Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/kuOk62kAMWDO3SkuJ8fgV4X_ZQQ.roa
File: kuOk62kAMWDO3SkuJ8fgV4X_ZQQ.roa (raw, json)
Hash identifier: 95GypZwG3yMioVj6JZTz1qbaQqiVz8fVSViXoVD+UZE=
Subject key identifier: 92:E3:A4:EB:69:00:31:60:CE:DD:29:2E:27:C7:E0:57:85:FF:65:04
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019D94AD0665280C80C48C8239D2821E784C
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/kuOk62kAMWDO3SkuJ8fgV4X_ZQQ.roa
Signing time: Thu 16 Apr 2026 05:04:20 +0000
ROA not before: Thu 16 Apr 2026 05:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16003
IP address blocks: 31.172.74.0/24 maxlen: 24
31.172.78.0/24 maxlen: 24
79.132.137.0/24 maxlen: 24
79.132.139.0/24 maxlen: 24
81.85.76.0/24 maxlen: 24
89.127.195.0/24 maxlen: 24
89.127.202.0/24 maxlen: 24
103.75.125.0/24 maxlen: 24
103.75.126.0/24 maxlen: 24
162.248.161.0/24 maxlen: 24
185.18.52.0/22 maxlen: 22
185.18.52.0/24 maxlen: 24
185.21.9.0/24 maxlen: 24
185.21.10.0/24 maxlen: 24
194.154.26.0/24 maxlen: 24
213.239.157.0/24 maxlen: 24
213.239.159.0/24 maxlen: 24
217.177.11.0/24 maxlen: 24
217.177.73.0/24 maxlen: 24
217.194.148.0/24 maxlen: 24
2a02:6b40:8002::/48 maxlen: 48
2a02:6b40:8003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:94:ad:06:65:28:0c:80:c4:8c:82:39:d2:82:1e:78:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Apr 16 05:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92e3a4eb69003160cedd292e27c7e05785ff6504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:b0:c3:a4:dc:32:9b:e2:c8:07:0b:50:0e:
6d:74:ed:38:5e:64:b8:de:69:d8:4f:7b:58:4c:12:
78:94:9a:26:ff:07:04:c8:63:7d:52:99:ff:fc:f8:
f2:4b:33:09:63:d4:f8:f2:41:14:ae:eb:41:ec:b0:
d7:ad:af:f7:f1:18:8f:b6:cb:6b:ad:e2:02:c0:aa:
a3:25:8e:3f:b9:02:de:7c:45:de:7a:a4:e9:59:52:
aa:ac:54:b2:f1:66:a9:83:bd:aa:86:9a:2b:04:20:
04:e0:51:b9:75:03:de:c3:47:f8:dd:f9:7a:72:00:
9d:16:0e:2d:df:d4:28:a0:a5:45:6d:db:ae:ac:07:
20:6f:7a:4e:02:1c:25:69:34:cd:78:de:0b:05:16:
75:45:ca:29:3b:3d:5a:62:e0:f9:aa:4d:0f:f0:74:
9c:d0:19:f6:bb:dd:c7:18:02:a9:49:97:a5:01:81:
d2:af:27:c8:7a:88:38:32:8f:8b:9d:d8:19:1d:57:
18:4d:50:14:ea:e8:1f:c5:2d:bc:24:8d:8a:6e:79:
b2:13:db:d5:16:04:84:a0:fd:3d:53:67:1d:0a:97:
f0:fc:55:11:20:fe:19:f4:58:51:3c:34:5a:b8:c4:
48:86:bd:18:1d:0a:55:52:6a:da:bc:f0:0a:18:0f:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E3:A4:EB:69:00:31:60:CE:DD:29:2E:27:C7:E0:57:85:FF:65:04
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/kuOk62kAMWDO3SkuJ8fgV4X_ZQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.74.0/24
31.172.78.0/24
79.132.137.0/24
79.132.139.0/24
81.85.76.0/24
89.127.195.0/24
89.127.202.0/24
103.75.125.0-103.75.126.255
162.248.161.0/24
185.18.52.0/22
185.21.9.0-185.21.10.255
194.154.26.0/24
213.239.157.0/24
213.239.159.0/24
217.177.11.0/24
217.177.73.0/24
217.194.148.0/24
IPv6:
2a02:6b40:8002::/47
Signature Algorithm: sha256WithRSAEncryption
73:72:25:9a:dc:ec:e6:e3:4c:d6:6e:41:2b:20:f9:4a:c6:ee:
9a:b4:ea:90:0b:6a:b7:a8:82:20:24:44:d3:e5:e4:0b:6f:a9:
4f:82:a8:07:c6:ef:df:f4:b3:e3:61:c0:f9:e7:fd:87:c0:68:
71:59:be:8c:3e:12:51:0b:7f:71:af:b3:a5:9c:2c:a5:e5:75:
a5:bb:dc:91:cc:94:8c:91:c8:61:fa:97:d7:2f:24:a3:f5:ce:
f1:79:7a:76:0c:13:c7:ed:d2:d3:0f:64:e6:41:33:7e:c9:4b:
1f:85:48:6f:92:df:e5:e6:73:b9:2e:69:b4:8d:e5:06:e5:71:
b3:a7:fe:65:4d:8d:f0:81:ea:0b:e7:38:e5:a9:89:47:a7:32:
70:d1:51:49:37:e4:dc:55:93:ad:f4:cf:64:d0:63:77:52:e5:
d6:b3:b1:2e:81:63:c6:0a:86:82:4f:0a:73:7e:ee:ec:92:61:
29:d6:bc:82:7c:d8:24:d7:f4:38:5d:4b:72:f0:c5:bb:a8:43:
e6:dc:68:b1:96:73:77:e4:d6:ac:08:e4:bc:71:cf:57:0c:4e:
01:4d:d5:2c:cc:6f:3d:1e:fd:b3:64:08:b4:b7:8d:f2:14:b1:
f0:f6:a6:fc:3f:9f:ee:8f:f1:0b:2f:7c:47:db:89:b6:c0:41:
4f:64:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:49 2026 by rpki-client