Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KGMI8T8mrXkezoklCArjBjSC8J0.roa
File: KGMI8T8mrXkezoklCArjBjSC8J0.roa (raw, json)
Hash identifier: bQoeRA91KpjuMKTHSMVktGewP12I5VBvDJJfa00xLkI=
Subject key identifier: 28:63:08:F1:3F:26:AD:79:1E:CE:89:25:08:0A:E3:06:34:82:F0:9D
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019FA2311A70AD87EFDE155490D09B1307FC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KGMI8T8mrXkezoklCArjBjSC8J0.roa
Signing time: Mon 27 Jul 2026 06:09:14 +0000
ROA not before: Mon 27 Jul 2026 06:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.182.112.0/24 maxlen: 24
77.242.146.0/23 maxlen: 24
77.242.159.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:31:1a:70:ad:87:ef:de:15:54:90:d0:9b:13:07:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 27 06:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=286308f13f26ad791ece8925080ae3063482f09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:80:d3:47:a3:1e:9d:18:44:df:bd:22:46:
6e:3b:8b:af:89:19:ea:7e:4e:89:da:b4:4f:33:3f:
92:1d:0f:79:d8:5a:2e:11:42:2c:b4:bd:08:42:af:
df:f3:18:83:b6:8c:cf:29:b1:70:d2:5d:b2:7f:b9:
c3:0e:0e:af:92:5b:f5:95:e8:6d:5b:2a:7a:83:93:
f4:2c:d0:f3:95:a8:e7:b8:92:83:a0:4e:30:85:8f:
24:5a:f0:43:27:82:71:ee:85:d5:89:31:43:6f:0b:
c5:b4:13:e5:e2:14:7a:fa:5f:14:2f:c6:6a:a4:91:
b2:8b:23:4f:44:c3:d7:67:2c:70:75:f8:90:23:aa:
6b:84:a9:6a:5e:69:15:dc:c9:5a:5b:fb:db:ef:ea:
1d:7e:c2:03:52:70:1a:bb:b8:75:12:cb:80:4b:49:
e4:d3:a4:bc:a5:b0:47:24:ce:a8:9c:79:7d:00:74:
80:4a:e0:b1:1a:a5:26:38:63:f5:02:33:70:78:c3:
cc:32:c2:82:82:61:d8:25:0a:9c:96:9b:5a:29:8b:
32:8c:5a:ff:a8:42:d4:19:ac:b3:3f:b0:79:1a:e6:
18:54:92:94:30:d1:f2:c6:ba:24:e0:61:38:96:ed:
58:2d:96:43:59:de:6b:bc:6a:45:3f:c9:20:ac:a2:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:63:08:F1:3F:26:AD:79:1E:CE:89:25:08:0A:E3:06:34:82:F0:9D
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KGMI8T8mrXkezoklCArjBjSC8J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
77.242.146.0/23
77.242.159.0/24
83.137.153.0/24
83.137.158.0/23
88.151.56.0/23
88.209.198.0/24
88.209.201.0/24
88.209.216.0/24
88.209.226.0/24
88.209.228.0/24
88.209.232.0/22
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
76:75:83:42:f1:3d:d7:85:f8:04:4c:73:50:d7:ac:f1:fc:01:
48:d4:93:78:31:e9:53:ac:5c:ba:85:0c:b2:77:7b:ea:85:4d:
98:2c:97:f9:a1:c9:f4:35:1c:1b:66:87:db:69:99:32:cb:95:
b2:e5:2d:f1:7e:e4:74:e8:68:d1:00:4b:a7:af:79:c0:7a:d1:
ea:d0:75:b0:a4:56:59:12:20:14:e9:7e:eb:a1:12:25:05:23:
9a:1e:b6:3b:bc:0d:80:05:1f:19:c0:97:06:54:0d:8d:72:a0:
b1:2f:a5:24:0b:03:08:a4:01:ae:70:ee:e3:f0:da:b5:a2:9f:
4c:b5:2e:dc:b0:30:42:c6:c9:b4:c0:c0:46:96:9d:6b:11:c2:
ac:4f:d8:b1:fe:28:dd:ce:0e:63:9a:ac:93:5e:50:fa:7d:32:
00:19:9c:97:ae:4d:56:91:08:84:5a:47:49:38:59:cd:95:b2:
a7:e7:dd:03:dd:7c:d9:0f:4b:5c:4e:ad:d0:84:38:01:12:88:
d6:16:90:93:87:ca:2d:e6:46:14:62:d5:2f:cf:d6:c0:22:68:
d7:70:c6:0f:3a:a3:3f:0a:1f:38:43:89:ca:22:6f:92:5f:29:
cd:c4:5c:a3:10:0e:e9:b5:e6:bc:77:29:98:1d:91:32:46:9d:
1e:49:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:07:37 2026 by rpki-client