Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/kKVTRqLoF0Ci8dpNet9kwZmxDT0.roa
File: kKVTRqLoF0Ci8dpNet9kwZmxDT0.roa (raw, json)
Hash identifier: 8tx64HA0nG1Eva97BQI3PWU25m9pw2mjQ77BqQyADfY=
Subject key identifier: 90:A5:53:46:A2:E8:17:40:A2:F1:DA:4D:7A:DF:64:C1:99:B1:0D:3D
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019D7088B2AC9C892EE8B99CE1E477ADCFDA
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/kKVTRqLoF0Ci8dpNet9kwZmxDT0.roa
Signing time: Thu 09 Apr 2026 04:38:20 +0000
ROA not before: Thu 09 Apr 2026 04:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58172
IP address blocks: 45.133.232.0/23 maxlen: 23
45.135.131.0/24 maxlen: 24
91.213.49.0/24 maxlen: 24
94.131.60.0/24 maxlen: 24
94.131.61.0/24 maxlen: 24
94.131.62.0/24 maxlen: 24
94.131.63.0/24 maxlen: 24
94.131.224.0/24 maxlen: 24
94.131.225.0/24 maxlen: 24
94.131.226.0/23 maxlen: 23
94.131.226.0/24 maxlen: 24
94.131.227.0/24 maxlen: 24
94.131.228.0/24 maxlen: 24
94.131.229.0/24 maxlen: 24
94.131.230.0/24 maxlen: 24
94.131.231.0/24 maxlen: 24
94.131.232.0/24 maxlen: 24
94.131.233.0/24 maxlen: 24
94.131.234.0/23 maxlen: 23
94.131.234.0/24 maxlen: 24
94.131.235.0/24 maxlen: 24
94.131.236.0/23 maxlen: 23
94.131.236.0/24 maxlen: 24
94.131.237.0/24 maxlen: 24
94.131.239.0/24 maxlen: 24
157.22.232.0/24 maxlen: 24
157.22.233.0/24 maxlen: 24
157.22.237.0/24 maxlen: 24
157.22.238.0/24 maxlen: 24
157.22.239.0/24 maxlen: 24
185.191.212.0/24 maxlen: 24
185.210.139.0/24 maxlen: 24
193.148.60.0/24 maxlen: 24
194.35.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:88:b2:ac:9c:89:2e:e8:b9:9c:e1:e4:77:ad:cf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Apr 9 04:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90a55346a2e81740a2f1da4d7adf64c199b10d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:b4:f4:d6:01:f9:41:92:ff:de:ce:ed:a8:
5e:b1:fd:56:44:35:c0:58:27:d3:e8:87:73:69:6e:
81:41:6e:b1:7c:1e:31:61:21:6a:2e:65:59:ac:53:
0b:89:40:82:2c:ec:ac:7a:aa:9e:de:2a:0f:4e:be:
ae:eb:a3:88:57:0f:73:87:51:ef:d1:85:e9:0b:9a:
52:df:40:9d:b6:1c:dc:f7:aa:a9:43:d7:d6:ba:08:
d1:aa:17:a6:31:e6:f2:28:d5:5c:f7:db:81:ae:e4:
be:ed:a9:3f:d7:6e:2f:a8:46:10:21:21:9c:71:01:
ac:63:ea:47:ee:c6:b5:93:22:97:2a:c5:4d:c5:9e:
17:3d:11:c7:14:ea:ef:eb:ad:66:00:08:15:e9:21:
07:8f:6d:e4:12:0b:32:ed:24:dc:7f:fb:f9:6c:04:
98:92:99:2a:88:39:17:6b:9c:99:2c:e4:41:20:8a:
fa:5a:a5:c7:9d:46:6e:d8:22:98:6c:a3:33:62:3b:
70:84:0d:e2:79:68:68:60:23:c7:8f:c3:81:df:87:
5e:23:fd:7c:0d:02:16:e1:4b:39:e9:54:cb:a5:9d:
1f:8d:00:91:c4:3e:b9:0e:fc:bc:6e:91:63:30:93:
f6:3d:77:e1:86:03:b7:52:9a:7d:a9:fb:d0:fa:87:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A5:53:46:A2:E8:17:40:A2:F1:DA:4D:7A:DF:64:C1:99:B1:0D:3D
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/kKVTRqLoF0Ci8dpNet9kwZmxDT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.232.0/23
45.135.131.0/24
91.213.49.0/24
94.131.60.0/22
94.131.224.0-94.131.237.255
94.131.239.0/24
157.22.232.0/23
157.22.237.0-157.22.239.255
185.191.212.0/24
185.210.139.0/24
193.148.60.0/24
194.35.124.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6e:74:9f:b5:8a:aa:0f:99:5d:7c:96:34:f8:ce:39:f4:4a:
be:8f:36:e4:89:49:01:29:e8:9e:b6:ba:69:73:ee:5d:db:ec:
e3:34:25:86:98:34:e9:1b:70:d1:c0:7d:51:15:53:13:f9:69:
91:fa:c3:81:a8:80:dd:46:3b:ca:34:a6:52:ee:cd:19:0a:09:
07:31:e0:90:9c:50:c4:99:4a:39:07:4d:3b:63:1e:4b:6e:b6:
70:81:dc:db:08:8f:60:b5:31:ab:c1:6c:c3:00:36:bd:20:78:
8f:ed:0e:6a:91:95:d6:23:0a:f8:65:17:36:7b:cb:d4:c1:6d:
33:b0:83:62:e9:c2:ee:38:ed:f9:5c:f4:9b:0a:9d:8a:c5:b6:
31:0b:a5:dd:8f:5b:62:e0:c5:42:1a:00:96:15:bc:0a:d0:2e:
83:ee:9e:90:bf:79:62:e4:f6:de:94:f0:69:8f:bd:d8:70:92:
bd:35:de:82:02:e9:cc:cd:9e:7c:84:f9:94:76:06:23:33:79:
0d:c7:0f:b2:61:91:54:08:8c:e0:c0:e0:c0:7d:a7:57:c3:08:
2e:a9:5a:0f:c4:ac:d0:22:37:89:af:12:cb:da:80:db:b0:f6:
77:43:1d:43:97:73:fe:ee:d5:af:af:8b:f4:cb:14:99:52:08:
43:57:66:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAZ1wiLKsnIku6Lmc4eR3rc/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2M2NjVlNTFjYzRjYjVjYWYwNWI4Mjk0ODQzZTI3MzNh
MTNkZWUwHhcNMjYwNDA5MDQzODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGE1NTM0NmEyZTgxNzQwYTJmMWRhNGQ3YWRmNjRjMTk5YjEwZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTm09NYB+UGS/97O7ahesf1WRDXA
WCfT6IdzaW6BQW6xfB4xYSFqLmVZrFMLiUCCLOyseqqe3ioPTr6u66OIVw9zh1Hv
0YXpC5pS30Cdthzc96qpQ9fWugjRqhemMebyKNVc99uBruS+7ak/124vqEYQISGc
cQGsY+pH7sa1kyKXKsVNxZ4XPRHHFOrv661mAAgV6SEHj23kEgsy7STcf/v5bASY
kpkqiDkXa5yZLORBIIr6WqXHnUZu2CKYbKMzYjtwhA3ieWhoYCPHj8OB34deI/18
DQIW4Us56VTLpZ0fjQCRxD65Dvy8bpFjMJP2PXfhhgO3Upp9qfvQ+ofO2wIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFJClU0ai6BdAovHaTXrfZMGZsQ09MB8GA1UdIwQY
MBaAFEw8Zl5RzEy1yvBbgpSEPiczoT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUt
MWE2NWI5MWJlZTU4LzEva0tWVFJxTG9GMENpOGRwTmV0OWt3Wm14RFQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUtMWE2NWI5MWJlZTU4
LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQBLYXoAwQA
LYeDAwQAW9UxAwQCXoM8MAwDBAVeg+ADBAFeg+wDBABeg+8DBAGdFugwDAMEAJ0W
7QMEBJ0W4AMEALm/1AMEALnSiwMEAMGUPAMEAMIjfDANBgkqhkiG9w0BAQsFAAOC
AQEAhG50n7WKqg+ZXXyWNPjOOfRKvo825IlJASnonra6aXPuXdvs4zQlhpg06Rtw
0cB9URVTE/lpkfrDgaiA3UY7yjSmUu7NGQoJBzHgkJxQxJlKOQdNO2MeS262cIHc
2wiPYLUxq8FswwA2vSB4j+0OapGV1iMK+GUXNnvL1MFtM7CDYunC7jjt+Vz0mwqd
isW2MQul3Y9bYuDFQhoAlhW8CtAug+6ekL95YuT23pTwaY+92HCSvTXeggLpzM2e
fIT5lHYGIzN5DccPsmGRVAiM4MDgwH2nV8MILqlaD8Ss0CI3ia8Sy9qA27D2d0Md
Q5dz/u7Vr6+L9MsUmVIIQ1dm9Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:37 2026 by rpki-client