Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/KvQoUKxzlm2bYLnTJsts-w-TcrU.roa
File: KvQoUKxzlm2bYLnTJsts-w-TcrU.roa (raw, json)
Hash identifier: BBSoYnTZuL5owf86CGVpVHe4npeKcErqmg2NyDoIj+s=
Subject key identifier: 2A:F4:28:50:AC:73:96:6D:9B:60:B9:D3:26:CB:6C:FB:0F:93:72:B5
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A11D4077242AA06134F80BA799159B789B
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/KvQoUKxzlm2bYLnTJsts-w-TcrU.roa
Signing time: Thu 08 Oct 2026 20:42:06 +0000
ROA not before: Thu 08 Oct 2026 20:42:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 61.14.224.0/23 maxlen: 24
61.14.227.0/24 maxlen: 24
62.106.64.0/24 maxlen: 24
79.110.176.0/21 maxlen: 24
85.202.172.0/22 maxlen: 24
91.132.84.0/24 maxlen: 32
91.132.87.0/24 maxlen: 32
103.203.40.0/23 maxlen: 24
103.203.43.0/24 maxlen: 24
103.205.84.0/23 maxlen: 24
103.205.86.0/24 maxlen: 24
103.207.161.0/24 maxlen: 24
103.207.162.0/23 maxlen: 24
121.46.124.0/22 maxlen: 24
146.19.82.0/24 maxlen: 24
160.238.96.0/24 maxlen: 24
160.238.99.0/24 maxlen: 24
185.93.4.0/24 maxlen: 24
185.105.10.0/24 maxlen: 24
185.118.132.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.145.44.0/24 maxlen: 24
185.157.232.0/22 maxlen: 24
185.176.89.0/24 maxlen: 24
185.176.90.0/24 maxlen: 24
185.176.91.0/24 maxlen: 24
185.190.59.0/24 maxlen: 24
185.196.24.0/24 maxlen: 24
185.202.44.0/23 maxlen: 24
185.206.20.0/23 maxlen: 24
185.209.128.0/23 maxlen: 24
185.209.130.0/24 maxlen: 24
185.214.140.0/23 maxlen: 24
185.214.142.0/24 maxlen: 24
185.218.185.0/24 maxlen: 24
185.219.21.0/24 maxlen: 32
185.219.22.0/24 maxlen: 32
185.225.12.0/22 maxlen: 24
185.227.254.0/24 maxlen: 24
185.228.44.0/22 maxlen: 24
185.232.42.0/24 maxlen: 24
185.235.120.0/24 maxlen: 24
185.235.122.0/24 maxlen: 24
193.163.35.0/24 maxlen: 24
193.176.116.0/24 maxlen: 24
193.176.118.0/23 maxlen: 24
193.187.180.0/22 maxlen: 24
194.8.134.0/24 maxlen: 24
194.50.192.0/23 maxlen: 24
194.50.195.0/24 maxlen: 24
194.69.161.0/24 maxlen: 24
195.216.150.0/24 maxlen: 32
195.245.74.0/23 maxlen: 24
213.109.157.0/24 maxlen: 24
217.18.56.0/22 maxlen: 24
2a07:4580::/29 maxlen: 29
2a07:4580::/32 maxlen: 48
2a07:4580:b0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:40:77:24:2a:a0:61:34:f8:0b:a7:99:15:9b:78:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 8 20:42:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2af42850ac73966d9b60b9d326cb6cfb0f9372b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d5:12:17:7f:e6:4e:f6:e5:7c:4b:35:bc:ad:
d1:dc:c8:06:16:3d:50:0e:ea:95:cc:08:48:b6:3c:
d5:9c:da:63:fc:8a:87:da:07:e1:1f:a6:77:e4:79:
c7:83:c8:ae:56:f3:a8:e7:cb:41:b6:8e:99:47:96:
cb:1b:7d:d7:1e:b4:9a:d4:0a:e5:0d:6a:fe:b3:ec:
d1:00:3d:5d:03:51:1e:6e:4b:0e:37:f6:5e:13:12:
3a:17:35:01:79:44:41:0e:1e:69:96:f5:8a:d5:6f:
d7:54:c1:7d:d3:e4:83:7b:59:1f:db:aa:1a:99:ff:
5a:c6:c3:4f:a6:2c:b6:f1:a1:e3:22:a8:99:74:e3:
e9:6f:bc:ea:e4:a4:b3:7b:76:fa:25:0c:28:0d:5f:
32:c2:2c:87:29:05:3d:7d:63:f8:18:1d:75:7f:ae:
25:2f:87:f3:65:10:af:d5:24:ff:db:e3:a8:d7:3e:
8c:54:ec:1e:40:e8:8e:90:a0:49:90:8c:6d:86:86:
16:57:1c:11:18:ce:8f:ea:81:ca:0e:93:dd:c6:b8:
28:3c:35:88:b3:92:d8:0f:fb:2d:2a:fd:a5:31:18:
e2:d0:4d:da:2d:02:4a:60:63:6d:86:ed:d3:5e:62:
f1:ab:60:d5:a0:42:e9:37:d3:e2:b0:3e:af:4c:59:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:28:50:AC:73:96:6D:9B:60:B9:D3:26:CB:6C:FB:0F:93:72:B5
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/KvQoUKxzlm2bYLnTJsts-w-TcrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.224.0/23
61.14.227.0/24
62.106.64.0/24
79.110.176.0/21
85.202.172.0/22
91.132.84.0/24
91.132.87.0/24
103.203.40.0/23
103.203.43.0/24
103.205.84.0-103.205.86.255
103.207.161.0-103.207.163.255
121.46.124.0/22
146.19.82.0/24
160.238.96.0/24
160.238.99.0/24
185.93.4.0/24
185.105.10.0/24
185.118.132.0/24
185.118.135.0/24
185.145.44.0/24
185.157.232.0/22
185.176.89.0-185.176.91.255
185.190.59.0/24
185.196.24.0/24
185.202.44.0/23
185.206.20.0/23
185.209.128.0-185.209.130.255
185.214.140.0-185.214.142.255
185.218.185.0/24
185.219.21.0-185.219.22.255
185.225.12.0/22
185.227.254.0/24
185.228.44.0/22
185.232.42.0/24
185.235.120.0/24
185.235.122.0/24
193.163.35.0/24
193.176.116.0/24
193.176.118.0/23
193.187.180.0/22
194.8.134.0/24
194.50.192.0/23
194.50.195.0/24
194.69.161.0/24
195.216.150.0/24
195.245.74.0/23
213.109.157.0/24
217.18.56.0/22
IPv6:
2a07:4580::/29
Signature Algorithm: sha256WithRSAEncryption
0c:13:61:dd:bd:fd:18:10:20:7d:9f:9d:da:68:69:1d:85:fd:
50:95:bc:c7:ec:37:39:9b:33:8d:95:f0:40:05:f4:60:eb:98:
e8:2e:ee:46:20:6a:3f:b8:04:f0:f2:50:3f:e8:1b:85:e5:9f:
d3:67:13:84:56:60:35:a3:8b:db:bc:c8:32:e6:66:69:32:5e:
14:eb:85:98:d5:da:2f:3a:63:ea:b8:7c:b4:5f:df:3c:fd:66:
53:24:4f:be:5d:3b:77:07:3b:6f:8f:5c:d4:14:4f:84:9c:ab:
74:15:41:92:18:b8:2d:7f:32:53:59:a8:7d:91:db:2e:ac:87:
cd:44:7d:64:13:a7:61:62:e0:56:06:3a:22:80:40:61:80:dd:
7b:ec:bd:b6:48:71:57:d8:b9:b6:64:99:5c:f0:80:d4:31:87:
40:91:66:14:55:ea:63:17:dd:92:92:d4:18:88:ae:7a:a4:54:
54:c8:bb:90:b1:f6:23:e8:2d:8c:0f:ec:9f:4b:6c:2e:41:cb:
72:8f:e9:86:5c:28:2d:c8:0b:7a:15:44:88:8c:04:c5:14:42:
ed:5d:b8:8e:03:76:94:4c:9f:ff:b1:d8:0f:67:58:c8:b7:e2:
1f:e4:8c:93:76:96:c5:5f:e2:b8:fc:56:3f:29:5c:d4:f9:05:
14:bd:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:36:57 2026 by rpki-client