Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/Kng8WN3TArrnNPoyNaNDEEsmxbw.roa
File: Kng8WN3TArrnNPoyNaNDEEsmxbw.roa (raw, json)
Hash identifier: zHx9dAEAvR3nmTiDNacQD/5h5khoJ8N9qawCWG7hAtw=
Subject key identifier: 2A:78:3C:58:DD:D3:02:BA:E7:34:FA:32:35:A3:43:10:4B:26:C5:BC
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 01A0A5822EE2A9D6461DE376C069835CEC3D
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/Kng8WN3TArrnNPoyNaNDEEsmxbw.roa
Signing time: Tue 15 Sep 2026 14:39:27 +0000
ROA not before: Tue 15 Sep 2026 14:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31753
IP address blocks: 109.232.8.0/22 maxlen: 22
109.232.8.0/24 maxlen: 24
109.232.9.0/24 maxlen: 24
109.232.10.0/24 maxlen: 24
109.232.11.0/24 maxlen: 24
212.165.116.0/23 maxlen: 23
212.165.116.0/24 maxlen: 24
212.165.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:82:2e:e2:a9:d6:46:1d:e3:76:c0:69:83:5c:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Sep 15 14:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a783c58ddd302bae734fa3235a343104b26c5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:c3:c7:9e:87:c1:ae:02:67:00:0d:07:af:
a4:c4:8b:cd:ae:60:8a:03:0d:8b:5e:fd:03:d3:3f:
29:04:17:b1:01:0f:e3:83:00:f5:aa:71:d4:14:82:
30:8f:7e:ac:8a:77:46:1b:8c:44:7c:18:20:f6:dd:
c5:19:67:32:a2:2a:bf:80:9d:8c:f9:70:c2:91:e8:
87:fb:17:ba:c3:89:f0:25:10:6d:f1:d5:3c:9d:fd:
c8:6e:34:60:4f:70:d4:60:d1:e4:f3:e9:ba:d6:09:
69:7e:ad:ce:c6:0f:7f:71:f2:67:01:41:ec:d8:1f:
f4:91:d5:be:43:c0:79:e6:5a:ab:8c:8d:e1:9e:1c:
2b:92:ae:6f:54:82:64:1d:d2:1a:44:a5:67:29:4e:
ba:a8:dc:19:03:bf:93:6f:5f:19:48:51:af:99:08:
20:26:8d:d3:f2:b6:e2:51:ab:bd:f8:09:32:6a:02:
50:db:2d:22:d7:ff:a0:ca:c1:4f:30:48:fe:6b:02:
60:7d:c3:d7:90:4d:f8:25:68:57:0e:48:df:89:cc:
04:47:97:97:b3:d8:66:17:09:1a:e1:4c:3a:82:94:
db:a2:03:16:37:e8:72:56:10:2e:de:6b:7e:7b:e5:
bb:e8:cd:f2:87:21:48:83:89:48:3c:51:20:ed:44:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:78:3C:58:DD:D3:02:BA:E7:34:FA:32:35:A3:43:10:4B:26:C5:BC
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/Kng8WN3TArrnNPoyNaNDEEsmxbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.8.0/22
212.165.116.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:29:f8:a0:e9:c9:b9:ce:49:35:54:21:19:e4:e1:98:0c:7d:
99:5e:83:e3:49:29:35:3c:68:18:d3:7a:a5:51:7f:15:bf:9b:
ea:d0:44:e8:d3:b4:00:d3:6f:03:f0:fb:07:81:67:fb:ee:e9:
5c:5f:f8:43:b4:ba:56:ea:87:d7:1f:7b:56:8e:b5:10:c0:ba:
63:74:b3:0e:6f:24:f9:b6:2d:b2:a1:76:85:07:00:a4:c0:37:
b8:df:9b:8e:d5:79:bd:99:8d:39:8e:9a:e7:9f:65:b5:13:fd:
a8:3b:41:fd:e1:98:51:f3:b4:3a:f0:ab:26:4e:75:46:d0:2c:
fc:07:56:ba:a6:92:d6:b2:a5:a5:aa:fd:60:61:3a:5c:3e:96:
01:99:a9:41:5b:31:0a:6c:7a:b2:1a:96:94:1f:84:58:ad:64:
4d:92:a4:ba:97:59:ff:31:45:18:79:fc:2b:6e:d5:6f:09:17:
18:a7:ef:46:33:e9:7f:30:af:b4:e2:86:eb:7c:ef:43:c2:d1:
a0:0b:84:0e:0a:91:98:cb:5b:6e:09:94:b4:f5:68:a1:94:7d:
f1:58:e9:9b:b7:e3:df:03:d9:ba:65:43:c2:ed:a0:20:85:28:
c4:53:61:19:7e:db:e6:53:56:64:f5:5c:cf:ae:b6:b1:0c:3a:
45:36:b2:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaClgi7iqdZGHeN2wGmDXOw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjBmM2NlYjBlNmI1OTdhMzgxNDVjNWE3NDMzNjljN2Y0
OTY2ZTAwHhcNMjYwOTE1MTQzOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTc4M2M1OGRkZDMwMmJhZTczNGZhMzIzNWEzNDMxMDRiMjZjNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVHDx56Hwa4CZwANB6+kxIvNrmCK
Aw2LXv0D0z8pBBexAQ/jgwD1qnHUFIIwj36sindGG4xEfBgg9t3FGWcyoiq/gJ2M
+XDCkeiH+xe6w4nwJRBt8dU8nf3IbjRgT3DUYNHk8+m61glpfq3Oxg9/cfJnAUHs
2B/0kdW+Q8B55lqrjI3hnhwrkq5vVIJkHdIaRKVnKU66qNwZA7+Tb18ZSFGvmQgg
Jo3T8rbiUau9+AkyagJQ2y0i1/+gysFPMEj+awJgfcPXkE34JWhXDkjficwER5eX
s9hmFwka4Uw6gpTbogMWN+hyVhAu3mt+e+W76M3yhyFIg4lIPFEg7UTmbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCp4PFjd0wK65zT6MjWjQxBLJsW8MB8GA1UdIwQY
MBaAFLcg886w5rWXo4FFxadDNpx/SWbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlEenpyRG10WmVqZ1VYRnAwTTJuSDlKWnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kN2ZiNmQtZWJiZS00M2EyLWIxMTkt
MzkzYzQ1NzQyMjU5LzEvS25nOFdOM1RBcnJuTlBveU5hTkRFRXNteGJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kN2ZiNmQtZWJiZS00M2EyLWIxMTktMzkzYzQ1NzQyMjU5
LzEvdHlEenpyRG10WmVqZ1VYRnAwTTJuSDlKWnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCbegIAwQB
1KV0MA0GCSqGSIb3DQEBCwUAA4IBAQA6Kfig6cm5zkk1VCEZ5OGYDH2ZXoPjSSk1
PGgY03qlUX8Vv5vq0ETo07QA028D8PsHgWf77ulcX/hDtLpW6ofXH3tWjrUQwLpj
dLMObyT5ti2yoXaFBwCkwDe435uO1Xm9mY05jprnn2W1E/2oO0H94ZhR87Q68Ksm
TnVG0Cz8B1a6ppLWsqWlqv1gYTpcPpYBmalBWzEKbHqyGpaUH4RYrWRNkqS6l1n/
MUUYefwrbtVvCRcYp+9GM+l/MK+04obrfO9DwtGgC4QOCpGYy1tuCZS09WihlH3x
WOmbt+PfA9m6ZUPC7aAghSjEU2EZftvmU1Zk9VzPrraxDDpFNrIa
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:23 2026 by rpki-client