Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/KE6iJA-hn1b3IWFsrJuzBxcx2q4.roa
File: KE6iJA-hn1b3IWFsrJuzBxcx2q4.roa (raw, json)
Hash identifier: wz9KjacGN75RHVU7rEROAQLIesngE9DXITSuM+/w2G4=
Subject key identifier: 28:4E:A2:24:0F:A1:9F:56:F7:21:61:6C:AC:9B:B3:07:17:31:DA:AE
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 01A11184BD739B429F501B807D407DC8AE8C
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/KE6iJA-hn1b3IWFsrJuzBxcx2q4.roa
Signing time: Tue 06 Oct 2026 14:01:14 +0000
ROA not before: Tue 06 Oct 2026 14:01:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212961
IP address blocks: 31.216.132.0/22 maxlen: 22
194.180.144.0/22 maxlen: 22
194.180.146.0/24 maxlen: 24
194.180.147.0/24 maxlen: 24
194.180.149.0/24 maxlen: 24
2a0c:abc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:bd:73:9b:42:9f:50:1b:80:7d:40:7d:c8:ae:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Oct 6 14:01:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=284ea2240fa19f56f721616cac9bb3071731daae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:6e:85:8a:58:8a:67:b9:20:00:1f:a9:e2:
5c:bd:14:f1:68:08:ac:f6:03:09:be:de:b0:09:6a:
64:41:0a:5a:39:c7:d7:b4:38:d1:6d:90:98:38:92:
ec:c4:47:fb:ae:76:8c:73:c6:85:53:d2:d7:95:2e:
7f:2f:5d:ac:63:16:a3:a1:65:ed:38:2d:8a:a4:c3:
74:ac:cd:d6:2a:f4:3a:69:e2:f6:3d:16:3b:81:d5:
6a:f8:b8:a8:90:db:10:b6:83:fd:73:3a:37:c0:36:
c3:28:ed:17:d3:9c:36:76:ef:5e:27:d4:8c:a8:b8:
48:3e:15:ba:ab:04:d8:b4:72:a8:86:03:ea:3b:3a:
2f:27:fd:55:e2:20:52:1b:97:e3:60:3a:9c:60:6d:
b5:82:a3:13:b5:b3:97:fb:67:bd:30:45:75:af:8e:
d4:11:a0:d5:7d:f8:57:60:57:3c:9b:51:24:e1:db:
b8:33:bd:be:fb:0d:90:ac:1b:8b:9e:5a:85:e1:1d:
f4:e9:ad:32:bc:bb:5a:49:5d:50:f3:f1:0c:b7:b5:
dd:5a:b7:42:99:c9:2a:79:d7:1f:c4:3b:22:c1:32:
25:a8:72:81:ce:be:b8:80:84:af:b7:64:e9:ab:9a:
6d:a3:78:67:94:55:13:b2:c4:1f:f4:90:1e:19:7a:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4E:A2:24:0F:A1:9F:56:F7:21:61:6C:AC:9B:B3:07:17:31:DA:AE
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/KE6iJA-hn1b3IWFsrJuzBxcx2q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.132.0/22
194.180.144.0/22
194.180.149.0/24
IPv6:
2a0c:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
16:82:16:65:58:44:b0:b4:0e:d6:47:6d:a1:66:a5:b4:d2:f8:
28:67:ac:d6:a3:f2:44:d5:a2:d7:2c:d4:4f:3b:8a:dc:9d:c6:
35:22:11:53:2a:a8:ca:ce:a2:a6:bf:d1:57:0c:2b:b4:32:53:
9f:20:30:34:ae:03:c2:b3:0e:b5:31:f0:9b:2d:e6:11:de:e6:
f1:f9:2a:04:9a:a8:c6:32:5f:70:6c:98:4e:f4:59:4c:c1:e0:
07:05:f6:24:c3:e1:5b:78:19:82:f7:59:17:ee:46:b4:6d:59:
c3:1e:4a:a2:2d:41:7b:0b:d0:24:29:f6:ad:61:dc:5b:b2:22:
50:5d:04:20:18:1b:e9:d9:b6:0c:fb:5c:ee:f1:ae:6e:65:e7:
f2:e2:d5:04:a0:b2:60:09:57:e7:65:5d:66:cb:e0:7a:25:62:
9e:36:98:dd:ca:6c:40:2d:66:51:7e:8e:c8:17:9e:a7:90:ad:
d2:45:7c:f3:b1:23:a4:89:0b:2d:f2:09:66:8e:8e:9b:74:78:
8a:99:d1:5d:96:42:a2:4a:d2:63:d7:0e:62:3e:be:e2:b8:46:
45:04:66:15:ca:1d:a9:6a:ef:ce:68:9e:1d:f8:a0:23:00:4b:
2a:bc:b7:22:97:c5:ce:24:0a:1c:55:f4:36:81:2d:a6:52:b2:
1f:2d:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 15:19:37 2026 by rpki-client