Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/KiUOwLcygv1_v8fKNERpROKsK6c.roa
File: KiUOwLcygv1_v8fKNERpROKsK6c.roa (raw, json)
Hash identifier: FRSD85ISii/ccrKWCwkizUwV3unnYMDnTZddrwKThOc=
Subject key identifier: 2A:25:0E:C0:B7:32:82:FD:7F:BF:C7:CA:34:44:69:44:E2:AC:2B:A7
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A145BE7E7ADF977065A3173303BA08F469
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/KiUOwLcygv1_v8fKNERpROKsK6c.roa
Signing time: Fri 16 Oct 2026 17:24:34 +0000
ROA not before: Fri 16 Oct 2026 17:24:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206787
IP address blocks: 72.56.150.0/24 maxlen: 24
200.163.80.0/24 maxlen: 24
200.163.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:be:7e:7a:df:97:70:65:a3:17:33:03:ba:08:f4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 16 17:24:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a250ec0b73282fd7fbfc7ca34446944e2ac2ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:8f:78:c8:d9:65:bf:c7:af:d1:1a:12:62:
55:dd:8c:ca:7e:3e:dc:b2:c6:cb:40:5a:d0:e5:b3:
7e:a5:b0:b2:25:4d:4b:a6:aa:f3:bb:5b:bb:b8:0c:
fd:c1:79:70:54:72:aa:0d:56:17:70:10:c0:97:0d:
87:9c:8e:65:3d:d9:e1:52:75:51:99:fe:72:ee:6c:
ab:37:bb:0a:3d:75:0c:01:50:d0:1b:78:6b:a8:20:
bd:f6:51:d1:f3:f2:f4:44:0c:57:91:cb:a1:12:e4:
6e:40:02:10:97:a5:2b:b2:84:63:9c:d7:04:e8:f2:
14:6d:ae:f8:f2:b3:83:02:d7:2e:f0:6f:bd:ee:f2:
77:36:7e:db:77:13:30:8e:83:54:c8:9c:6e:1a:0e:
4c:b4:20:41:a9:ca:5e:1c:98:2f:7d:58:2b:35:72:
0d:6a:e1:9f:29:a4:e2:8c:ee:f5:d0:68:db:bd:ef:
63:f1:3c:52:09:98:6e:02:b4:dc:69:29:24:44:11:
15:0f:d3:cb:58:c2:72:d3:e8:ef:77:5d:77:ec:93:
2a:7a:09:4e:f6:9b:d2:35:4b:35:24:5b:81:0a:0e:
29:de:ee:60:1d:01:3b:e7:82:3e:66:93:e6:b7:33:
30:ca:0c:24:4e:88:ff:2c:eb:37:2c:85:f5:40:fd:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:25:0E:C0:B7:32:82:FD:7F:BF:C7:CA:34:44:69:44:E2:AC:2B:A7
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/KiUOwLcygv1_v8fKNERpROKsK6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.150.0/24
200.163.80.0/24
200.163.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3a:a4:76:d7:56:7f:21:2d:70:5f:99:57:c9:95:2e:2e:a0:
41:59:ae:98:d3:e6:32:6e:fa:45:2d:a4:7c:2c:33:74:c3:74:
de:08:50:27:6e:39:45:8a:b5:e5:9d:05:68:07:0a:7b:c5:1d:
00:d9:23:b3:a7:7e:d8:2b:42:98:1b:3a:b6:0f:65:76:eb:1c:
79:97:39:66:13:81:94:f1:34:4d:d7:2b:b0:c1:96:2e:ab:d4:
46:3a:96:b8:14:d6:07:55:52:93:68:0d:b3:86:c1:43:01:70:
b2:8b:66:bb:c6:d6:a0:91:34:f4:fa:d5:cb:39:b1:24:78:48:
9e:7e:3b:0f:96:ae:d3:2c:28:10:d7:4d:ab:e5:ab:b5:9c:b7:
8d:43:7b:af:90:db:50:83:a7:f7:d0:f9:f5:67:eb:04:32:18:
b6:f2:81:3b:77:59:8b:2b:b3:ed:ec:73:bf:f2:aa:a0:e1:15:
e5:a4:29:ea:36:34:09:eb:dc:bc:1c:6e:ed:76:dc:14:2b:ec:
57:86:13:8d:46:f5:d5:48:d3:0f:6d:9a:3d:85:c8:ef:40:c5:
76:c5:93:83:af:03:46:fd:07:99:e5:6a:6b:3d:a5:42:90:ee:
76:c2:da:50:ba:28:43:ed:c6:00:4a:f2:cf:7c:a2:6f:1d:03:
8d:6d:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:40:58 2026 by rpki-client