Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/kekLC_LpnvrqIQBZmWGo8muks_0.roa
File: kekLC_LpnvrqIQBZmWGo8muks_0.roa (raw, json)
Hash identifier: UpEHy9G8oQBNXxDYPyuJ63Wn2y4RLFOVpaoZj+/J53Y=
Subject key identifier: 91:E9:0B:0B:F2:E9:9E:FA:EA:21:00:59:99:61:A8:F2:6B:A4:B3:FD
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A037848C43BC176D70326E54BF8C15D6BD
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/kekLC_LpnvrqIQBZmWGo8muks_0.roa
Signing time: Tue 25 Aug 2026 06:03:48 +0000
ROA not before: Tue 25 Aug 2026 06:03:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 45.86.147.0/24 maxlen: 24
89.34.237.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:84:8c:43:bc:17:6d:70:32:6e:54:bf:8c:15:d6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Aug 25 06:03:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91e90b0bf2e99efaea2100599961a8f26ba4b3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:a7:fd:41:0c:df:c0:f2:dc:77:11:2f:22:
13:13:86:a9:f4:3b:2d:a2:95:5f:ff:f5:57:17:d6:
cd:8e:73:4b:64:67:40:7d:af:e2:31:3e:9c:47:bb:
63:38:79:e6:68:0f:6f:4b:a8:ec:a9:0e:ae:74:ff:
65:ad:dc:9b:93:c8:6e:1d:e0:25:cf:3e:ca:92:32:
90:37:99:c1:97:40:58:b7:f0:31:23:6f:21:ff:b7:
08:41:92:fe:01:6f:49:1d:d8:82:d4:35:05:ad:59:
c4:0b:17:da:5b:ad:21:ff:76:4f:12:b7:c8:fa:5c:
37:ab:f8:84:6c:59:a3:81:ab:0a:af:12:43:ee:98:
c2:53:1c:07:ef:4e:2d:a7:6d:55:93:a2:1f:c9:25:
19:98:28:6a:55:e7:c1:9f:29:06:36:84:2a:a6:fd:
10:48:22:47:3d:c4:e7:98:e1:f9:31:05:45:30:cd:
60:89:92:8e:63:bb:c2:5d:98:1b:ea:6b:3e:7a:ed:
57:4c:37:85:20:86:fd:3c:9f:79:d5:6d:e2:95:e9:
a5:42:98:db:30:c3:0d:95:c6:c5:7d:92:d7:ff:1d:
a5:9a:58:1b:95:10:c8:e9:85:6c:2a:27:cd:03:bb:
12:fb:4f:0e:c0:b0:ba:2b:02:8c:9e:82:b7:29:d4:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E9:0B:0B:F2:E9:9E:FA:EA:21:00:59:99:61:A8:F2:6B:A4:B3:FD
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/kekLC_LpnvrqIQBZmWGo8muks_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.147.0/24
89.34.237.0/24
188.208.17.0/24
188.215.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e5:e9:9f:95:ac:bd:99:30:b8:b5:0e:47:3c:9b:fb:57:37:
ea:05:33:13:cf:ae:35:70:5c:b5:b5:74:26:ed:d2:2c:bc:50:
6a:05:53:d1:c5:2e:0f:fb:54:3d:43:b1:40:54:59:b1:4e:23:
3b:80:4c:b5:f6:d3:7f:24:38:34:04:f7:55:c4:4c:f2:fe:2e:
53:16:91:1c:29:d6:3c:12:8f:b2:b5:c3:23:76:05:66:25:ae:
73:1c:d7:f9:5e:0f:38:a1:15:9c:9f:f5:e1:02:60:dd:dd:ff:
73:27:dd:10:1c:86:3e:48:fc:40:11:69:93:71:f3:14:ee:75:
ac:2e:a7:13:e3:2e:02:60:1f:71:2b:47:9c:88:ec:37:c0:9c:
88:0d:59:8d:02:ec:e0:4b:dc:36:25:47:9d:6a:3c:5a:99:fe:
72:47:b6:c0:10:7b:59:35:aa:bf:b0:a9:10:d4:b8:4c:e1:f7:
7f:26:ae:d9:b5:17:44:4e:c0:d4:b8:67:87:0f:dd:67:b0:be:
2f:d3:dd:4e:e5:d8:10:0d:b2:a2:06:62:8a:a5:b4:c4:cc:81:
c8:c0:11:53:0a:9e:f1:4e:f8:ca:87:26:94:85:34:ed:98:39:
f2:7c:6c:b5:53:e0:e1:8f:54:a3:32:b4:69:96:a6:30:85:2e:
6c:c5:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:17 2026 by rpki-client