Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/kvYtIdmIQzWeY2WuPqJRuov5ET8.roa
File: kvYtIdmIQzWeY2WuPqJRuov5ET8.roa (raw, json)
Hash identifier: zx3Gr9VP3ErTlMy9nzS4kzrfscRLipsAviORigX1SFE=
Subject key identifier: 92:F6:2D:21:D9:88:43:35:9E:63:65:AE:3E:A2:51:BA:8B:F9:11:3F
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019E456439F4313FDC6986804D876E01874E
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/kvYtIdmIQzWeY2WuPqJRuov5ET8.roa
Signing time: Wed 20 May 2026 12:37:36 +0000
ROA not before: Wed 20 May 2026 12:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12876
IP address blocks: 51.15.0.0/16 maxlen: 16
51.15.0.0/17 maxlen: 17
51.15.160.0/19 maxlen: 24
51.158.0.0/15 maxlen: 15
51.158.36.0/23 maxlen: 23
51.158.54.0/23 maxlen: 23
51.158.60.0/22 maxlen: 22
51.158.128.0/17 maxlen: 17
51.159.0.0/17 maxlen: 24
51.159.128.0/18 maxlen: 18
51.159.194.0/23 maxlen: 23
51.159.196.0/22 maxlen: 22
51.159.201.0/24 maxlen: 24
51.159.210.0/23 maxlen: 23
51.159.212.0/22 maxlen: 22
51.159.220.0/22 maxlen: 22
51.159.224.0/19 maxlen: 19
62.4.0.0/19 maxlen: 19
62.210.0.0/16 maxlen: 24
91.235.79.0/24 maxlen: 24
151.115.0.0/16 maxlen: 16
151.115.0.0/17 maxlen: 17
151.115.128.0/19 maxlen: 21
151.115.160.0/19 maxlen: 19
151.115.192.0/20 maxlen: 24
151.115.208.0/20 maxlen: 20
151.115.224.0/19 maxlen: 19
163.172.0.0/16 maxlen: 16
163.172.20.0/22 maxlen: 22
163.172.79.0/24 maxlen: 24
163.172.208.0/20 maxlen: 20
195.154.0.0/16 maxlen: 24
212.47.224.0/19 maxlen: 19
212.83.128.0/19 maxlen: 19
212.83.160.0/19 maxlen: 19
212.129.0.0/18 maxlen: 18
2001:bc8::/32 maxlen: 38
2001:bc8:1200::/39 maxlen: 48
2001:bc8:1201::/48 maxlen: 48
2001:bc8:1400::/38 maxlen: 38
2001:bc8:1800::/38 maxlen: 38
2001:bc8:1c00::/38 maxlen: 38
2001:bc8:2000::/35 maxlen: 48
2001:bc8:5400::/40 maxlen: 48
2001:bc8:e400::/38 maxlen: 48
2001:bc8:e800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:64:39:f4:31:3f:dc:69:86:80:4d:87:6e:01:87:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: May 20 12:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92f62d21d98843359e6365ae3ea251ba8bf9113f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:2d:4c:97:f3:fd:34:bc:19:17:f9:22:12:
6d:aa:55:77:a4:2b:e9:ad:70:7d:78:01:0b:8f:c9:
3c:04:61:7b:02:4c:03:36:f8:da:e6:b1:1d:ba:b7:
c5:f2:bf:ee:ca:e5:af:64:2b:b2:6a:ab:bb:2e:81:
46:3c:a7:34:26:e2:5d:09:cb:08:d7:f6:56:f7:f0:
84:90:9e:a8:4d:03:35:18:a4:c4:86:8f:37:9a:3b:
79:88:c4:34:c5:26:d1:e9:44:03:ae:e6:55:51:00:
10:0a:3e:46:45:30:0d:40:af:57:9b:bf:5f:2a:1e:
db:36:b3:b7:04:5e:29:6f:e3:47:dc:7e:85:02:37:
98:d3:03:7f:fd:96:d8:02:3d:bc:00:5a:62:60:67:
ea:cf:09:f0:53:8f:f6:3a:17:b0:f5:8e:8b:a3:8b:
69:b6:4e:b2:09:3d:d9:0f:ed:48:87:2e:be:b1:a0:
5c:3d:99:ea:10:43:3b:bf:4c:c7:6b:fd:55:f1:5b:
17:00:ad:52:a7:d7:94:79:22:ce:02:52:8c:5b:1c:
8d:90:76:ba:8e:c0:c3:1a:54:e6:6b:f8:17:88:d0:
df:c9:a9:ca:4c:9e:e2:e0:14:df:53:7e:f8:f2:1d:
d4:97:89:44:67:95:53:21:e5:8d:09:25:6f:b3:66:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F6:2D:21:D9:88:43:35:9E:63:65:AE:3E:A2:51:BA:8B:F9:11:3F
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/kvYtIdmIQzWeY2WuPqJRuov5ET8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.15.0.0/16
51.158.0.0/15
62.4.0.0/19
62.210.0.0/16
91.235.79.0/24
151.115.0.0/16
163.172.0.0/16
195.154.0.0/16
212.47.224.0/19
212.83.128.0/18
212.129.0.0/18
IPv6:
2001:bc8::/32
Signature Algorithm: sha256WithRSAEncryption
3e:db:98:7f:ff:79:e1:41:4d:3d:8d:eb:ca:f7:30:c0:19:52:
3c:e1:99:fb:fe:60:3b:92:59:9c:9b:6c:fb:96:27:8f:4b:df:
2b:6d:c7:57:be:ec:cf:9c:05:af:fd:14:33:75:19:e3:61:96:
5b:66:06:9b:bb:54:ea:e5:d9:92:6a:11:75:0f:95:19:16:3e:
d3:12:93:d7:f5:b4:91:e3:0f:bd:57:90:4b:e0:26:39:0e:00:
92:7f:47:aa:88:97:e6:eb:9b:b0:b7:57:38:b0:c8:99:0d:a3:
79:a0:b2:ac:83:0d:ef:b0:12:f9:4e:c2:df:ee:73:c6:55:c2:
d6:56:06:d2:3e:45:fe:17:34:52:4e:96:47:01:74:d2:74:a9:
63:cb:ca:6e:88:f5:c6:43:cf:b4:53:e3:a0:de:ab:51:fe:d6:
53:c4:c5:b3:69:25:1c:e9:c7:ca:e9:f2:a7:0d:a7:68:c2:84:
ed:31:c9:ed:ab:c2:a4:75:c6:d3:6c:f4:df:1c:b1:a2:f9:7b:
e4:d0:4f:01:b8:8d:37:28:b2:16:54:0a:7e:fe:5b:0c:5a:19:
a3:a8:dc:f5:e7:14:3d:f6:28:9c:ee:96:60:d4:2c:49:8c:c2:
3c:c5:54:8b:ec:b8:cb:3e:c1:45:5c:c8:d5:42:a4:25:af:ca:
26:7e:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:41 2026 by rpki-client