Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/KFywMW4737-JPpo7ntDdVjcljY0.roa
File: KFywMW4737-JPpo7ntDdVjcljY0.roa (raw, json)
Hash identifier: y+0Jhvx7MYfdfSZW5SGIaISfaSBvz9VuHqmA13RqQx0=
Subject key identifier: 28:5C:B0:31:6E:3B:DF:BF:89:3E:9A:3B:9E:D0:DD:56:37:25:8D:8D
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019E92411E624049C05EA4A167DD2235041B
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/KFywMW4737-JPpo7ntDdVjcljY0.roa
Signing time: Thu 04 Jun 2026 10:50:01 +0000
ROA not before: Thu 04 Jun 2026 10:50:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198292
IP address blocks: 5.133.61.0/24 maxlen: 24
5.133.62.0/24 maxlen: 24
5.133.63.0/24 maxlen: 24
134.255.160.0/22 maxlen: 24
134.255.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:41:1e:62:40:49:c0:5e:a4:a1:67:dd:22:35:04:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Jun 4 10:50:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=285cb0316e3bdfbf893e9a3b9ed0dd5637258d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:24:6d:7c:da:c3:68:85:b5:f5:e7:3c:ef:
36:e1:7c:90:03:e5:31:03:6c:fd:12:2d:6a:96:66:
6a:df:69:22:59:bb:aa:a6:8b:a4:fd:0d:a1:91:d3:
57:4c:5d:be:2d:d3:f2:53:11:fe:0e:c4:a5:b7:e9:
18:f7:3e:bf:76:08:90:4e:32:59:72:87:fa:ce:15:
97:36:e1:78:aa:39:04:50:ea:88:9d:44:0b:4e:db:
91:71:5f:d8:9e:bd:dd:46:77:f0:cc:10:02:94:95:
90:0d:d9:4d:e8:a7:36:f1:31:be:55:93:4e:79:ba:
57:98:11:d6:5d:e5:88:ae:50:17:69:9b:05:30:ff:
26:e9:6b:0f:10:80:40:6a:79:9b:da:e6:62:81:8d:
da:7d:e4:cb:e4:f8:7b:4a:75:89:e8:2a:b7:c9:07:
aa:ab:2e:83:d7:05:f3:dc:df:91:14:0b:15:19:ab:
91:77:f4:65:65:9f:be:c9:89:d5:24:db:3c:08:6d:
82:43:a3:f1:30:fb:c8:d3:5d:e7:3a:4d:39:5e:53:
aa:58:e5:95:83:d9:4c:b5:5e:5c:b0:ba:b7:40:00:
57:09:85:42:f8:23:2c:a3:8a:fc:dd:1b:bf:f1:59:
1b:3b:b6:f9:e2:53:ff:2a:1d:9d:d5:6f:53:94:d1:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5C:B0:31:6E:3B:DF:BF:89:3E:9A:3B:9E:D0:DD:56:37:25:8D:8D
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/KFywMW4737-JPpo7ntDdVjcljY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.61.0-5.133.63.255
134.255.160.0/22
134.255.174.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b1:77:2d:1e:60:b1:42:26:37:eb:5b:73:01:68:8b:3b:11:
d0:eb:72:b0:f9:7e:13:81:27:ff:27:42:c6:00:9b:a5:93:2d:
26:f4:55:39:fc:60:48:92:98:df:b4:4e:7d:11:ac:f3:29:a6:
77:d2:de:f7:d5:6d:0c:b0:47:ca:a5:01:11:1a:ff:84:d8:10:
6a:bd:a1:88:b9:51:9f:e4:d5:17:60:6d:bf:23:b8:b0:c0:8d:
8f:bb:25:75:de:54:bb:03:79:24:f8:fa:66:4a:b9:a7:b9:30:
88:dd:94:55:59:b4:4c:b2:dc:8f:5f:5d:5c:3a:b2:3d:db:38:
24:59:c1:19:52:a7:20:2f:60:51:98:be:92:5e:fc:86:d3:53:
cd:a1:97:14:37:1b:9f:ad:85:5c:4d:4a:64:9b:9a:5f:ac:61:
e2:3b:08:e9:be:41:f6:d6:b9:8e:6d:fa:43:4c:f2:b7:e0:f1:
0d:f4:88:64:62:7e:9f:8e:a4:c9:38:62:20:d3:86:1f:da:d9:
75:88:e6:2b:d0:5b:0e:8a:c2:91:47:93:2c:33:48:23:13:52:
67:33:45:88:e0:33:c5:f2:8c:32:21:d0:f8:48:78:03:84:24:
a4:d9:b8:93:4e:13:8d:3d:91:16:49:7e:42:cd:d5:d0:28:1a:
e0:95:6d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:25 2026 by rpki-client