Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/Kcv3yLrqvaGlFWwvs82z1--Ykzw.roa
File: Kcv3yLrqvaGlFWwvs82z1--Ykzw.roa (raw, json)
Hash identifier: hLFp9RkiGgmZxvQmgYWOjpj1pnCpuiwxyWBm/03r2rk=
Subject key identifier: 29:CB:F7:C8:BA:EA:BD:A1:A5:15:6C:2F:B3:CD:B3:D7:EF:98:93:3C
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 01A08A63BD1602BA25200AC45107A2C0E9A0
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/Kcv3yLrqvaGlFWwvs82z1--Ykzw.roa
Signing time: Thu 10 Sep 2026 08:16:27 +0000
ROA not before: Thu 10 Sep 2026 08:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20900
IP address blocks: 31.217.232.0/21 maxlen: 24
31.217.233.0/24 maxlen: 24
45.11.208.0/22 maxlen: 22
78.159.132.0/22 maxlen: 22
78.159.148.0/24 maxlen: 24
91.214.114.0/23 maxlen: 23
91.214.114.0/24 maxlen: 24
91.214.115.0/24 maxlen: 24
185.182.252.0/22 maxlen: 24
185.182.252.0/24 maxlen: 24
213.190.64.0/19 maxlen: 24
213.190.64.0/24 maxlen: 24
213.190.65.0/24 maxlen: 24
213.190.69.0/24 maxlen: 24
213.190.76.0/24 maxlen: 24
213.190.88.0/24 maxlen: 24
2001:1b08::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:63:bd:16:02:ba:25:20:0a:c4:51:07:a2:c0:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Sep 10 08:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29cbf7c8baeabda1a5156c2fb3cdb3d7ef98933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:8c:d7:20:b5:5f:44:83:21:76:8b:b1:3f:
ca:87:d7:f5:34:96:5f:37:36:49:b5:16:8e:8d:3f:
90:0e:04:a2:d2:5a:ae:ea:bf:0b:db:51:48:4b:d5:
4c:d5:f1:a2:2e:fc:6d:00:e0:f0:22:bc:67:03:7d:
74:11:57:5e:7a:68:00:2b:e9:0c:a5:50:d1:8a:f8:
a6:76:f2:76:9c:f5:b8:0b:fd:ab:85:9e:0c:89:e1:
21:89:82:74:43:16:04:f7:4a:16:74:1f:fc:04:a3:
e8:37:34:e6:30:41:d7:15:64:91:6e:c3:72:4a:8a:
78:80:31:cf:be:a1:43:58:79:b5:25:d6:af:13:05:
cf:01:03:c5:ca:27:6e:89:2e:23:08:e4:6a:eb:86:
5d:a3:90:af:be:5a:2f:ed:25:7f:ea:5f:77:2f:22:
a8:06:fb:c0:fd:d9:a1:59:df:06:99:96:e3:b6:ea:
e1:e5:ee:7b:88:51:98:57:b8:f6:aa:ee:32:12:e7:
e1:70:d5:49:a6:22:ed:e8:ee:9d:8b:d0:77:85:02:
66:0a:ed:ff:a7:8e:d8:c6:62:a6:c9:0c:c2:c3:4a:
58:25:f0:5c:7b:a3:d5:55:63:3f:19:93:dd:3a:2a:
ef:ab:b3:3e:35:bf:73:68:d2:da:22:8a:b7:84:23:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CB:F7:C8:BA:EA:BD:A1:A5:15:6C:2F:B3:CD:B3:D7:EF:98:93:3C
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/Kcv3yLrqvaGlFWwvs82z1--Ykzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.232.0/21
45.11.208.0/22
78.159.132.0/22
78.159.148.0/24
91.214.114.0/23
185.182.252.0/22
213.190.64.0/19
IPv6:
2001:1b08::/32
Signature Algorithm: sha256WithRSAEncryption
a3:b9:47:70:dc:bd:dd:12:5c:0a:7f:1d:80:80:b5:49:bc:e7:
3f:c7:f9:2b:55:c5:98:72:7d:59:e6:d2:12:84:7e:f3:fb:39:
6a:08:eb:15:81:02:67:cb:db:64:f9:4b:81:43:5d:8d:21:a1:
7b:48:a9:83:8b:f6:c4:a0:d4:ff:1e:71:b7:cb:4e:5f:ce:6d:
d9:62:63:f7:c2:cd:55:eb:bc:e5:3e:3a:af:1b:23:21:a0:78:
0c:1c:d6:cf:7d:fb:01:79:dd:29:dc:2a:55:32:11:32:89:f9:
99:86:30:29:0b:b9:45:96:b0:68:40:bb:00:15:c8:82:6f:e3:
27:47:cc:e9:34:a2:4a:19:c3:0e:81:78:0d:19:fc:9a:e5:db:
81:57:98:bc:53:1f:46:e7:3e:82:12:56:34:06:f7:ef:a6:f6:
8c:11:e3:74:ea:46:01:63:e2:ed:2e:98:08:ad:f4:21:09:eb:
8a:37:d4:8b:32:1c:35:7a:b5:2d:ce:be:fc:45:67:e5:54:53:
df:fd:3b:a0:91:c5:4d:94:79:28:66:d0:f8:e9:d8:8f:d0:fd:
de:f2:64:dd:c6:6b:70:05:8a:2b:19:2e:3e:2e:00:32:b8:ca:
be:9b:44:d7:c1:94:b5:18:dd:62:4d:23:e8:b6:c5:ff:e4:59:
ad:0c:d9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:53:27 2026 by rpki-client