Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K1CxmeknVWSGnmaPRrV8op9r3QE.roa
File: K1CxmeknVWSGnmaPRrV8op9r3QE.roa (raw, json)
Hash identifier: OZpOjjF0ca0s5klLHohiHgsl0ukuYiU9SD623UwHmyY=
Subject key identifier: 2B:50:B1:99:E9:27:55:64:86:9E:66:8F:46:B5:7C:A2:9F:6B:DD:01
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FA7FF0267FB71060144BB352C9644A26D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K1CxmeknVWSGnmaPRrV8op9r3QE.roa
Signing time: Tue 28 Jul 2026 09:12:15 +0000
ROA not before: Tue 28 Jul 2026 09:12:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.72.10.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.152.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.95.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.192.249.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:ff:02:67:fb:71:06:01:44:bb:35:2c:96:44:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 28 09:12:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b50b199e9275564869e668f46b57ca29f6bdd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:e6:ec:cd:1c:39:75:24:15:f1:c4:1c:ea:
69:88:b2:03:1f:c8:b6:83:42:9d:7b:eb:ad:f1:b6:
c0:f2:c6:27:0f:f4:cc:35:36:8b:c1:51:da:e0:50:
23:44:85:4b:0b:19:2e:81:80:44:13:85:4e:40:b5:
e5:78:7e:50:da:cb:58:bf:9c:e8:80:06:80:92:ed:
57:e8:29:79:e6:24:56:1f:80:2e:68:96:0c:af:8b:
2f:ff:20:9a:9c:23:07:45:b2:7b:eb:4d:6d:9d:ee:
11:da:1b:7f:23:3f:d5:53:93:39:de:81:2f:4e:97:
56:53:0b:c5:55:70:14:73:5a:a3:34:8e:6b:f4:d1:
1e:6e:d0:d3:d4:6f:64:87:ec:c4:b0:d5:a7:cf:9f:
6f:ad:1b:f5:14:ef:1b:1a:24:5b:e4:bf:de:27:29:
37:75:54:41:61:bc:37:83:9c:77:8b:95:46:0b:80:
c7:78:a6:e3:e9:d9:6f:d6:32:e8:ee:dd:55:51:9f:
9f:57:b8:cc:f6:32:c1:36:86:19:f0:00:b5:09:0f:
b7:cc:89:d5:8d:f3:b7:1d:13:00:ef:f7:a5:4f:e6:
82:21:50:39:bc:57:d2:a4:e6:57:c7:7c:ab:03:b7:
ce:85:88:51:50:a5:62:d9:22:95:03:98:9e:4b:e4:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:50:B1:99:E9:27:55:64:86:9E:66:8F:46:B5:7C:A2:9F:6B:DD:01
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K1CxmeknVWSGnmaPRrV8op9r3QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
192.124.188.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0-193.124.8.255
193.124.94.0/24
193.124.206.0/24
194.58.43.0/24
194.58.58.0/24
194.58.67.0/24
194.58.155.0/24
194.87.3.0/24
194.87.6.0/23
194.87.36.0/24
194.87.53.0/24
194.87.59.0/24
194.87.63.0/24
194.87.75.0/24
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.152.0/24
194.87.160.0/24
194.87.163.0/24
194.87.165.0-194.87.166.255
194.87.179.0/24
194.87.182.0/23
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.229.0/24
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.12.0/24
195.133.19.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0/23
195.133.50.0/23
195.133.56.0-195.133.58.255
195.133.60.0/23
195.133.72.0/24
195.133.80.0/24
195.133.82.0/24
195.133.92.0/23
195.133.95.0/24
212.192.241.0-212.192.242.255
212.192.247.0/24
212.192.249.0/24
212.192.251.0/24
212.193.0.0/24
212.193.10.0/24
212.193.15.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
39:c8:45:9a:82:f4:9e:e9:67:8b:e7:8f:32:69:c2:b9:d5:c4:
8c:73:03:d3:32:9b:16:3e:48:67:47:2b:9b:44:58:e3:5c:a0:
9a:3f:50:78:12:ad:57:fc:1b:81:2d:9f:fb:5b:36:b3:72:67:
77:4b:2a:90:ab:cc:0f:de:0e:2c:e3:d6:82:08:25:51:7a:00:
a7:33:18:e1:3e:f2:7d:c6:50:1a:1a:fe:27:e9:55:25:ba:f9:
90:a8:c5:1c:17:79:b2:c4:34:f8:da:67:14:52:54:7e:58:41:
ff:4d:2c:d4:23:8f:a1:37:0d:31:ac:89:b3:7a:2b:2f:3a:b0:
e7:f1:9c:a2:cc:e3:b2:66:67:9e:2c:06:26:64:87:7c:fc:ce:
ea:88:53:a4:9e:af:00:55:cc:0f:90:56:56:c8:b6:36:fc:2c:
fb:da:ff:3a:f5:88:2b:67:56:a9:8c:40:0a:9d:4a:66:6e:12:
5b:48:3c:8f:39:55:94:69:33:dd:fb:ba:27:da:77:82:6f:42:
5e:cd:2a:1b:31:6d:88:de:d5:49:b7:f2:3f:2f:21:13:18:b3:
f6:1d:dc:b7:83:6d:b1:1f:49:b3:81:de:cf:ba:18:c5:f9:40:
64:b8:64:b6:8a:a8:01:17:cb:33:c6:af:9f:95:22:ad:81:89:
af:97:47:29
-----BEGIN CERTIFICATE-----
MIIGrzCCBZegAwIBAgISAZ+n/wJn+3EGAUS7NSyWRKJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNzI4MDkxMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjUwYjE5OWU5Mjc1NTY0ODY5ZTY2OGY0NmI1N2NhMjlmNmJkZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp87m7M0cOXUkFfHEHOppiLIDH8i2
g0Kde+ut8bbA8sYnD/TMNTaLwVHa4FAjRIVLCxkugYBEE4VOQLXleH5Q2stYv5zo
gAaAku1X6Cl55iRWH4AuaJYMr4sv/yCanCMHRbJ7601tne4R2ht/Iz/VU5M53oEv
TpdWUwvFVXAUc1qjNI5r9NEebtDT1G9kh+zEsNWnz59vrRv1FO8bGiRb5L/eJyk3
dVRBYbw3g5x3i5VGC4DHeKbj6dlv1jLo7t1VUZ+fV7jM9jLBNoYZ8AC1CQ+3zInV
jfO3HRMA7/elT+aCIVA5vFfSpOZXx3yrA7fOhYhRUKVi2SKVA5ieS+QCyQIDAQAB
o4IDuzCCA7cwHQYDVR0OBBYEFCtQsZnpJ1Vkhp5mj0a1fKKfa90BMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSzFDeG1la25WV1NHbm1hUFJyVjhvcDlyM1FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBzwYIKwYBBQUHAQcBAf8EggG+MIIBujCCAaAEAgABMIIB
mAMEALlICgMEAMB8vAMEAMB8vgMEAMF8BTAMAwQAwXwHAwQAwXwIAwQAwXxeAwQA
wXzOAwQAwjorAwQAwjo6AwQAwjpDAwQAwjqbAwQAwlcDAwQBwlcGAwQAwlckAwQA
wlc1AwQAwlc7AwQAwlc/AwQAwldLMAwDBADCV3cDBADCV3gDBADCV3oDBADCV4gD
BADCV5gDBADCV6ADBADCV6MwDAMEAMJXpQMEAMJXpgMEAMJXswMEAcJXtgMEAMJX
uTAMAwQAwlfTAwQAwlfUAwQAwlflAwQAwlfnMAwDBADChxcDBADChxgwDAMEAMM6
NwMEAMM6OAMEAMM6OwMEAMM6PgMEAMOFDAMEAMOFEwMEAcOFGAMEAMOFHQMEAcOF
KAMEAcOFMjAMAwQDw4U4AwQAw4U6AwQBw4U8AwQAw4VIAwQAw4VQAwQAw4VSAwQB
w4VcAwQAw4VfMAwDBADUwPEDBADUwPIDBADUwPcDBADUwPkDBADUwPsDBADUwQAD
BADUwQoDBADUwQ8wDAMEAdTBGgMEANTBHDAUBAIAAjAOAwUDKgFXwAMFAyoM/0Aw
DQYJKoZIhvcNAQELBQADggEBADnIRZqC9J7pZ4vnjzJpwrnVxIxzA9MymxY+SGdH
K5tEWONcoJo/UHgSrVf8G4Etn/tbNrNyZ3dLKpCrzA/eDizj1oIIJVF6AKczGOE+
8n3GUBoa/ifpVSW6+ZCoxRwXebLENPjaZxRSVH5YQf9NLNQjj6E3DTGsibN6Ky86
sOfxnKLM47JmZ54sBiZkh3z8zuqIU6SerwBVzA+QVlbItjb8LPva/zr1iCtnVqmM
QAqdSmZuEltIPI85VZRpM937uifad4JvQl7NKhsxbYje1Um38j8vIRMYs/Yd3LeD
bbEfSbOB3s+6GMX5QGS4ZLaKqAEXyzPGr5+VIq2Bia+XRyk=
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:11 2026 by rpki-client