Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Kl7eN8Jg-PeIkfgQd1V-IQSRy1g.roa
File: Kl7eN8Jg-PeIkfgQd1V-IQSRy1g.roa (raw, json)
Hash identifier: LJOqk2hOPW4zF0QKMT6vQWzbYu9x4wpSjNeypKNolNc=
Subject key identifier: 2A:5E:DE:37:C2:60:F8:F7:88:91:F8:10:77:55:7E:21:04:91:CB:58
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A0331B62457CE1321308088DED421E94E1
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Kl7eN8Jg-PeIkfgQd1V-IQSRy1g.roa
Signing time: Mon 24 Aug 2026 09:30:27 +0000
ROA not before: Mon 24 Aug 2026 09:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 138.226.234.0/24 maxlen: 24
138.226.238.0/24 maxlen: 24
153.79.172.0/24 maxlen: 24
153.79.173.0/24 maxlen: 24
153.79.174.0/24 maxlen: 24
204.62.120.0/24 maxlen: 24
204.62.121.0/24 maxlen: 24
204.62.122.0/24 maxlen: 24
207.89.22.0/24 maxlen: 24
207.89.23.0/24 maxlen: 24
216.163.179.0/24 maxlen: 24
2a14:a087::/48 maxlen: 48
2a14:a087:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:1b:62:45:7c:e1:32:13:08:08:8d:ed:42:1e:94:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Aug 24 09:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a5ede37c260f8f78891f81077557e210491cb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:27:b5:61:c2:b0:d6:c5:d8:60:ba:b1:c7:
56:20:78:bb:62:58:6b:5e:16:07:30:bc:f8:23:5a:
00:0e:d8:63:20:98:c6:12:6e:60:f7:70:9b:bb:e7:
84:a8:86:33:ca:ef:21:7f:d3:68:0f:a7:90:7f:62:
08:a7:e6:16:11:3f:af:14:ee:64:30:14:41:4f:07:
c6:41:32:33:f1:1d:1b:4e:08:46:d9:98:51:3f:bf:
eb:95:4c:e8:bd:c5:d2:03:9a:a5:e4:1d:fd:e6:e3:
ff:72:79:f0:e0:5d:5a:09:10:16:a7:96:14:2a:62:
9b:e7:90:be:7d:6b:23:a7:a6:e5:24:5b:50:d7:7c:
11:ff:0e:f1:82:d0:39:bb:ae:43:7f:c9:44:33:0f:
07:1e:72:3e:9a:65:a7:8f:0b:91:d8:e5:7e:cb:88:
f1:21:d6:4d:d0:e2:a8:da:52:1c:95:d5:ba:43:72:
ef:6c:c3:0a:0a:e2:93:6d:49:1e:ca:e3:c4:fc:95:
85:05:6d:3d:85:73:fe:e4:43:8e:ee:bd:41:fa:e2:
e6:bd:e9:a1:85:76:2d:d7:d4:6e:06:43:4e:5c:a6:
ee:25:21:ac:3f:ec:14:21:dc:e1:c5:62:c4:e7:25:
08:f1:9e:b4:0f:b2:74:23:f2:73:36:0d:67:a3:2c:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5E:DE:37:C2:60:F8:F7:88:91:F8:10:77:55:7E:21:04:91:CB:58
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Kl7eN8Jg-PeIkfgQd1V-IQSRy1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.234.0/24
138.226.238.0/24
153.79.172.0-153.79.174.255
204.62.120.0-204.62.122.255
207.89.22.0/23
216.163.179.0/24
IPv6:
2a14:a087::/47
Signature Algorithm: sha256WithRSAEncryption
81:67:9a:5f:c6:f1:e2:1f:77:1e:be:e5:34:70:bf:f9:a6:e8:
3c:04:57:33:f1:ca:48:dc:9f:8d:46:fa:2d:7e:bb:aa:97:01:
53:5b:dc:4e:6a:f2:2f:a5:d7:b5:c6:88:38:9a:28:44:fe:88:
1c:d2:ca:ae:69:e2:e5:6a:69:87:e5:75:55:71:0f:5b:1c:de:
20:d9:19:7e:ac:f4:10:15:6f:2d:bb:e1:ee:e2:f6:9c:55:15:
b5:a5:d8:ff:6e:d0:cf:37:0a:51:39:9e:4f:1b:1c:62:05:84:
3c:46:68:82:d1:34:09:4d:71:50:7e:24:7c:cf:41:1d:0f:12:
6e:68:40:3c:25:54:a6:e4:d5:1e:a2:b4:31:d2:fd:48:24:53:
64:ec:25:98:5c:a1:d8:26:6d:35:76:48:9f:fc:ac:b1:b8:bf:
74:f2:32:f2:27:ee:43:ea:33:11:89:5d:c5:4f:43:75:10:65:
d8:42:9e:b3:c3:7f:50:fa:d7:9d:6b:97:2b:03:04:07:b9:76:
1a:a5:2c:40:c7:ab:3f:3b:a8:29:5e:bc:da:8d:72:95:55:fa:
9f:d1:7c:33:7f:2a:f3:69:b6:07:d8:89:29:66:26:3f:1d:a1:
e9:70:27:4e:d8:7a:9d:18:14:59:92:3a:35:8d:87:4e:4d:1f:
2c:9f:8b:d6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAaAzG2JFfOEyEwgIje1CHpThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0
YTdjZGMwHhcNMjYwODI0MDkzMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTVlZGUzN2MyNjBmOGY3ODg5MWY4MTA3NzU1N2UyMTA0OTFjYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTIntWHCsNbF2GC6scdWIHi7Ylhr
XhYHMLz4I1oADthjIJjGEm5g93Cbu+eEqIYzyu8hf9NoD6eQf2IIp+YWET+vFO5k
MBRBTwfGQTIz8R0bTghG2ZhRP7/rlUzovcXSA5ql5B395uP/cnnw4F1aCRAWp5YU
KmKb55C+fWsjp6blJFtQ13wR/w7xgtA5u65Df8lEMw8HHnI+mmWnjwuR2OV+y4jx
IdZN0OKo2lIcldW6Q3LvbMMKCuKTbUkeyuPE/JWFBW09hXP+5EOO7r1B+uLmvemh
hXYt19RuBkNOXKbuJSGsP+wUIdzhxWLE5yUI8Z60D7J0I/JzNg1noyymFQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFCpe3jfCYPj3iJH4EHdVfiEEkctYMB8GA1UdIwQY
MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt
MmUyOGI5NjQ5OGE5LzEvS2w3ZU44SmctUGVJa2ZnUWQxVi1JUVNSeTFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5
LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA6BAIAATA0AwQAiuLqAwQA
iuLuMAwDBAKZT6wDBACZT64wDAMEA8w+eAMEAMw+egMEAc9ZFgMEANijszAPBAIA
AjAJAwcBKhSghwAAMA0GCSqGSIb3DQEBCwUAA4IBAQCBZ5pfxvHiH3cevuU0cL/5
pug8BFcz8cpI3J+NRvotfruqlwFTW9xOavIvpde1xog4mihE/ogc0squaeLlammH
5XVVcQ9bHN4g2Rl+rPQQFW8tu+Hu4vacVRW1pdj/btDPNwpROZ5PGxxiBYQ8RmiC
0TQJTXFQfiR8z0EdDxJuaEA8JVSm5NUeorQx0v1IJFNk7CWYXKHYJm01dkif/Kyx
uL908jLyJ+5D6jMRiV3FT0N1EGXYQp6zw39Q+teda5crAwQHuXYapSxAx6s/O6gp
XrzajXKVVfqf0XwzfyrzabYH2IkpZiY/HaHpcCdO2HqdGBRZkjo1jYdOTR8sn4vW
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:02 2026 by rpki-client