Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/klvWM1OU1QpXYjnYjHz52i83egs.roa
File: klvWM1OU1QpXYjnYjHz52i83egs.roa (raw, json)
Hash identifier: AnN+EnJzL1csHXlCR//CnqmJdv49PCKi+mvAFO4ib4E=
Subject key identifier: 92:5B:D6:33:53:94:D5:0A:57:62:39:D8:8C:7C:F9:DA:2F:37:7A:0B
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 01A00B84BF47FDAD7833DFADDEB3C030E6E1
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/klvWM1OU1QpXYjnYjHz52i83egs.roa
Signing time: Sun 16 Aug 2026 17:00:44 +0000
ROA not before: Sun 16 Aug 2026 17:00:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61254
IP address blocks: 37.49.224.0/24 maxlen: 24
37.49.225.0/24 maxlen: 24
37.49.226.0/24 maxlen: 24
37.49.227.0/24 maxlen: 24
37.49.228.0/24 maxlen: 24
37.49.229.0/24 maxlen: 24
37.49.230.0/24 maxlen: 24
37.49.231.0/24 maxlen: 24
185.209.15.0/24 maxlen: 24
2a13:adc3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:84:bf:47:fd:ad:78:33:df:ad:de:b3:c0:30:e6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Aug 16 17:00:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=925bd6335394d50a576239d88c7cf9da2f377a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:a7:71:12:82:75:f8:2f:3a:6d:a7:e7:8d:
b6:78:02:49:4b:8e:23:9b:d4:23:cb:e2:32:e9:2a:
be:3b:ee:af:65:6e:0a:ba:1e:d0:81:1f:fd:60:e1:
da:50:e7:d5:69:db:52:eb:2f:b5:ef:2d:ac:15:73:
80:a6:ae:b5:6e:3c:f8:90:73:2a:15:29:5e:31:3c:
35:59:01:2b:13:58:d9:35:92:f7:0a:d8:ca:4a:02:
bd:09:88:21:78:ce:1b:0f:dc:bc:2d:d2:4e:eb:cd:
83:2a:1f:b0:4b:0d:46:0b:24:df:4f:d0:c6:62:1a:
ec:8d:dd:e1:cd:ad:f0:9d:f3:05:12:f8:5f:58:ad:
0c:f1:b8:23:bc:2f:3b:cd:4f:bd:1a:48:7e:27:fc:
e5:c2:d4:5c:06:db:b1:bd:9e:2a:e5:22:94:b9:27:
f9:28:a5:88:37:a7:07:09:f3:f6:10:6a:6d:fa:40:
96:07:db:5e:17:9c:25:3c:47:9b:3b:76:74:b3:b1:
72:41:56:f8:af:ad:e0:fd:0a:95:ae:a7:b7:7d:48:
ab:14:8b:fd:7e:d0:ed:4e:0d:9a:b1:c3:0b:88:1f:
10:b2:64:ac:b3:e3:b7:bc:db:75:46:b5:bb:fa:f6:
11:ef:39:ff:bc:69:88:61:73:57:36:0a:d9:d4:0b:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5B:D6:33:53:94:D5:0A:57:62:39:D8:8C:7C:F9:DA:2F:37:7A:0B
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/klvWM1OU1QpXYjnYjHz52i83egs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.224.0/21
185.209.15.0/24
IPv6:
2a13:adc3::/48
Signature Algorithm: sha256WithRSAEncryption
81:4e:33:df:c1:bd:82:4e:81:ac:04:71:f5:4c:a9:99:0a:e5:
b1:10:e2:db:69:2a:b9:47:33:bf:32:9b:d1:9c:81:08:43:be:
18:ac:c6:90:81:9a:38:3e:84:63:44:cc:8b:b0:93:f3:84:93:
73:73:1a:cc:b1:f0:ab:d1:bc:7e:7c:f0:4c:b8:9f:88:e7:64:
97:4b:b2:f3:f3:10:b9:d2:fd:dc:b9:39:01:2e:35:8a:cf:2b:
26:7b:f1:e3:d2:2f:60:d7:dd:f7:b7:d1:76:ba:a4:41:08:ff:
44:9f:df:d0:e8:3a:11:f3:24:ca:29:88:4f:c4:47:96:51:18:
37:95:78:27:ed:16:a2:59:f3:77:70:9b:d2:67:92:d7:28:c9:
5a:cf:9a:24:f4:37:29:1a:f2:2d:7b:fa:30:0b:68:c2:ae:e1:
bb:a2:5a:25:e5:40:7d:a3:d5:4d:b8:6d:53:c2:7e:8e:28:1f:
4c:22:8c:88:90:ac:0a:90:f8:47:9f:4e:b2:77:39:24:92:b2:
d5:33:5e:56:14:3b:db:e7:8e:e1:e3:e9:a2:0c:4a:c3:d3:bf:
83:c8:c1:01:33:0b:22:30:1f:ab:0b:25:99:d5:f1:fa:09:35:
8d:e4:c1:74:ec:69:3c:2d:91:41:00:da:65:c9:46:e1:7b:27:
45:87:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:56:29 2026 by rpki-client