Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa
File: Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa (raw, json)
Hash identifier: l5siJkXM+WfWhL0L8OL/uvl+AJmTO8+Cpk3bOaW4F7E=
Subject key identifier: 2A:3D:A7:26:9A:88:EC:61:2E:F8:AF:93:B1:B0:11:57:36:05:A9:33
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019E627692A1484B1B622714EA7486DD5878
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa
Signing time: Tue 26 May 2026 04:06:38 +0000
ROA not before: Tue 26 May 2026 04:06:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396881
IP address blocks: 185.242.212.0/24 maxlen: 24
185.242.213.0/24 maxlen: 24
185.242.214.0/24 maxlen: 24
185.242.215.0/24 maxlen: 24
2a0c:e680::/48 maxlen: 48
2a0c:e680:1::/48 maxlen: 48
2a0c:e680:2::/48 maxlen: 48
2a0c:e680:3::/48 maxlen: 48
2a0c:e680:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:62:76:92:a1:48:4b:1b:62:27:14:ea:74:86:dd:58:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: May 26 04:06:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a3da7269a88ec612ef8af93b1b011573605a933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:57:76:59:18:e9:70:cb:67:e1:73:2a:09:
9c:f2:1c:aa:00:9e:d3:48:b7:2a:23:0f:be:b4:85:
1d:a6:cb:4a:f7:fd:b9:54:73:6b:b8:a3:60:2f:4d:
79:6e:3c:b3:95:45:11:d4:a9:2e:81:65:f5:42:8b:
d5:cf:6a:3b:48:85:c5:f8:96:f8:29:09:b9:ac:79:
fa:1b:4c:36:53:63:5b:da:49:33:5a:81:40:46:30:
35:b1:5d:d4:98:5e:f6:2a:8e:c2:8e:f2:f4:8f:5f:
9b:d5:58:06:3b:22:86:8f:a1:70:34:ea:7a:c2:25:
3f:07:24:66:18:7a:2c:b2:56:bd:c7:fc:52:c7:37:
87:da:7f:ba:5e:07:cc:ba:b6:7c:ae:fe:2a:f7:89:
d5:59:91:2f:72:e2:4c:77:b9:5d:bd:15:9f:98:61:
ff:63:f2:83:03:eb:e0:a5:6d:a3:24:78:8b:87:ec:
12:58:b8:3c:9e:21:42:ff:b0:97:bb:81:cd:44:9c:
e7:a0:ae:d7:23:70:b3:0e:89:c1:81:e0:61:31:39:
a3:02:d7:78:89:5b:40:ae:b4:5a:db:88:16:b6:5f:
2a:5a:32:18:e8:45:32:2a:b4:70:df:db:ae:96:f3:
82:29:1d:25:d6:b3:f2:23:d9:c7:1b:e8:96:61:ea:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:A7:26:9A:88:EC:61:2E:F8:AF:93:B1:B0:11:57:36:05:A9:33
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.212.0/22
IPv6:
2a0c:e680::-2a0c:e680:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:2b:73:c8:b3:f9:33:0a:6f:2c:ea:f5:35:ef:38:f0:72:41:
83:b1:fe:d1:28:02:e7:e0:fa:25:ce:c7:fe:c7:ae:30:f1:8b:
8d:f4:c1:ff:81:51:8a:91:df:5a:ac:56:99:cb:1d:48:c2:a7:
7b:31:b9:c7:54:a1:c8:ca:4e:5b:e9:6c:e9:dd:1b:0c:38:3c:
58:ae:8c:19:ab:81:62:af:4a:f9:d9:6f:98:8d:62:db:f2:65:
f2:0f:54:1e:74:75:08:75:3e:e3:5b:6c:46:8f:8d:77:0f:fb:
36:cf:90:20:44:13:fb:0d:78:1b:4f:5c:04:8d:54:b6:43:45:
fe:b4:a1:09:40:36:04:b5:a4:2d:ca:10:b1:0b:80:91:68:1c:
b7:1c:6e:c7:c2:83:fc:8f:96:a1:6a:6d:78:78:35:d0:62:fb:
09:f5:77:14:a4:26:1e:17:70:e3:68:fe:4c:7d:12:78:72:5c:
b2:99:e2:ad:a1:ad:ca:cb:80:6c:2c:e1:e5:2f:f5:9f:36:38:
97:98:5a:93:75:a6:aa:e5:2e:1e:47:59:f7:e2:68:42:af:39:
cf:cd:62:b6:f6:17:2c:57:78:cc:f8:97:11:ee:31:70:b5:dc:
49:a4:28:11:79:4e:62:21:a3:33:de:76:5d:3e:b1:8c:5c:43:
3b:da:6c:0d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ5idpKhSEsbYicU6nSG3Vh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MjdmMjFkNDA2MjFlNTgxM2U0YTA2OTIxMTk0N2UyNGQw
MGU3OTcwHhcNMjYwNTI2MDQwNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTNkYTcyNjlhODhlYzYxMmVmOGFmOTNiMWIwMTE1NzM2MDVhOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DZXdlkY6XDLZ+FzKgmc8hyqAJ7T
SLcqIw++tIUdpstK9/25VHNruKNgL015bjyzlUUR1KkugWX1QovVz2o7SIXF+Jb4
KQm5rHn6G0w2U2Nb2kkzWoFARjA1sV3UmF72Ko7CjvL0j1+b1VgGOyKGj6FwNOp6
wiU/ByRmGHossla9x/xSxzeH2n+6XgfMurZ8rv4q94nVWZEvcuJMd7ldvRWfmGH/
Y/KDA+vgpW2jJHiLh+wSWLg8niFC/7CXu4HNRJznoK7XI3CzDonBgeBhMTmjAtd4
iVtArrRa24gWtl8qWjIY6EUyKrRw39uulvOCKR0l1rPyI9nHG+iWYeqbzwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCo9pyaaiOxhLvivk7GwEVc2BakzMB8GA1UdIwQY
MBaAFEUn8h1AYh5YE+SgaSEZR+JNAOeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYt
ZjA4NmU2Zjk2Y2JiLzEvS2oybkpwcUk3R0V1LUstVHNiQVJWellGcVRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYtZjA4NmU2Zjk2Y2Ji
LzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCufLUMBgE
AgACMBIwEAMFByoM5oADBwAqDOaAAAQwDQYJKoZIhvcNAQELBQADggEBAJorc8iz
+TMKbyzq9TXvOPByQYOx/tEoAufg+iXOx/7HrjDxi430wf+BUYqR31qsVpnLHUjC
p3sxucdUocjKTlvpbOndGww4PFiujBmrgWKvSvnZb5iNYtvyZfIPVB50dQh1PuNb
bEaPjXcP+zbPkCBEE/sNeBtPXASNVLZDRf60oQlANgS1pC3KELELgJFoHLccbsfC
g/yPlqFqbXh4NdBi+wn1dxSkJh4XcONo/kx9EnhyXLKZ4q2hrcrLgGws4eUv9Z82
OJeYWpN1pqrlLh5HWffiaEKvOc/NYrb2FyxXeMz4lxHuMXC13EmkKBF5TmIhozPe
dl0+sYxcQzvabA0=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:48:32 2026 by rpki-client