Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KlxS--_clFy53fUN_wez4GZTsTA.roa
File: KlxS--_clFy53fUN_wez4GZTsTA.roa (raw, json)
Hash identifier: E1ZRbEAPs0b8Br0zqb2A9OSOvqw2IFf4QU7JV403TB0=
Subject key identifier: 2A:5C:52:FB:EF:DC:94:5C:B9:DD:F5:0D:FF:07:B3:E0:66:53:B1:30
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019EF10AC7B5669CBCBF0F295ABB5D4CD9AF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KlxS--_clFy53fUN_wez4GZTsTA.roa
Signing time: Mon 22 Jun 2026 20:34:35 +0000
ROA not before: Mon 22 Jun 2026 20:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213690
IP address blocks: 79.172.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f1:0a:c7:b5:66:9c:bc:bf:0f:29:5a:bb:5d:4c:d9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 22 20:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a5c52fbefdc945cb9ddf50dff07b3e06653b130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:48:9b:86:4a:ce:84:1d:5a:8b:85:47:f1:
45:d5:3a:2d:88:a8:2b:7f:2d:08:20:cb:87:59:80:
63:54:40:f5:58:18:34:2e:2f:f4:f6:ce:6e:65:6d:
18:30:b3:61:f9:ef:b3:93:41:8a:a3:9e:5a:d1:8f:
af:58:6b:68:a4:42:0a:7b:af:05:6e:8a:cb:34:6b:
7c:0e:f8:f9:6c:63:07:31:93:ad:59:1c:d4:e4:f4:
e1:51:13:34:79:a6:dd:33:49:ef:11:bb:a0:b5:d0:
1b:cb:e9:0f:5b:3c:ea:2c:99:14:0f:73:83:21:98:
9d:1d:91:bf:4c:74:4d:b1:af:ca:27:2e:1e:56:d0:
13:f0:7a:08:76:2d:e7:68:73:95:3b:92:f0:6b:73:
98:f4:5d:9b:25:18:8b:97:f4:d7:78:e7:6c:41:24:
ee:f8:a5:dd:25:ae:43:80:c2:ed:7b:66:c8:6b:89:
82:66:8a:1b:33:9e:85:a0:ad:25:4b:3a:2d:74:65:
4f:c1:89:7f:4f:d5:5d:be:c6:ac:c8:aa:77:bf:c8:
12:f7:8e:9b:e9:24:d5:fe:15:ad:05:20:67:ef:58:
dd:4e:67:aa:3e:17:3b:83:16:64:a0:ec:24:11:f7:
49:71:c3:1c:10:6c:d9:82:a2:9b:cb:6b:e0:e1:18:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:52:FB:EF:DC:94:5C:B9:DD:F5:0D:FF:07:B3:E0:66:53:B1:30
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KlxS--_clFy53fUN_wez4GZTsTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.251.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9a:4e:69:4c:75:0b:43:f9:00:88:86:6e:7c:a1:db:d9:1f:
db:cc:65:12:96:12:5d:6c:9d:29:c7:04:7c:8e:be:c1:89:2e:
0f:54:70:39:f2:6a:53:e9:a9:b3:21:ee:79:6a:44:05:36:68:
d4:04:5f:16:da:12:36:bf:84:cf:9b:2c:62:e5:77:97:ae:8c:
b6:77:46:5c:3a:1c:16:69:24:e9:5b:35:7c:18:83:46:dd:08:
b7:c5:09:b9:3b:d7:fa:14:db:ca:a2:6e:06:0e:fa:f5:21:92:
30:1d:ed:3a:9e:2d:0d:d1:98:cf:58:db:e5:a7:85:2c:b1:e0:
18:5f:50:03:db:2c:47:bb:23:4a:1f:dc:2e:ff:29:75:c1:b1:
58:95:32:b3:ac:0e:8b:fd:4b:c1:7b:c7:8b:d3:b9:69:8b:e8:
d4:20:67:c0:8f:4f:41:ad:5a:1b:d9:c4:98:a8:46:45:e0:7b:
5e:21:f9:28:ca:60:2d:b3:d6:52:6f:40:1f:9d:56:f9:ee:0e:
c4:78:59:be:8a:c6:97:5b:f9:43:b7:37:c7:89:09:51:79:dd:
8f:8e:54:de:85:0d:37:df:2c:a7:30:4f:88:42:16:61:d3:24:
a7:61:c6:8c:f5:bf:9b:61:4f:b8:0e:de:f9:df:9f:ce:79:59:
76:29:63:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7xCse1Zpy8vw8pWrtdTNmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwNjIyMjAzNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTVjNTJmYmVmZGM5NDVjYjlkZGY1MGRmZjA3YjNlMDY2NTNiMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ9Im4ZKzoQdWouFR/FF1TotiKgr
fy0IIMuHWYBjVED1WBg0Li/09s5uZW0YMLNh+e+zk0GKo55a0Y+vWGtopEIKe68F
borLNGt8Dvj5bGMHMZOtWRzU5PThURM0eabdM0nvEbugtdAby+kPWzzqLJkUD3OD
IZidHZG/THRNsa/KJy4eVtAT8HoIdi3naHOVO5Lwa3OY9F2bJRiLl/TXeOdsQSTu
+KXdJa5DgMLte2bIa4mCZoobM56FoK0lSzotdGVPwYl/T9VdvsasyKp3v8gS946b
6STV/hWtBSBn71jdTmeqPhc7gxZkoOwkEfdJccMcEGzZgqKby2vg4RjftwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCpcUvvv3JRcud31Df8Hs+BmU7EwMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvS2x4Uy0tX2NsRnk1M2ZVTl93ZXo0R1pUc1RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6z7MA0G
CSqGSIb3DQEBCwUAA4IBAQCGmk5pTHULQ/kAiIZufKHb2R/bzGUSlhJdbJ0pxwR8
jr7BiS4PVHA58mpT6amzIe55akQFNmjUBF8W2hI2v4TPmyxi5XeXroy2d0ZcOhwW
aSTpWzV8GING3Qi3xQm5O9f6FNvKom4GDvr1IZIwHe06ni0N0ZjPWNvlp4UsseAY
X1AD2yxHuyNKH9wu/yl1wbFYlTKzrA6L/UvBe8eL07lpi+jUIGfAj09BrVob2cSY
qEZF4HteIfkoymAts9ZSb0AfnVb57g7EeFm+isaXW/lDtzfHiQlRed2PjlTehQ03
3yynME+IQhZh0ySnYcaM9b+bYU+4Dt7535/OeVl2KWPz
-----END CERTIFICATE-----
Generated at Sun Jul 12 01:32:50 2026 by rpki-client