha256WithRSAEncryption
ca:a2:31:65:1a:cb:c7:4c:0d:50:0d:bf:ea:65:64:5f:62:31:
50:48:dd:d8:5f:9d:9c:c4:b6:77:4d:36:0f:b4:7a:b1:7e:f5:
85:8d:ed:a3:25:ae:d9:17:bb:19:bc:4c:7d:b0:53:48:10:08:
8a:cb:35:e0:e2:98:85:2a:45:5f:42:c0:d0:bb:79:ef:79:da:
46:28:ed:e8:d3:d1:14:6c:e2:65:37:8c:a9:6c:25:15:62:02:
aa:27:64:60:29:dd:74:d6:f5:14:4d:96:99:2b:fa:27:d5:58:
75:ef:9f:38:40:1b:50:32:c8:85:20:98:45:d2:ce:33:52:4c:
61:32:63:8f:9b:14:d3:b2:89:98:e2:1b:2e:2d:40:40:21:4b:
3b:d6:c2:67:b5:90:78:38:6c:ad:19:fd:19:40:db:95:75:bc:
9f:31:02:3f:0e:e9:14:ed:fa:f4:74:d0:70:8d:a9:bf:cf:7b:
23:bb:90:77:26:0f:a6:85:6a:d5:12:66:89:d0:f2:8c:83:d2:
f1:8d:c8:a1:8f:97:b1:50:35:42:12:bb:7d:5f:66:98:20:65:
d3:61:b7:85:33:26:0e:15:29:a2:fe:c6:70:ee:d8:7c:1d:8a:
6f:db:e9:65:00:5a:15:bd:3b:fc:0a:71:38:62:d8:40:d0:ed:
ea:0c:b0:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaC4wT25FXoO+ly3RICyIXXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNTk5N2M2ZDFmMTU4NWQxODYxNWRjYzA2ZTZjMDZlYmVj
NDUzNGIwHhcNMjYwOTE5MDgyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGMxNjU2NDExM2M0ZmNmYTgwODU4NWEzOTBhYmNiOTYxZWM2NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsqhIksKt/ZaWbiptt2x7SWJB9Ec
Ic3KsetpeQN0sfRFo85EueJq64MiaP8hBlAM/x1ArZVlJkKQlau6OnVIDA/LS7EI
eDrA530P88nXlxnreSSTMS096smEVOrhHVHHOGDC+CLgBwsP9xIwLsAPcgXeIti9
Yf1b0zaJ8m6/YqnwM+vKOOPADElokZO9uJTcPwN/bfXX1MPisgbj8+wIAUPaiWDe
+NbIVdzuxMQEUZq1ZR8rY79lXYltL+3KwNqwpo4Cx3DWmhN9Avdcj/F8cKMJO9XK
noTXvn2botaoEhIqhKkcYJjoiZ9f3A3RFnarY4Uf+7sHhIAhxf75XTHtVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCjBZWQRPE/PqAhYWjkKvLlh7GR7MB8GA1UdIwQY
MBaAFMJZl8bR8VhdGGFdzAbmwG6+xFNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2xtWHh0SHhXRjBZWVYzTUJ1YkFicjdFVTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lMmI1MGItNjU1Yy00YTcyLWIzYmUt
NzRlOTNkYTllOGI0LzEvS01GbFpCRThUOC1vQ0ZoYU9RcTh1V0hzWkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lMmI1MGItNjU1Yy00YTcyLWIzYmUtNzRlOTNkYTllOGI0
LzEvd2xtWHh0SHhXRjBZWVYzTUJ1YkFicjdFVTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQApCUwMA8E
AgACMAkDBwAgAQZ8D9wwDQYJKoZIhvcNAQELBQADggEBAMqiMWUay8dMDVANv+pl
ZF9iMVBI3dhfnZzEtndNNg+0erF+9YWN7aMlrtkXuxm8TH2wU0gQCIrLNeDimIUq
RV9CwNC7ee952kYo7ejT0RRs4mU3jKlsJRViAqonZGAp3XTW9RRNlpkr+ifVWHXv
nzhAG1AyyIUgmEXSzjNSTGEyY4+bFNOyiZjiGy4tQEAhSzvWwme1kHg4bK0Z/RlA
25V1vJ8xAj8O6RTt+vR00HCNqb/PeyO7kHcmD6aFatUSZonQ8oyD0vGNyKGPl7FQ
NUISu31fZpggZdNht4UzJg4VKaL+xnDu2Hwdim/b6WUAWhW9O/wKcThi2EDQ7eoM
sLA=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:21 2026 by rpki-client