Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kzAnIaHCUl_Xp1K6MuxzBHxKIS4.roa
File: kzAnIaHCUl_Xp1K6MuxzBHxKIS4.roa (raw, json)
Hash identifier: l+qTDeI8EY5ntkMrTsN2baChJNBZco+7lu4Qk/OBwYA=
Subject key identifier: 93:30:27:21:A1:C2:52:5F:D7:A7:52:BA:32:EC:73:04:7C:4A:21:2E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D77E132D38CC1D66B4DFA5B0425AFF7DB
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kzAnIaHCUl_Xp1K6MuxzBHxKIS4.roa
Signing time: Fri 10 Apr 2026 14:52:20 +0000
ROA not before: Fri 10 Apr 2026 14:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212706
IP address blocks: 186.246.34.0/24 maxlen: 24
186.246.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:e1:32:d3:8c:c1:d6:6b:4d:fa:5b:04:25:af:f7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 10 14:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93302721a1c2525fd7a752ba32ec73047c4a212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:b8:09:52:90:ea:ae:5c:c7:8b:c2:15:bc:
cc:c4:da:65:9d:df:2e:e9:82:5b:e7:cf:a5:3f:0b:
92:41:3e:53:fe:21:4e:de:17:f3:77:ee:bd:b5:5a:
83:67:03:3c:04:33:ef:5e:a7:ca:54:6b:40:8f:4a:
0b:77:d9:d9:e1:ae:68:06:65:cb:08:52:96:f0:2e:
d0:5f:57:62:48:24:b6:cc:31:8a:56:b5:db:70:21:
b6:fd:8d:9a:e6:a5:ba:d7:d8:6d:04:f7:6b:2f:ce:
18:17:66:c2:4e:90:99:98:d4:1e:a7:62:ef:05:fe:
6d:46:34:13:32:8f:3a:17:91:8c:22:f3:cb:e0:88:
42:77:ff:9f:4f:e5:27:61:41:2d:24:63:06:39:ad:
29:88:27:91:85:e0:91:aa:da:4c:4f:e9:d1:48:dc:
67:db:f1:0a:08:86:c0:2c:a4:c7:65:a0:7b:dd:60:
ea:c8:30:ef:b9:8d:eb:c7:f4:bf:4a:aa:cc:c5:67:
5d:78:2d:80:a9:14:eb:dd:c6:9b:bd:b2:f8:2b:00:
5c:60:a6:7f:34:60:ce:7f:1f:a1:37:0d:34:00:aa:
12:eb:d9:6f:8b:83:9a:9a:29:8b:79:13:fb:d1:21:
6c:39:ec:41:16:a6:19:9f:c4:b1:0e:10:ba:67:5e:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:27:21:A1:C2:52:5F:D7:A7:52:BA:32:EC:73:04:7C:4A:21:2E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kzAnIaHCUl_Xp1K6MuxzBHxKIS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.246.34.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:b6:86:6e:e6:6c:f9:44:b3:cb:22:e1:38:12:3e:d6:f4:1c:
c5:9c:74:8f:92:fe:93:b7:52:e8:85:f3:bd:9b:81:34:2c:a8:
c4:44:30:c6:4c:15:3c:4b:56:19:fa:aa:1c:d4:d9:95:a6:0d:
b8:f5:0e:ac:30:53:ac:3b:01:22:23:d6:e5:08:11:d2:c6:2b:
a9:75:52:47:6a:cf:3a:f7:76:3b:0d:45:3a:4f:74:32:96:16:
6f:3c:e3:5b:32:70:87:98:ce:fc:b6:8f:52:60:04:0f:e8:27:
a5:d8:20:9c:9b:66:9d:70:55:cc:ae:f7:1e:a9:20:a9:de:c8:
73:b8:d9:fa:49:8d:5a:e5:c8:ee:1c:d8:b0:7e:80:e2:c7:3e:
ce:90:92:8e:aa:13:fb:95:ca:c3:03:66:84:b0:94:ea:df:ae:
51:e6:fe:6d:36:64:4e:45:2a:7a:5d:f7:69:1e:f8:65:d3:7c:
7d:11:f6:83:f7:c9:6d:6a:7a:41:1d:f2:97:96:39:78:cb:85:
6c:f8:f7:91:9a:d3:59:b4:9e:06:a2:06:91:39:4f:1d:fa:7f:
05:51:ab:a7:83:ec:d2:b7:9a:4a:5e:13:ce:34:a2:bb:18:57:
50:f3:a7:3d:98:cc:b7:2a:7f:01:1e:a1:6e:e3:c4:e4:5f:a1:
89:77:b7:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ134TLTjMHWa036WwQlr/fbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNDEwMTQ1MjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzMwMjcyMWExYzI1MjVmZDdhNzUyYmEzMmVjNzMwNDdjNGEyMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QS4CVKQ6q5cx4vCFbzMxNplnd8u
6YJb58+lPwuSQT5T/iFO3hfzd+69tVqDZwM8BDPvXqfKVGtAj0oLd9nZ4a5oBmXL
CFKW8C7QX1diSCS2zDGKVrXbcCG2/Y2a5qW619htBPdrL84YF2bCTpCZmNQep2Lv
Bf5tRjQTMo86F5GMIvPL4IhCd/+fT+UnYUEtJGMGOa0piCeRheCRqtpMT+nRSNxn
2/EKCIbALKTHZaB73WDqyDDvuY3rx/S/SqrMxWddeC2AqRTr3cabvbL4KwBcYKZ/
NGDOfx+hNw00AKoS69lvi4OamimLeRP70SFsOexBFqYZn8SxDhC6Z15kwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMwJyGhwlJf16dSujLscwR8SiEuMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEva3pBbklhSENVbF9YcDFLNk11eHpCSHhLSVM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuvYiMA0G
CSqGSIb3DQEBCwUAA4IBAQBMtoZu5mz5RLPLIuE4Ej7W9BzFnHSPkv6Tt1LohfO9
m4E0LKjERDDGTBU8S1YZ+qoc1NmVpg249Q6sMFOsOwEiI9blCBHSxiupdVJHas86
93Y7DUU6T3QylhZvPONbMnCHmM78to9SYAQP6Cel2CCcm2adcFXMrvceqSCp3shz
uNn6SY1a5cjuHNiwfoDixz7OkJKOqhP7lcrDA2aEsJTq365R5v5tNmRORSp6Xfdp
Hvhl03x9EfaD98ltanpBHfKXljl4y4Vs+PeRmtNZtJ4GogaROU8d+n8FUaung+zS
t5pKXhPONKK7GFdQ86c9mMy3Kn8BHqFu48TkX6GJd7c2
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:42 2026 by rpki-client