Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Kk4-JvdImlKOGP6-swDdjAgUEmc.roa
File: Kk4-JvdImlKOGP6-swDdjAgUEmc.roa (raw, json)
Hash identifier: 6D26MxLVLq4GyEjUx408oVDtQroeuS333554HwofhJk=
Subject key identifier: 2A:4E:3E:26:F7:48:9A:52:8E:18:FE:BE:B3:00:DD:8C:08:14:12:67
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 01A15D352C1D2D67EA9CCEF40DEB70357131
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Kk4-JvdImlKOGP6-swDdjAgUEmc.roa
Signing time: Wed 21 Oct 2026 06:45:27 +0000
ROA not before: Wed 21 Oct 2026 06:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202468
IP address blocks: 37.32.0.0/19 maxlen: 24
37.152.176.0/20 maxlen: 24
94.101.176.0/20 maxlen: 24
185.97.116.0/22 maxlen: 24
185.143.232.0/22 maxlen: 24
185.206.92.0/22 maxlen: 24
185.220.224.0/22 maxlen: 24
185.226.116.0/22 maxlen: 24
185.228.236.0/22 maxlen: 24
185.231.180.0/22 maxlen: 24
185.239.104.0/22 maxlen: 24
188.121.96.0/19 maxlen: 24
193.176.240.0/22 maxlen: 24
193.176.240.0/24 maxlen: 24
193.176.241.0/24 maxlen: 24
193.176.242.0/23 maxlen: 23
2a07:3900::/29 maxlen: 48
2a0c:a7c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:35:2c:1d:2d:67:ea:9c:ce:f4:0d:eb:70:35:71:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Oct 21 06:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a4e3e26f7489a528e18febeb300dd8c08141267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:64:c1:bc:28:e5:bb:61:39:83:95:e9:c6:
5e:d8:8f:b5:aa:f3:35:96:c2:97:72:40:54:e5:e7:
67:4c:7e:37:c3:73:9f:6b:08:c2:c9:73:81:29:91:
4f:31:18:fe:23:4a:d4:1a:6b:56:53:9e:e8:9a:0d:
b1:41:cd:37:34:ef:69:b1:1c:d1:26:e0:87:00:24:
60:57:c1:0b:b2:01:a5:39:ff:6a:fb:10:a3:88:d8:
b6:33:fa:3a:c3:69:ef:33:3f:4a:2b:ee:2c:57:a2:
55:5a:5d:72:29:0c:03:cc:c7:3f:ec:5b:a9:fa:1d:
b7:32:a7:ac:83:da:9b:fd:e7:7d:75:3e:6e:96:6d:
1e:db:40:b5:91:d1:60:d6:72:33:6e:38:ae:00:77:
89:3e:b2:26:ad:c8:bb:dc:14:5e:b8:66:9b:53:e8:
d1:2f:51:77:75:ef:52:3e:46:04:82:0a:82:e0:c8:
ca:56:75:ac:e4:99:94:bb:83:f8:5a:71:2b:40:a2:
5a:c6:08:12:60:a9:71:65:42:0b:08:f9:d3:6b:ee:
ed:a4:ea:11:13:dc:71:90:e1:87:6e:0e:69:0c:bc:
f9:fc:6c:8d:6d:dd:06:99:bb:c0:57:9d:76:6f:97:
e3:c1:e8:a7:80:21:9a:ea:64:ae:bd:66:d6:af:12:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:3E:26:F7:48:9A:52:8E:18:FE:BE:B3:00:DD:8C:08:14:12:67
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Kk4-JvdImlKOGP6-swDdjAgUEmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:a0:4b:a0:7f:53:83:7e:e8:28:2d:d3:78:76:d7:95:c0:c5:
a1:de:52:13:6c:8d:ce:7e:41:d2:c5:28:1a:b2:54:2d:5a:73:
18:6e:0c:54:aa:46:97:a6:3f:de:1b:e0:24:24:ef:2a:7d:6d:
c9:d9:91:68:7d:ca:09:e6:ea:af:22:b1:67:37:2f:65:db:9f:
75:ff:0d:1d:60:f0:1c:fa:71:64:c4:0b:63:5c:99:f6:98:81:
e2:9f:41:51:06:ee:43:87:37:13:7a:15:c9:5f:89:05:d6:52:
2a:77:17:2a:7c:8a:06:7c:4d:14:b8:1e:9a:08:d9:e2:5d:50:
e9:a8:df:ca:a6:fc:02:61:8f:c6:19:a1:73:c6:2f:f0:7b:d2:
c2:54:3e:bf:4d:59:76:26:f1:6c:f5:be:35:01:1d:0b:38:07:
da:0e:3c:c8:7d:75:0e:a2:95:a6:d2:07:91:ad:79:da:51:02:
0f:ac:31:93:ed:28:0a:e8:e8:2a:96:97:38:b8:9e:6e:e9:46:
e7:ab:2f:f2:86:ed:82:b4:fa:3e:52:a0:32:0d:3d:6a:a9:4f:
6e:e6:75:4c:17:3b:32:fb:56:e1:b2:23:7e:98:63:ce:2f:63:
92:90:e7:e9:c0:03:4f:f9:fd:c1:75:b2:74:aa:74:64:8d:ea:
1d:ec:51:4c
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAaFdNSwdLWfqnM70DetwNXExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw
N2VjMDIwHhcNMjYxMDIxMDY0NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTRlM2UyNmY3NDg5YTUyOGUxOGZlYmViMzAwZGQ4YzA4MTQxMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPxkwbwo5bthOYOV6cZe2I+1qvM1
lsKXckBU5ednTH43w3OfawjCyXOBKZFPMRj+I0rUGmtWU57omg2xQc03NO9psRzR
JuCHACRgV8ELsgGlOf9q+xCjiNi2M/o6w2nvMz9KK+4sV6JVWl1yKQwDzMc/7Fup
+h23Mqesg9qb/ed9dT5ulm0e20C1kdFg1nIzbjiuAHeJPrImrci73BReuGabU+jR
L1F3de9SPkYEggqC4MjKVnWs5JmUu4P4WnErQKJaxggSYKlxZUILCPnTa+7tpOoR
E9xxkOGHbg5pDLz5/GyNbd0GmbvAV512b5fjweingCGa6mSuvWbWrxINsQIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFCpOPib3SJpSjhj+vrMA3YwIFBJnMB8GA1UdIwQY
MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt
MWJiMTdhOGIyNmZlLzEvS2s0LUp2ZEltbEtPR1A2LXN3RGRqQWdVRW1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl
LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBUBAIAATBOAwQFJSAAAwQE
JZiwAwQEXmWwAwQCuWF0AwQCuY/oAwQCuc5cAwQCudzgAwQCueJ0AwQCueTsAwQC
uee0AwQCue9oAwQFvHlgAwQCwbDwMBQEAgACMA4DBQMqBzkAAwUDKgynwDANBgkq
hkiG9w0BAQsFAAOCAQEAcKBLoH9Tg37oKC3TeHbXlcDFod5SE2yNzn5B0sUoGrJU
LVpzGG4MVKpGl6Y/3hvgJCTvKn1tydmRaH3KCebqryKxZzcvZdufdf8NHWDwHPpx
ZMQLY1yZ9piB4p9BUQbuQ4c3E3oVyV+JBdZSKncXKnyKBnxNFLgemgjZ4l1Q6ajf
yqb8AmGPxhmhc8Yv8HvSwlQ+v01ZdibxbPW+NQEdCzgH2g48yH11DqKVptIHka15
2lECD6wxk+0oCujoKpaXOLiebulG56sv8obtgrT6PlKgMg09aqlPbuZ1TBc7MvtW
4bIjfphjzi9jkpDn6cADT/n9wXWydKp0ZI3qHexRTA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 14:25:26 2026 by rpki-client