Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/kELckgtwVoSvJeEmqDzRwJ_w8M4.roa
File: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (raw, json)
Hash identifier: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=
Subject key identifier: 90:42:DC:92:0B:70:56:84:AF:25:E1:26:A8:3C:D1:C0:9F:F0:F0:CE
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019FC89E299EF2ABB2D4FD4AA523C2A1F0A9
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/kELckgtwVoSvJeEmqDzRwJ_w8M4.roa
Signing time: Mon 03 Aug 2026 17:13:56 +0000
ROA not before: Mon 03 Aug 2026 17:13:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 5.182.102.0/24 maxlen: 24
88.218.101.0/24 maxlen: 24
195.206.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:9e:29:9e:f2:ab:b2:d4:fd:4a:a5:23:c2:a1:f0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Aug 3 17:13:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9042dc920b705684af25e126a83cd1c09ff0f0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:0e:0d:d9:5c:2a:91:83:6d:d9:44:4d:32:
c4:b7:6d:62:85:aa:56:0d:92:cb:67:3f:f6:31:b2:
65:05:e5:c7:21:2e:c7:0e:dc:8f:71:88:29:21:05:
59:ed:02:86:da:2b:ed:0a:a1:45:ee:fa:ef:c6:c9:
e2:e0:c2:f0:42:c4:d8:4f:7d:29:c6:54:45:c8:cc:
12:24:87:30:73:ec:12:93:33:b2:29:16:e4:1b:01:
29:41:b0:6d:c8:70:6a:4d:d7:1b:db:5d:2e:e0:0a:
ea:4e:a2:a6:49:0e:ec:76:2b:1b:96:71:bf:7f:ca:
e9:49:09:16:0b:4c:a1:ce:1c:11:fe:c8:39:38:ba:
46:42:d4:10:10:4c:db:a1:9e:f5:3c:a5:f7:2c:6d:
e6:02:d5:08:2f:9e:6b:55:21:b1:e7:be:3a:72:ce:
77:ab:09:66:d9:a8:2d:cf:44:ed:1b:ff:c0:7a:b0:
bc:58:cc:f9:00:a4:a6:2e:9a:ac:cc:28:25:82:50:
31:ca:0a:87:77:7a:79:b7:dd:c9:41:e7:71:22:0b:
d4:b5:24:27:3b:43:80:97:78:4e:b0:c9:0e:29:95:
3c:1c:9c:b0:d8:cb:95:1c:85:99:6a:b2:28:fd:7d:
b6:61:88:2e:94:b9:17:6c:e1:16:eb:75:58:fb:d5:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:DC:92:0B:70:56:84:AF:25:E1:26:A8:3C:D1:C0:9F:F0:F0:CE
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/kELckgtwVoSvJeEmqDzRwJ_w8M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.102.0/24
88.218.101.0/24
195.206.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f8:00:77:99:8b:71:c4:c9:8f:66:13:33:d3:8d:eb:87:37:
dc:1e:7c:44:97:4e:e7:c3:f7:0f:f5:e9:8c:e5:82:db:e7:da:
02:f7:18:9b:c6:7b:b9:f5:81:a8:47:5d:5f:0d:6c:29:69:3f:
d3:93:ac:b9:1e:85:9b:2c:19:56:40:ba:df:7c:76:26:04:12:
ab:fb:cf:95:e8:29:a0:c6:78:39:43:42:95:8d:d7:06:fc:b2:
bb:36:89:3c:10:d1:90:9f:a1:32:91:58:6a:2c:16:a3:02:40:
6c:b5:86:20:7e:00:2c:95:48:b7:24:b1:13:14:eb:81:86:f4:
30:6c:c0:82:40:d9:27:b6:a8:a9:16:57:fc:5f:21:78:1e:0c:
04:7a:1e:96:22:6e:60:98:16:7f:07:5e:3d:cc:35:16:c8:d3:
72:f3:83:8d:68:36:07:46:c7:b5:dd:18:45:d2:5f:aa:8d:cf:
98:73:66:e3:d9:d5:5f:4f:90:41:54:85:87:e1:f6:09:58:d0:
ef:13:c4:1f:d0:26:83:e0:61:07:ca:73:39:64:a3:4c:47:ae:
ca:87:47:72:ea:df:c5:25:9f:13:c7:d7:8f:10:9b:c9:fd:65:
cf:e6:da:2b:d7:64:91:7d:ac:7f:4c:25:63:cd:53:1b:bd:09:
6d:7c:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:02:57 2026 by rpki-client