Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/KFcD1h4L_G8ScWzN8eGOJ4t-Qtc.roa
File: KFcD1h4L_G8ScWzN8eGOJ4t-Qtc.roa (raw, json)
Hash identifier: TaFzfCuigili4/ZSeSfEvZ1iwT66Wr4/5WkW29ITLQk=
Subject key identifier: 28:57:03:D6:1E:0B:FC:6F:12:71:6C:CD:F1:E1:8E:27:8B:7E:42:D7
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 01A120CFDA612AA450DEB517F0F7FE1A9119
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/KFcD1h4L_G8ScWzN8eGOJ4t-Qtc.roa
Signing time: Fri 09 Oct 2026 13:17:35 +0000
ROA not before: Fri 09 Oct 2026 13:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207147
IP address blocks: 45.11.68.0/22 maxlen: 24
45.88.128.0/22 maxlen: 24
45.89.112.0/22 maxlen: 22
45.143.208.0/22 maxlen: 22
45.143.208.0/24 maxlen: 24
45.143.209.0/24 maxlen: 24
45.143.210.0/24 maxlen: 24
45.143.211.0/24 maxlen: 24
46.183.32.0/22 maxlen: 22
46.183.32.0/24 maxlen: 24
46.183.33.0/24 maxlen: 24
46.183.34.0/24 maxlen: 24
46.183.35.0/24 maxlen: 24
46.183.36.0/22 maxlen: 22
46.183.36.0/24 maxlen: 24
46.183.37.0/24 maxlen: 24
46.183.38.0/24 maxlen: 24
46.183.39.0/24 maxlen: 24
84.247.4.0/22 maxlen: 24
85.204.148.0/22 maxlen: 24
85.204.148.0/24 maxlen: 24
85.204.149.0/24 maxlen: 24
85.204.150.0/24 maxlen: 24
85.204.151.0/24 maxlen: 24
89.37.228.0/22 maxlen: 24
95.111.152.0/22 maxlen: 22
95.111.152.0/24 maxlen: 24
95.111.153.0/24 maxlen: 24
95.111.154.0/24 maxlen: 24
95.111.155.0/24 maxlen: 24
130.0.88.0/22 maxlen: 24
130.0.88.0/24 maxlen: 24
130.0.89.0/24 maxlen: 24
139.100.176.0/22 maxlen: 22
139.100.176.0/24 maxlen: 24
139.100.177.0/24 maxlen: 24
139.100.178.0/24 maxlen: 24
139.100.179.0/24 maxlen: 24
139.100.180.0/22 maxlen: 22
139.100.180.0/24 maxlen: 24
139.100.181.0/24 maxlen: 24
139.100.182.0/24 maxlen: 24
139.100.183.0/24 maxlen: 24
176.223.176.0/22 maxlen: 24
176.223.176.0/24 maxlen: 24
185.164.212.0/22 maxlen: 24
185.178.88.0/22 maxlen: 24
185.178.91.0/24 maxlen: 24
185.194.120.0/22 maxlen: 24
185.194.120.0/24 maxlen: 24
185.194.121.0/24 maxlen: 24
185.194.122.0/24 maxlen: 24
185.194.123.0/24 maxlen: 24
185.237.40.0/22 maxlen: 24
2a0b:9c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:cf:da:61:2a:a4:50:de:b5:17:f0:f7:fe:1a:91:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Oct 9 13:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=285703d61e0bfc6f12716ccdf1e18e278b7e42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:0b:9c:b3:4a:31:7d:9b:5f:f9:37:34:f6:
1b:89:75:5a:91:e8:3c:c7:69:de:1b:81:62:26:75:
7d:af:1f:33:c7:35:d3:04:ba:2b:b7:75:95:44:b7:
7b:23:10:18:63:7d:4f:09:24:4f:de:bd:c9:18:59:
e8:89:7f:e6:54:b9:5f:32:30:88:a5:54:f5:7f:01:
59:99:f8:26:a0:51:e4:a6:93:f2:07:33:31:75:51:
a9:c8:d1:b6:3f:69:e6:a8:0d:26:51:de:30:94:71:
f8:23:f1:32:f6:8c:25:31:53:56:d5:c9:8a:7e:ed:
16:26:38:b5:26:8a:79:62:2a:ec:82:fa:57:7b:9f:
7f:cc:1e:2f:ca:e2:6f:6b:79:f7:ae:cc:09:90:57:
0f:c9:96:11:79:bb:ad:6d:4c:1d:56:4c:5d:08:85:
3d:0b:f2:0c:35:bd:cf:68:67:1f:6c:5c:aa:7e:f6:
3c:85:c9:a3:42:11:22:af:5f:fa:c4:74:78:81:a4:
66:51:bc:80:e4:ac:43:94:da:8e:e6:c8:b6:87:9b:
55:01:fd:c7:07:96:15:29:1a:15:f8:e9:f3:8e:88:
48:d0:31:4c:8d:04:b0:e1:53:b9:8f:cd:b3:5f:70:
25:30:db:b1:dd:e7:81:74:fa:20:ce:d3:69:2f:33:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:57:03:D6:1E:0B:FC:6F:12:71:6C:CD:F1:E1:8E:27:8B:7E:42:D7
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/KFcD1h4L_G8ScWzN8eGOJ4t-Qtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.68.0/22
45.88.128.0/22
45.89.112.0/22
45.143.208.0/22
46.183.32.0/21
84.247.4.0/22
85.204.148.0/22
89.37.228.0/22
95.111.152.0/22
130.0.88.0/22
139.100.176.0/21
176.223.176.0/22
185.164.212.0/22
185.178.88.0/22
185.194.120.0/22
185.237.40.0/22
IPv6:
2a0b:9c00::/48
Signature Algorithm: sha256WithRSAEncryption
5e:21:0b:d4:17:0f:9b:41:11:89:35:db:0f:26:24:9f:f6:e5:
3a:c8:d3:0f:6b:1b:fa:3b:f7:5e:5c:ea:00:2a:55:c0:47:29:
f5:08:56:b8:e2:b5:db:7a:e9:0c:c5:7e:af:ff:34:32:e4:dd:
65:14:7f:7c:81:1c:2e:85:0f:3d:9d:9d:d2:b8:c4:83:ad:df:
59:6a:d4:99:31:b7:26:9c:df:81:c7:2b:12:bc:7f:82:aa:a8:
1c:aa:83:a9:0b:50:4e:33:49:1b:2c:c0:c1:fa:39:33:a6:57:
e2:dc:68:56:0b:85:37:d2:5f:4b:61:31:5c:21:3c:d5:1a:58:
32:e2:91:c4:b8:ee:aa:af:e1:a8:56:5a:0a:0a:43:5c:1e:0e:
7b:42:22:7d:56:ed:d2:9d:df:10:20:34:bf:69:d9:43:40:cb:
92:9e:67:2b:c0:96:07:1e:e6:50:c1:42:56:86:4d:71:fc:b4:
26:c9:ab:59:ff:0f:9c:7b:c1:3a:84:0d:fc:d6:0b:6c:a8:f2:
b2:29:17:8a:0a:7b:e3:d9:8e:36:e5:98:c0:06:57:e7:b2:f9:
b0:dd:04:03:5c:d8:99:c5:3d:81:9a:c3:08:ce:fe:c0:d3:23:
18:9e:bc:2a:6d:5b:ae:ff:a4:09:ef:fa:7a:62:07:17:53:35:
05:72:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:06:23 2026 by rpki-client