Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/KaV7WQTmEBB5ElyfSkeRcdRkwVQ.roa
File: KaV7WQTmEBB5ElyfSkeRcdRkwVQ.roa (raw, json)
Hash identifier: TAioNVpbWMnrsDn8XziZCY+B4L1YFWRb17VHc9YZ38E=
Subject key identifier: 29:A5:7B:59:04:E6:10:10:79:12:5C:9F:4A:47:91:71:D4:64:C1:54
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 019C70676FDEFF4A133917624D4B4878D902
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/KaV7WQTmEBB5ElyfSkeRcdRkwVQ.roa
Signing time: Wed 18 Feb 2026 10:59:12 +0000
ROA not before: Wed 18 Feb 2026 10:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211183
IP address blocks: 5.35.124.0/24 maxlen: 24
5.35.125.0/24 maxlen: 24
5.35.126.0/24 maxlen: 24
5.35.127.0/24 maxlen: 24
5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
130.49.143.0/24 maxlen: 24
130.49.146.0/24 maxlen: 24
130.49.153.0/24 maxlen: 24
155.212.245.0/24 maxlen: 24
155.212.246.0/24 maxlen: 24
155.212.247.0/24 maxlen: 24
157.22.230.0/24 maxlen: 24
157.22.231.0/24 maxlen: 24
185.198.152.0/24 maxlen: 24
185.233.185.0/24 maxlen: 24
185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
194.5.78.0/24 maxlen: 24
194.5.79.0/24 maxlen: 24
195.93.252.0/24 maxlen: 24
217.171.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:67:6f:de:ff:4a:13:39:17:62:4d:4b:48:78:d9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Feb 18 10:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29a57b5904e6101079125c9f4a479171d464c154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:14:b2:8a:73:14:52:63:f1:0c:6a:6b:de:
c8:e9:71:a7:13:0c:95:87:ee:f2:59:13:d0:88:c1:
03:b8:05:84:ff:d1:68:02:16:3c:a9:ec:2b:9d:50:
5e:1c:57:b9:69:d6:7e:d9:1b:c8:f2:09:d4:f8:8d:
3f:98:e9:13:1c:25:a8:b9:40:cc:df:d4:1f:b1:99:
bd:29:e5:23:75:cd:59:1a:bf:1f:d4:a6:da:5d:ce:
7c:f6:cb:ef:90:a9:02:71:7b:2a:3b:bf:a9:cd:f8:
ab:b7:ea:4a:88:be:c6:6f:83:04:58:58:a4:2f:e8:
1b:70:c1:1f:60:7b:d5:d0:f0:7b:8c:32:65:6f:56:
e8:ef:6c:a7:01:43:87:1c:49:ef:97:8d:e1:b0:11:
bd:6b:db:43:6b:aa:eb:98:d4:e0:77:f7:6c:c2:46:
31:e1:59:8e:2c:7f:c3:da:91:4f:79:d4:f4:05:b6:
d7:34:c5:b0:45:ca:88:4a:79:ee:34:df:75:72:38:
bc:b6:7b:3e:57:33:74:ba:1e:da:ca:23:cd:3e:6e:
54:ca:bb:11:f8:62:7e:dd:82:e1:a2:99:8f:8e:80:
62:f6:4b:bb:57:e2:5c:e3:f7:c6:5d:49:bb:44:54:
39:1a:b5:49:5c:2b:19:34:e7:99:d9:6b:17:20:51:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A5:7B:59:04:E6:10:10:79:12:5C:9F:4A:47:91:71:D4:64:C1:54
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/KaV7WQTmEBB5ElyfSkeRcdRkwVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.124.0/22
5.253.62.0/24
37.140.241.0/24
45.128.204.0/24
79.133.181.0-79.133.183.255
89.191.225.0/24
91.200.84.0/24
94.154.11.0/24
130.49.143.0/24
130.49.146.0/24
130.49.153.0/24
155.212.245.0-155.212.247.255
157.22.230.0/23
185.198.152.0/24
185.233.185.0/24
185.239.50.0/23
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
194.5.78.0/23
195.93.252.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9b:1e:6b:b9:eb:bd:4a:c4:e2:b3:00:82:15:5d:49:b3:f7:
f2:a4:16:6b:f9:07:3b:08:dc:c6:3b:25:92:e1:5a:d8:b5:ec:
38:bf:4f:54:d1:0d:be:0a:55:eb:85:f6:e3:61:3a:40:b9:69:
96:ad:76:5c:89:48:fa:3c:f7:dd:bc:c8:c3:4d:15:34:9d:6d:
21:68:5a:24:16:6c:d9:3f:58:6f:27:5f:f0:7c:40:c3:d2:f1:
0e:08:c9:22:f7:5a:c7:3f:90:98:2d:9c:96:56:12:8f:f7:c0:
47:58:eb:ff:a4:4d:c0:31:87:24:5b:44:c4:13:21:28:65:f8:
2d:d0:72:b4:3b:6f:a7:b7:44:29:e5:a0:a1:ba:55:f5:ef:0b:
01:10:9c:0b:d2:cd:2a:a2:18:36:88:46:32:e1:71:d1:0a:fc:
8f:2a:e8:23:36:52:ad:e8:31:14:af:19:71:01:59:f4:7d:0f:
b3:0a:76:a5:61:eb:c9:8c:1d:23:8c:d5:a1:29:57:9f:3d:13:
56:a5:92:9c:ba:50:25:93:9b:f7:2b:8a:53:50:7a:f6:b5:53:
78:38:af:5d:36:44:3f:79:df:7a:b5:f2:3c:21:94:20:68:4a:
8f:de:d8:d8:ca:04:e5:b2:ac:0d:89:2a:33:8b:e9:c5:e4:86:
a0:09:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:42 2026 by rpki-client