Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KKxxEUeWn96uhLwL7yb8bANjMBI.roa
File: KKxxEUeWn96uhLwL7yb8bANjMBI.roa (raw, json)
Hash identifier: x+rG4zVITmfqns0lOcbIMD787byvQGTLKxCtWnvzexA=
Subject key identifier: 28:AC:71:11:47:96:9F:DE:AE:84:BC:0B:EF:26:FC:6C:03:63:30:12
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F23FE0659ACAF3BFD781BA55061E26AB0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KKxxEUeWn96uhLwL7yb8bANjMBI.roa
Signing time: Thu 02 Jul 2026 18:01:18 +0000
ROA not before: Thu 02 Jul 2026 18:01:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
72.35.242.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.2.0/24 maxlen: 24
78.17.9.0/24 maxlen: 24
78.17.10.0/24 maxlen: 24
78.17.13.0/24 maxlen: 24
78.17.14.0/24 maxlen: 24
78.17.15.0/24 maxlen: 24
78.17.16.0/24 maxlen: 24
78.17.24.0/24 maxlen: 24
78.17.37.0/24 maxlen: 24
78.17.38.0/24 maxlen: 24
78.17.41.0/24 maxlen: 24
78.17.42.0/24 maxlen: 24
78.17.45.0/24 maxlen: 24
78.17.53.0/24 maxlen: 24
78.17.56.0/24 maxlen: 24
78.17.57.0/24 maxlen: 24
78.17.59.0/24 maxlen: 24
78.17.60.0/24 maxlen: 24
78.17.63.0/24 maxlen: 24
78.17.68.0/24 maxlen: 24
78.17.74.0/24 maxlen: 24
78.17.78.0/24 maxlen: 24
78.17.80.0/24 maxlen: 24
78.17.92.0/24 maxlen: 24
78.17.102.0/24 maxlen: 24
78.17.104.0/24 maxlen: 24
78.17.105.0/24 maxlen: 24
78.17.106.0/24 maxlen: 24
78.17.114.0/24 maxlen: 24
78.17.117.0/24 maxlen: 24
78.17.124.0/24 maxlen: 24
78.17.125.0/24 maxlen: 24
78.17.126.0/24 maxlen: 24
78.17.130.0/24 maxlen: 24
78.17.131.0/24 maxlen: 24
78.17.135.0/24 maxlen: 24
78.17.144.0/24 maxlen: 24
78.17.150.0/24 maxlen: 24
78.17.153.0/24 maxlen: 24
78.17.158.0/24 maxlen: 24
78.17.160.0/24 maxlen: 24
78.17.161.0/24 maxlen: 24
78.17.180.0/24 maxlen: 24
78.17.185.0/24 maxlen: 24
78.17.186.0/24 maxlen: 24
78.17.188.0/24 maxlen: 24
78.17.192.0/24 maxlen: 24
78.17.198.0/24 maxlen: 24
78.17.208.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.17.0/24 maxlen: 24
89.125.18.0/24 maxlen: 24
89.125.19.0/24 maxlen: 24
89.125.25.0/24 maxlen: 24
89.125.49.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.89.0/24 maxlen: 24
89.125.90.0/24 maxlen: 24
89.125.91.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.119.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.124.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.185.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
89.125.197.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
89.125.212.0/24 maxlen: 24
89.125.250.0/24 maxlen: 24
89.125.253.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:fe:06:59:ac:af:3b:fd:78:1b:a5:50:61:e2:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 2 18:01:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28ac711147969fdeae84bc0bef26fc6c03633012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:de:d0:44:78:31:45:a3:3b:53:b8:be:c6:43:
81:91:56:d5:9c:eb:12:23:44:cf:0d:b9:ec:60:fa:
a1:40:b5:13:40:d2:6c:6f:60:da:08:b3:81:45:20:
6d:4e:d1:ba:a9:24:6f:ac:80:be:67:e0:62:80:ae:
83:d8:f5:35:19:58:52:70:ce:e6:d2:95:2a:8e:7e:
02:b8:bb:0f:71:0d:3d:ca:18:a1:20:7d:42:4d:46:
3c:b6:29:9d:59:be:f3:75:f0:98:9e:e1:d0:14:30:
bb:e7:7c:83:93:ff:5a:ca:bb:92:ef:81:b0:1f:6b:
0b:6e:66:f5:8a:ea:f1:ab:06:33:35:41:6b:2a:44:
60:74:92:8d:d5:32:af:39:c5:0c:83:8a:12:00:f1:
78:50:82:4a:89:e6:0e:fa:a4:56:69:ce:f5:bd:bf:
29:ef:52:20:cc:ff:39:4e:4f:87:cb:6d:3d:71:be:
a9:13:b4:e4:2d:0b:bc:5c:f8:4c:2d:fe:d3:35:1d:
c3:60:60:7b:16:c0:37:e7:48:52:63:f4:db:84:49:
fd:7c:e7:25:20:db:10:fe:91:8b:45:db:f8:33:15:
d9:cf:d4:32:c7:55:62:88:c6:10:f4:b9:12:6c:84:
d2:80:77:21:36:e5:50:a4:68:d7:5f:66:1e:a4:bb:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AC:71:11:47:96:9F:DE:AE:84:BC:0B:EF:26:FC:6C:03:63:30:12
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KKxxEUeWn96uhLwL7yb8bANjMBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
72.35.242.0/24
77.81.101.0/24
78.17.2.0/24
78.17.9.0-78.17.10.255
78.17.13.0-78.17.16.255
78.17.24.0/24
78.17.37.0-78.17.38.255
78.17.41.0-78.17.42.255
78.17.45.0/24
78.17.53.0/24
78.17.56.0/23
78.17.59.0-78.17.60.255
78.17.63.0/24
78.17.68.0/24
78.17.74.0/24
78.17.78.0/24
78.17.80.0/24
78.17.92.0/24
78.17.102.0/24
78.17.104.0-78.17.106.255
78.17.114.0/24
78.17.117.0/24
78.17.124.0-78.17.126.255
78.17.130.0/23
78.17.135.0/24
78.17.144.0/24
78.17.150.0/24
78.17.153.0/24
78.17.158.0/24
78.17.160.0/23
78.17.180.0/24
78.17.185.0-78.17.186.255
78.17.188.0/24
78.17.192.0/24
78.17.198.0/24
78.17.208.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.17.0-89.125.19.255
89.125.25.0/24
89.125.49.0/24
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.85.0/24
89.125.89.0-89.125.92.255
89.125.95.0/24
89.125.98.0/24
89.125.104.0/24
89.125.119.0/24
89.125.122.0-89.125.124.255
89.125.130.0/23
89.125.151.0-89.125.152.255
89.125.159.0/24
89.125.181.0/24
89.125.185.0/24
89.125.188.0/24
89.125.197.0/24
89.125.203.0/24
89.125.210.0/24
89.125.212.0/24
89.125.250.0/24
89.125.253.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
104.143.205.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
194.135.124.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a9:14:b5:47:a1:e9:d8:34:63:4c:95:34:68:55:15:4d:2a:
39:ba:ac:fb:26:a6:cb:70:c4:16:02:0b:68:36:7d:e1:f0:ed:
0b:93:03:21:33:08:98:05:fc:f8:dc:95:c6:17:fc:c6:76:96:
58:78:2d:c8:7b:54:ad:3d:b1:80:e8:f4:25:2b:79:a4:6f:5d:
4c:75:9e:dd:03:73:88:93:74:60:0a:44:5b:9a:1f:f5:81:5c:
66:6c:eb:45:de:08:1c:ac:7b:54:8b:fa:52:ad:7c:9e:fc:53:
53:ed:97:ff:94:76:b3:a6:f1:77:cf:a3:99:80:4e:a1:80:35:
6a:19:2d:3b:8d:1f:43:c7:1a:b6:bc:47:35:6d:86:a5:61:a5:
79:78:e3:b4:51:94:5c:5d:d1:9a:91:68:e2:e9:a9:41:4e:72:
35:dc:b9:21:20:a8:9d:5b:3a:93:74:fd:34:82:1c:57:68:81:
c8:ca:c5:fb:66:61:27:0b:51:bc:3f:3e:38:a4:0a:11:0b:5d:
16:9f:c8:09:da:10:65:32:23:0e:c1:b8:ec:ac:9e:5f:8f:b3:
44:36:a4:68:6c:08:62:fa:6f:41:16:c8:7f:86:f8:a0:99:b5:
8d:d7:6f:44:83:bf:44:b5:4d:58:1a:3c:87:70:80:18:25:ac:
ef:12:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:18 2026 by rpki-client