Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/KZcHjGEjlEqiqqvazolxSXEDbuA.roa
File: KZcHjGEjlEqiqqvazolxSXEDbuA.roa (raw, json)
Hash identifier: npVlibuFk5hKI0+SFymhsNVWKoQikj7X0ByNh6Jwl9Q=
Subject key identifier: 29:97:07:8C:61:23:94:4A:A2:AA:AB:DA:CE:89:71:49:71:03:6E:E0
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 019E4F3CABF4737D26F6389E2F1E158F916D
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/KZcHjGEjlEqiqqvazolxSXEDbuA.roa
Signing time: Fri 22 May 2026 10:30:36 +0000
ROA not before: Fri 22 May 2026 10:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8856
IP address blocks: 195.214.192.0/23 maxlen: 23
195.214.192.0/24 maxlen: 24
195.214.193.0/24 maxlen: 24
195.214.194.0/23 maxlen: 23
195.214.194.0/24 maxlen: 24
195.214.195.0/24 maxlen: 24
212.42.64.0/22 maxlen: 22
212.42.64.0/23 maxlen: 23
212.42.64.0/24 maxlen: 24
212.42.65.0/24 maxlen: 24
212.42.66.0/23 maxlen: 23
212.42.71.0/24 maxlen: 24
212.42.72.0/24 maxlen: 24
212.42.73.0/24 maxlen: 24
212.42.74.0/23 maxlen: 23
212.42.76.0/23 maxlen: 23
212.42.76.0/24 maxlen: 24
212.42.77.0/24 maxlen: 24
212.42.78.0/23 maxlen: 23
212.42.78.0/24 maxlen: 24
212.42.79.0/24 maxlen: 24
212.42.80.0/22 maxlen: 22
212.42.80.0/24 maxlen: 24
212.42.81.0/24 maxlen: 24
212.42.82.0/23 maxlen: 23
212.42.84.0/24 maxlen: 24
212.42.85.0/24 maxlen: 24
212.42.89.0/24 maxlen: 24
212.42.92.0/24 maxlen: 24
212.42.93.0/24 maxlen: 24
212.42.94.0/23 maxlen: 23
212.42.94.0/24 maxlen: 24
212.42.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:3c:ab:f4:73:7d:26:f6:38:9e:2f:1e:15:8f:91:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: May 22 10:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2997078c6123944aa2aaabdace89714971036ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:87:43:42:67:53:e2:56:eb:78:91:d1:4a:
07:5e:70:13:6a:5e:07:1d:9d:55:cb:cc:98:ce:65:
89:9c:1a:85:98:d6:67:fd:ee:6c:32:9a:b3:81:8c:
8e:7c:c7:60:1d:86:b6:44:3c:fe:4b:cc:a5:4d:a9:
ec:f5:d7:f9:9d:07:cc:90:0c:84:4f:3b:15:c5:c3:
37:f7:38:37:e6:35:81:db:6d:eb:29:85:48:11:72:
fb:70:f2:94:16:a6:8d:b1:c7:01:b6:2b:1e:c5:8b:
b8:d7:d7:01:2d:e8:26:ad:07:f2:d1:72:ea:e3:42:
3b:59:1b:c9:4d:48:02:32:59:c3:72:04:73:41:2d:
1c:82:28:32:8a:46:cc:81:c0:13:be:99:e9:c3:ee:
2f:ae:9c:eb:dc:c8:52:c5:f4:8c:08:71:54:80:f5:
a2:ad:ee:c8:cb:2a:aa:da:58:aa:6e:85:69:0a:d1:
4e:c8:b3:64:93:04:3a:e3:04:fa:46:81:90:b1:d6:
1a:2e:e3:90:e5:56:86:f4:ff:bb:52:64:f3:fa:db:
00:ef:e4:d1:43:af:a0:f6:6c:75:65:f6:48:00:be:
f5:87:c1:d1:4f:dd:18:f8:63:dd:d7:f6:33:bc:8e:
15:c1:b2:c8:b0:57:36:ad:ae:1f:27:f9:b6:ca:40:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:97:07:8C:61:23:94:4A:A2:AA:AB:DA:CE:89:71:49:71:03:6E:E0
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/KZcHjGEjlEqiqqvazolxSXEDbuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.192.0/22
212.42.64.0/22
212.42.71.0-212.42.85.255
212.42.89.0/24
212.42.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:f3:e5:fc:5e:45:0b:84:6b:9a:ef:f4:32:1c:05:db:3a:2e:
6e:42:cd:46:35:8f:90:0f:05:6e:db:2c:23:c6:84:ba:de:82:
3f:33:10:1d:e9:db:94:29:c1:5c:52:bf:c4:c3:12:8b:c2:a6:
4b:c8:b1:2e:34:48:f5:97:49:11:d9:8f:67:59:7f:c4:b9:9b:
19:bb:56:c7:f2:a4:f2:33:0b:bc:50:ad:8d:dc:09:fc:35:3e:
2b:d6:97:61:ff:c3:31:2c:8c:55:f0:d4:0d:00:ad:c7:9d:02:
f6:c2:94:8a:3e:9a:0a:76:47:c3:4a:e9:b6:ba:55:eb:f6:58:
33:62:2a:32:e4:7e:0f:6c:bd:b4:fe:fc:9a:a0:30:20:00:e5:
16:86:00:77:65:f8:2c:0a:41:a2:b7:5e:df:13:83:fc:04:a7:
d5:4e:22:1c:27:5e:db:0e:82:f8:a0:82:22:26:e0:8b:d7:f2:
0a:79:46:bb:63:4c:d4:fa:d4:f6:ce:00:3d:71:9d:c1:79:5f:
58:fa:aa:a7:88:29:4b:58:9b:56:87:48:be:83:ab:d4:f6:51:
78:d4:52:c7:90:ba:60:a5:65:47:be:d8:a2:90:55:1e:0a:d4:
31:90:ad:db:32:54:38:7d:0e:86:a7:e6:0c:bb:13:cb:f3:47:
22:d6:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:18:05 2026 by rpki-client