Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/KYlPg3qMQtEhdbWBzRWbH8xKeLU.roa
File: KYlPg3qMQtEhdbWBzRWbH8xKeLU.roa (raw, json)
Hash identifier: aR1sZ1iqqgB9p67Odma26bUhuQaf2KBGaopoPF1pdc8=
Subject key identifier: 29:89:4F:83:7A:8C:42:D1:21:75:B5:81:CD:15:9B:1F:CC:4A:78:B5
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A12B1D7CD8414C0AE32A83CCF5DE9DB333
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/KYlPg3qMQtEhdbWBzRWbH8xKeLU.roa
Signing time: Sun 11 Oct 2026 13:18:35 +0000
ROA not before: Sun 11 Oct 2026 13:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216074
IP address blocks: 78.158.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:1d:7c:d8:41:4c:0a:e3:2a:83:cc:f5:de:9d:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Oct 11 13:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29894f837a8c42d12175b581cd159b1fcc4a78b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:12:ef:81:a3:8b:c5:c8:b5:28:2d:8c:2b:
d9:ce:8b:97:88:8b:d4:d4:49:00:d1:7e:06:d7:82:
62:45:d4:3d:02:88:c9:7c:03:18:60:24:f6:c1:c0:
a4:50:24:01:4b:ad:1f:d8:a5:7d:e0:0f:3a:0f:f7:
af:45:4f:39:fa:16:d1:e0:e5:04:93:0a:9a:8c:46:
41:60:3a:f4:c8:3f:55:e8:c3:79:d3:6d:ae:92:3f:
8b:c9:09:36:6f:af:00:f8:69:be:2c:e9:17:f2:28:
14:2b:7d:b4:99:ca:a5:b6:2b:bf:2a:e3:80:d4:b8:
97:1c:b4:ed:5a:b8:43:02:c8:c2:22:c5:ac:27:e3:
c3:61:2c:c7:b2:57:0b:c4:df:f7:b4:27:63:6f:77:
ab:bf:6b:8c:1a:39:3a:56:3b:24:f6:25:28:89:cb:
f0:95:f0:fe:ca:a5:73:de:1c:f8:bb:8c:eb:e6:f6:
e8:47:8c:26:a9:fe:ee:b4:8d:94:a9:d3:5b:c3:af:
f7:15:25:6b:61:17:d8:75:b2:eb:81:51:26:e9:d0:
6a:10:cc:ce:65:d9:aa:12:85:a7:14:17:b9:b4:15:
95:c1:4d:21:81:fd:67:0b:de:e6:f5:28:25:5d:e3:
ec:db:dc:09:04:ac:39:e4:ea:b0:d4:84:2b:a1:d8:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:4F:83:7A:8C:42:D1:21:75:B5:81:CD:15:9B:1F:CC:4A:78:B5
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/KYlPg3qMQtEhdbWBzRWbH8xKeLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.166.0/24
Signature Algorithm: sha256WithRSAEncryption
90:88:92:47:22:ea:07:84:20:e1:26:e6:d0:eb:7e:d3:5c:d2:
74:1a:9e:35:23:3e:c1:36:5f:23:6d:fa:1a:58:24:77:04:f9:
99:56:96:e3:12:1b:ed:13:a8:a9:6d:f3:4c:2a:81:e3:71:44:
41:84:b9:0d:80:86:25:a2:fe:9f:21:16:67:89:2b:aa:d5:80:
2d:22:03:92:92:d9:34:e8:87:2c:62:0c:1f:21:90:4a:d7:34:
03:33:a6:cb:b7:32:13:a2:03:52:b0:28:5d:59:8e:b0:c6:a1:
ff:0f:5d:93:c7:a9:69:d4:07:51:4e:35:eb:7f:0a:d3:cb:40:
a1:fc:74:05:cf:bf:01:6e:85:85:dd:bf:7b:c0:8e:16:e8:48:
58:73:c2:b7:38:40:dd:25:77:06:0f:c0:30:fa:8d:8e:5d:01:
df:dd:77:bc:dc:47:ba:3c:75:f3:a7:f5:3b:dd:2b:17:85:03:
5b:34:72:50:0b:01:72:e4:02:d7:dc:c9:54:04:76:36:17:9d:
df:f7:dd:08:92:8b:1a:49:7a:06:7c:a1:28:09:89:ca:0b:81:
46:ad:9c:51:56:76:f2:d3:db:33:8e:0f:0f:9a:72:23:4d:13:
d8:5a:bc:d2:d0:11:5a:fd:fb:b7:0a:5f:bf:cd:b2:e3:da:b3:
af:68:dd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:21 2026 by rpki-client