Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/KhYPsUJXszCogziXLkfXgCSAFcc.roa
File: KhYPsUJXszCogziXLkfXgCSAFcc.roa (raw, json)
Hash identifier: +BqJ9SLh8ZxjscLvwLNKcYWD6QmDYK/8PfNPVI/SYPQ=
Subject key identifier: 2A:16:0F:B1:42:57:B3:30:A8:83:38:97:2E:47:D7:80:24:80:15:C7
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 01A0CDA21779513087544C7D6D2629AE6ADA
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/KhYPsUJXszCogziXLkfXgCSAFcc.roa
Signing time: Wed 23 Sep 2026 09:39:07 +0000
ROA not before: Wed 23 Sep 2026 09:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154270
IP address blocks: 153.112.226.0/23 maxlen: 23
153.112.226.0/24 maxlen: 24
153.112.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:a2:17:79:51:30:87:54:4c:7d:6d:26:29:ae:6a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Sep 23 09:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a160fb14257b330a88338972e47d780248015c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:77:0a:1b:b0:3e:b3:a1:19:99:41:90:cb:
5c:24:00:f5:84:06:67:81:ac:e3:f3:40:f8:b4:5a:
92:46:aa:db:d8:7a:ee:6f:df:f7:d0:16:66:9d:57:
71:81:e2:ee:87:bb:ca:fd:d0:87:58:cf:62:a2:0a:
32:91:87:c8:a1:de:ac:0f:d0:a4:12:1d:e0:f9:63:
2b:8a:4e:0e:e3:b3:48:52:36:2c:ab:cb:be:19:35:
d3:a3:5d:04:aa:94:e2:91:29:0b:22:43:69:af:d1:
c1:ba:b2:1d:7d:d3:d1:35:23:d0:de:bf:29:73:90:
81:fc:5c:28:ae:bd:55:18:07:fb:b9:ad:90:41:7e:
96:88:fc:20:99:54:51:da:df:d1:eb:fc:99:9f:7d:
1e:c6:fd:1f:6f:6c:e0:35:56:68:e3:47:b2:e1:b3:
08:50:71:d0:05:3a:fe:f0:5c:24:75:f9:be:9b:25:
7a:55:62:06:fa:4f:96:18:0f:da:45:eb:57:3e:88:
c0:87:b1:2f:44:94:7e:54:35:92:07:a2:77:44:ad:
be:53:fb:62:63:d0:f6:b3:6b:60:67:16:23:fa:21:
f8:95:ce:08:ef:97:08:12:d4:8b:56:b9:23:67:79:
89:ff:81:65:84:07:31:72:25:63:cc:d9:d9:7b:bd:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:16:0F:B1:42:57:B3:30:A8:83:38:97:2E:47:D7:80:24:80:15:C7
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/KhYPsUJXszCogziXLkfXgCSAFcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.226.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ec:d2:fa:b4:7a:22:6d:09:0a:9e:48:d3:be:e8:dd:25:54:
13:39:d2:9c:17:03:eb:6e:a0:f9:62:fb:2f:80:1b:a8:38:7b:
f0:70:be:1b:03:2a:21:06:54:17:63:37:9c:e8:0d:d7:f9:ec:
51:80:a9:5d:3d:c5:91:5b:2f:33:36:20:f2:28:31:98:b4:5d:
b7:49:0e:3c:b2:d1:21:8f:ca:aa:2b:44:95:39:97:04:aa:d6:
7b:a1:48:9c:69:b2:41:1b:cd:91:1d:cf:9b:a0:e9:14:3d:9b:
0c:02:63:bb:1d:0f:f3:fb:4e:d0:5b:39:ed:8a:cd:b8:83:13:
9e:87:ec:36:fd:5a:64:78:4d:53:aa:72:6a:50:9e:e3:2e:cb:
ed:89:3b:11:7b:c9:81:62:75:33:ba:95:fd:ed:e4:9f:7b:09:
11:1a:cb:0e:fd:3e:e8:01:c6:31:19:86:b9:cc:5d:7c:47:6b:
ee:31:0d:63:41:91:d9:f0:cb:29:f7:10:a2:c5:98:f3:e9:cb:
63:2d:a0:42:2f:9b:fe:07:34:96:70:4a:8d:fe:70:cc:10:25:
df:25:56:05:93:8a:ce:de:44:0b:8b:05:78:f6:ab:a9:6a:ff:
f1:c6:b1:8a:5c:1c:78:1d:95:87:dd:9a:16:98:1e:a6:ba:fb:
4c:d7:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:15:58 2026 by rpki-client