Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/KI0SNNJ-NmxVDoJBLMGkkL4-w8g.roa
File: KI0SNNJ-NmxVDoJBLMGkkL4-w8g.roa (raw, json)
Hash identifier: Z9+/MulcNbx3XD5qZOV8isBFv2OoqAKiBV2oB0/AYPw=
Subject key identifier: 28:8D:12:34:D2:7E:36:6C:55:0E:82:41:2C:C1:A4:90:BE:3E:C3:C8
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 01A07B6902C992D01588628CA49802592852
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/KI0SNNJ-NmxVDoJBLMGkkL4-w8g.roa
Signing time: Mon 07 Sep 2026 10:27:54 +0000
ROA not before: Mon 07 Sep 2026 10:27:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25160
IP address blocks: 5.10.144.0/20 maxlen: 20
31.28.65.0/24 maxlen: 24
31.28.67.0/24 maxlen: 24
31.28.68.0/24 maxlen: 24
31.28.70.0/24 maxlen: 24
31.28.72.0/24 maxlen: 24
31.28.75.0/24 maxlen: 24
31.28.80.0/22 maxlen: 22
31.28.84.0/23 maxlen: 23
31.28.86.0/24 maxlen: 24
37.157.32.0/21 maxlen: 21
45.88.112.0/22 maxlen: 22
82.163.112.0/21 maxlen: 21
82.163.124.0/22 maxlen: 22
82.163.192.0/19 maxlen: 24
82.163.205.0/24 maxlen: 24
91.238.221.0/24 maxlen: 24
94.126.43.0/24 maxlen: 24
94.126.47.0/24 maxlen: 24
158.41.64.0/18 maxlen: 18
165.65.0.0/17 maxlen: 17
165.65.224.0/19 maxlen: 19
178.18.116.0/23 maxlen: 23
178.18.119.0/24 maxlen: 24
185.28.240.0/22 maxlen: 22
185.53.224.0/22 maxlen: 22
185.120.204.0/22 maxlen: 22
185.121.76.0/22 maxlen: 22
185.135.164.0/22 maxlen: 22
185.237.48.0/22 maxlen: 22
193.0.176.0/23 maxlen: 23
193.221.128.0/19 maxlen: 19
194.8.254.0/23 maxlen: 23
195.250.16.0/22 maxlen: 22
2a00:e340::/29 maxlen: 29
2a01:a220::/29 maxlen: 30
2a10:d700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:69:02:c9:92:d0:15:88:62:8c:a4:98:02:59:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Sep 7 10:27:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=288d1234d27e366c550e82412cc1a490be3ec3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:64:18:b0:1d:19:bb:66:e5:d2:1d:2e:72:
9c:da:f0:5f:cc:ea:9a:0d:37:64:d4:52:25:fd:77:
00:05:14:21:ef:a4:ca:e8:0c:73:72:76:ef:15:d3:
f2:e4:63:1b:92:44:23:51:3b:83:b6:43:d8:8c:8c:
03:c0:17:51:6b:64:c2:bd:3e:7a:ba:a1:92:fa:2a:
56:b3:93:17:be:cf:f8:d8:1d:bc:3d:4b:9b:92:20:
2e:38:db:17:51:fa:e3:b8:42:f8:8f:07:1e:97:07:
d2:01:81:6e:7b:dd:da:6c:6e:6e:96:fa:41:2c:34:
fc:85:35:8a:01:44:47:81:d6:0b:bc:6a:f1:9e:cf:
0a:0a:d5:62:2f:a6:68:47:fd:45:bb:81:26:6f:fa:
ca:19:46:1b:8d:7b:0b:bd:cc:41:77:6c:78:c1:97:
a8:c7:8c:45:05:13:dd:03:77:54:64:9a:3c:34:94:
d8:6f:6b:8e:35:b7:99:c8:fc:29:f5:d1:2d:d5:10:
e2:aa:8b:a4:88:d1:00:3b:b9:a6:4e:6d:84:86:a1:
53:ae:50:26:7e:0a:7f:2f:c1:9c:fa:33:5a:22:5d:
31:17:9f:a6:c6:45:92:ac:f8:1f:99:28:e5:b7:1c:
6c:46:6f:a5:df:26:74:d2:b8:39:1d:b7:a2:9d:82:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8D:12:34:D2:7E:36:6C:55:0E:82:41:2C:C1:A4:90:BE:3E:C3:C8
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/KI0SNNJ-NmxVDoJBLMGkkL4-w8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.144.0/20
31.28.65.0/24
31.28.67.0-31.28.68.255
31.28.70.0/24
31.28.72.0/24
31.28.75.0/24
31.28.80.0-31.28.86.255
37.157.32.0/21
45.88.112.0/22
82.163.112.0/21
82.163.124.0/22
82.163.192.0/19
91.238.221.0/24
94.126.43.0/24
94.126.47.0/24
158.41.64.0/18
165.65.0.0/17
165.65.224.0/19
178.18.116.0/23
178.18.119.0/24
185.28.240.0/22
185.53.224.0/22
185.120.204.0/22
185.121.76.0/22
185.135.164.0/22
185.237.48.0/22
193.0.176.0/23
193.221.128.0/19
194.8.254.0/23
195.250.16.0/22
IPv6:
2a00:e340::/29
2a01:a220::/29
2a10:d700::/29
Signature Algorithm: sha256WithRSAEncryption
c9:c0:8e:92:7d:3a:f7:f7:d8:f8:f6:8a:0f:19:6f:4e:03:60:
44:03:b5:4c:2f:51:2f:d5:a6:d4:c4:12:3a:e8:bd:d2:4c:c7:
aa:6d:e1:8c:77:21:cd:0b:fa:f8:64:9f:6a:76:2e:8c:28:3c:
53:6b:e5:e5:7e:b7:9f:d1:b2:bf:0d:a7:38:e6:77:dd:c8:dd:
ba:be:95:ef:ea:76:48:75:24:22:06:9b:36:e7:fd:5d:89:c9:
dc:f7:34:85:da:60:4a:23:ca:41:4c:ff:fe:55:c3:67:89:ff:
b4:f8:fe:48:2d:e9:ae:25:d0:9a:93:48:17:17:61:58:96:58:
af:64:5f:21:7e:1f:86:78:92:7f:5a:5b:8f:11:e7:6c:b5:ff:
b6:6d:85:97:d2:19:ae:45:9c:74:be:26:41:af:78:51:3f:26:
bd:ef:e6:34:d1:f3:09:e5:44:9f:c2:c3:d2:2f:9f:31:43:ad:
44:9c:6a:be:b8:01:4b:cb:1a:32:63:d5:25:cb:62:d3:ce:2d:
ea:76:52:5c:8a:ea:23:89:8c:61:52:53:c4:53:56:55:54:a7:
ba:d7:85:6d:28:ec:3b:b5:ce:39:62:15:43:e6:8f:48:8b:d3:
46:82:03:50:61:e6:6a:39:d6:e6:e1:27:09:5d:ce:93:63:a4:
51:50:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:29 2026 by rpki-client