Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KOMNv4kJexHVBDbJyLydKJGmXFw.roa
File: KOMNv4kJexHVBDbJyLydKJGmXFw.roa (raw, json)
Hash identifier: iBS6Sa7XbHDsrGQFZFApnpR/MYWwx807cxFvhzlfc8w=
Subject key identifier: 28:E3:0D:BF:89:09:7B:11:D5:04:36:C9:C8:BC:9D:28:91:A6:5C:5C
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A0AA37055812CE6C7246B1F0B25E0953EB
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KOMNv4kJexHVBDbJyLydKJGmXFw.roa
Signing time: Wed 16 Sep 2026 12:35:27 +0000
ROA not before: Wed 16 Sep 2026 12:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29262
IP address blocks: 93.190.14.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:46c0::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
2a10:8b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:37:05:58:12:ce:6c:72:46:b1:f0:b2:5e:09:53:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 16 12:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28e30dbf89097b11d50436c9c8bc9d2891a65c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:80:94:bb:58:6e:16:a6:b3:7f:a7:12:b4:
c0:80:ce:99:2b:d5:13:82:6a:2a:d6:b5:57:a5:d2:
93:f9:08:8d:06:a5:b3:52:56:f8:72:89:20:3f:a1:
6f:9c:8e:91:df:d6:36:a7:e1:0f:31:47:3d:4d:cf:
d8:83:50:2a:10:9e:17:d9:bf:48:d8:2f:b6:44:a6:
9f:18:f3:9d:08:15:4d:31:c7:e7:23:fe:7d:f2:7e:
f8:42:10:15:46:5c:2e:f4:1c:5a:57:ec:9a:13:d7:
8e:93:62:d0:25:b2:90:66:ec:27:c7:50:63:3b:c5:
8f:99:82:a3:4b:e1:92:54:2f:56:fc:58:77:ea:04:
d1:e9:55:df:1c:c3:8d:12:d3:59:ec:a5:dc:db:b6:
30:c5:69:f7:94:75:9b:00:2a:26:19:4e:45:fb:be:
4c:6c:5d:27:47:eb:d6:f0:45:aa:bf:5e:9d:5e:52:
a2:b1:40:4d:64:ef:1e:01:4e:1b:3c:94:69:60:2c:
cc:08:bc:a0:cd:65:ac:66:58:41:ef:d3:53:af:bb:
97:a1:ad:1a:02:ac:61:fd:8b:0f:8c:a4:21:31:85:
e7:da:43:6d:93:d7:a7:77:04:7f:0d:cf:d3:e5:aa:
3e:1b:1a:d4:7f:36:e4:b3:35:7f:62:e6:d8:b4:1f:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:0D:BF:89:09:7B:11:D5:04:36:C9:C8:BC:9D:28:91:A6:5C:5C
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KOMNv4kJexHVBDbJyLydKJGmXFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.14.0/24
185.85.189.0-185.85.190.255
185.85.237.0/24
185.86.5.0/24
185.88.172.0/23
185.88.175.0/24
185.98.63.0/24
185.119.80.0/24
185.249.200.0/22
193.160.140.0/22
193.223.104.0/22
IPv6:
2a0b:6780::/29
2a0c:46c0::/29
2a0c:67c0::/29
2a10:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
25:eb:7a:38:a1:ad:df:6a:9a:28:75:6e:2b:09:7f:29:d7:b8:
e4:d1:8c:c2:f6:55:e0:a4:6e:d7:50:80:9b:f3:8f:fa:91:ab:
e4:5d:6c:d0:e3:df:5b:20:83:14:8a:6e:9c:62:20:3b:08:29:
3f:51:37:0b:8f:a4:17:aa:66:b1:62:07:9d:9e:0e:d2:4f:35:
5c:3b:9f:58:7a:59:99:82:71:72:e8:3b:9e:b2:6d:14:91:fe:
e9:c9:6b:81:f5:57:14:a9:83:4e:66:da:b6:33:cc:40:60:06:
a6:3c:79:86:92:2f:e6:30:c4:9a:2e:01:3e:bc:c9:fd:48:de:
ca:82:55:fb:86:ce:00:5f:83:0a:82:54:51:00:61:b7:2e:bc:
a4:90:b2:60:b6:f3:d9:72:3e:30:53:d1:7e:3a:b0:16:3d:d1:
71:89:b6:74:fd:6d:98:38:09:a6:cb:7a:b6:10:02:b2:58:5c:
06:71:e1:1f:66:36:88:51:f5:e0:20:48:de:be:8c:b4:70:4d:
fb:3a:aa:68:5a:59:2a:90:37:fa:3c:21:f2:e9:d2:39:6c:08:
80:40:3a:d1:6e:d8:c3:17:dc:9a:80:79:c4:10:55:6f:74:2e:
e2:f4:0b:26:c4:eb:de:3c:07:01:a2:15:b2:f6:d0:95:64:ba:
0e:22:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:15 2026 by rpki-client