Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/KZa0_YbQudyugjKyiPylUaqa8cM.roa
File: KZa0_YbQudyugjKyiPylUaqa8cM.roa (raw, json)
Hash identifier: a784ru0dQdWa0IZvtgp9kIyG4IBuCvFCniVmgSRiiKk=
Subject key identifier: 29:96:B4:FD:86:D0:B9:DC:AE:82:32:B2:88:FC:A5:51:AA:9A:F1:C3
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019E3A765FBFE62F3CF4AEC2986B1849BD15
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/KZa0_YbQudyugjKyiPylUaqa8cM.roa
Signing time: Mon 18 May 2026 09:41:36 +0000
ROA not before: Mon 18 May 2026 09:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199527
IP address blocks: 84.46.203.0/24 maxlen: 24
86.38.163.0/24 maxlen: 24
185.189.152.0/24 maxlen: 24
213.252.208.0/24 maxlen: 24
213.252.209.0/24 maxlen: 24
213.252.242.0/24 maxlen: 24
213.252.250.0/24 maxlen: 24
213.252.251.0/24 maxlen: 24
213.252.253.0/24 maxlen: 24
2a00:f501:a001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:76:5f:bf:e6:2f:3c:f4:ae:c2:98:6b:18:49:bd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: May 18 09:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2996b4fd86d0b9dcae8232b288fca551aa9af1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:ef:10:2b:9b:39:2b:bb:b7:02:b7:96:cf:
9e:15:1d:aa:ec:96:25:ba:ef:2a:5f:60:e0:45:8a:
12:0c:42:a5:10:8f:0e:bb:1d:70:6f:ba:42:50:a1:
ce:0e:bf:a1:23:78:de:20:50:7b:92:f5:96:78:2c:
09:30:9b:56:47:0b:95:60:ae:0c:10:df:3e:a0:87:
c2:46:c6:d9:bd:04:cd:b1:a4:85:c9:de:e5:6e:c5:
1e:11:ce:c6:96:b2:21:c6:d5:5d:53:8e:15:76:17:
f9:9f:10:51:fd:95:dc:47:95:35:e8:d3:5a:00:f9:
26:f5:99:0d:d6:82:cb:28:6c:0b:33:18:4e:6f:ab:
6e:08:eb:33:e3:f6:9d:b5:6d:e2:f5:b7:90:9c:17:
17:13:91:31:b6:2b:90:7a:ee:f3:c0:d0:f0:47:87:
df:65:1c:d5:81:49:5f:06:cf:56:0c:0e:4c:cf:6d:
6a:70:72:55:13:45:b5:b1:63:a3:aa:cc:60:39:ba:
39:e0:5e:ce:85:76:92:bb:7c:79:45:d2:eb:68:ba:
a2:e9:00:ec:fd:33:9c:3a:d3:58:d7:5f:c4:85:04:
15:6f:89:5b:25:c7:ff:4b:09:60:fd:89:f5:e7:d5:
4d:88:da:aa:58:a3:8d:08:0e:c0:16:b5:ac:48:f5:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:96:B4:FD:86:D0:B9:DC:AE:82:32:B2:88:FC:A5:51:AA:9A:F1:C3
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/KZa0_YbQudyugjKyiPylUaqa8cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.203.0/24
86.38.163.0/24
185.189.152.0/24
213.252.208.0/23
213.252.242.0/24
213.252.250.0/23
213.252.253.0/24
IPv6:
2a00:f501:a001::/48
Signature Algorithm: sha256WithRSAEncryption
46:8b:85:e3:3e:bb:a3:23:60:1d:b7:f5:6e:fd:af:8d:fd:e3:
82:c5:a7:3b:bf:98:09:66:e4:b0:c0:86:2c:a6:98:7c:d4:b2:
76:3a:c5:9d:ec:11:c5:22:87:cf:73:a8:6a:c6:b4:bc:0b:0b:
9a:4b:de:59:2f:cf:6c:de:b0:b3:b3:fd:ea:2b:71:22:67:09:
52:2c:aa:70:fe:c8:db:4d:9b:f5:51:e6:c0:c0:19:d3:ad:9e:
e9:c7:7b:5b:6b:e6:c6:52:b7:67:23:43:df:29:4a:4c:81:9f:
0c:38:6e:bf:fb:d8:46:2a:aa:72:71:9e:09:55:c9:76:ce:bd:
de:45:86:f2:3d:1b:bf:9d:a9:52:17:ec:d0:d5:b2:55:3a:4e:
a3:af:5d:cb:9c:d2:7d:3e:c7:36:88:66:b7:bd:4d:b5:5b:f8:
66:a7:12:51:9b:e4:54:24:d0:68:aa:db:b7:b3:50:3f:92:05:
20:38:62:3a:12:6f:da:95:10:69:26:e0:88:38:92:70:e8:ce:
70:22:41:96:58:bf:4c:72:84:0a:51:13:ec:d5:08:bf:c4:65:
a6:bc:6b:ea:3e:04:57:24:e9:28:8c:18:12:df:7e:96:d9:48:
ea:41:2a:13:e0:96:01:6a:5b:b2:9b:f8:68:b1:12:04:73:0d:
ac:19:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:26:41 2026 by rpki-client