Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/kmi4lr3MErMKudzvPnpA_A5RB3Y.roa
File: kmi4lr3MErMKudzvPnpA_A5RB3Y.roa (raw, json)
Hash identifier: SC5wL99tgoNwibuu73Ez4JxzgoQtqvgGQyrdYV2hN10=
Subject key identifier: 92:68:B8:96:BD:CC:12:B3:0A:B9:DC:EF:3E:7A:40:FC:0E:51:07:76
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 01A1332E0E9548D28D10CE7833AD07296703
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/kmi4lr3MErMKudzvPnpA_A5RB3Y.roa
Signing time: Tue 13 Oct 2026 02:53:38 +0000
ROA not before: Tue 13 Oct 2026 02:53:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 89.127.0.0/24 maxlen: 24
89.127.1.0/24 maxlen: 24
89.127.2.0/24 maxlen: 24
89.127.3.0/24 maxlen: 24
89.127.4.0/24 maxlen: 24
89.127.5.0/24 maxlen: 24
89.127.6.0/24 maxlen: 24
89.127.7.0/24 maxlen: 24
89.127.8.0/24 maxlen: 24
89.127.9.0/24 maxlen: 24
89.127.10.0/24 maxlen: 24
89.127.11.0/24 maxlen: 24
89.127.12.0/24 maxlen: 24
89.127.13.0/24 maxlen: 24
89.127.14.0/24 maxlen: 24
89.127.15.0/24 maxlen: 24
89.127.16.0/24 maxlen: 24
89.127.17.0/24 maxlen: 24
89.127.18.0/24 maxlen: 24
89.127.19.0/24 maxlen: 24
2a0b:21c1:600c::/46 maxlen: 46
2a0b:21c1:6013::/48 maxlen: 48
2a0b:21c1:6014::/48 maxlen: 48
2a0b:21c1:6015::/48 maxlen: 48
2a0b:21c1:6016::/48 maxlen: 48
2a0b:21c1:6017::/48 maxlen: 48
2a0b:21c1:6018::/48 maxlen: 48
2a0b:21c1:6019::/48 maxlen: 48
2a0b:21c1:601a::/48 maxlen: 48
2a0b:21c1:601e::/48 maxlen: 48
2a0b:21c1:601f::/48 maxlen: 48
2a0b:21c1:6020::/48 maxlen: 48
2a0b:21c1:6021::/48 maxlen: 48
2a0b:21c1:6022::/48 maxlen: 48
2a0b:21c1:6024::/48 maxlen: 48
2a0b:21c1:6025::/48 maxlen: 48
2a0b:21c1:6026::/48 maxlen: 48
2a0b:21c1:6027::/48 maxlen: 48
2a0b:21c1:6032::/48 maxlen: 48
2a0b:21c1:6033::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:2e:0e:95:48:d2:8d:10:ce:78:33:ad:07:29:67:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Oct 13 02:53:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9268b896bdcc12b30ab9dcef3e7a40fc0e510776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:9a:72:4b:e8:65:5a:10:f1:63:3f:50:c9:
92:56:22:f3:43:4c:21:a6:3a:cf:b8:b3:73:e5:30:
86:08:49:0f:80:fa:d6:8c:c0:cb:f3:fa:cf:21:b3:
48:b5:c1:57:f0:50:d3:3c:2d:be:d8:0f:54:2b:22:
77:c7:67:73:55:ec:57:c6:4b:10:63:ad:d2:76:16:
82:77:cc:ae:94:e6:4f:2b:f1:39:bf:de:a8:4d:b6:
5c:4a:0f:5a:b0:d6:25:d1:fa:d5:ea:31:db:b2:33:
f1:db:8b:66:7e:54:3a:fd:d1:26:e3:7e:d1:91:be:
66:9c:e6:ff:2a:db:a6:03:3a:c1:14:9a:41:15:68:
40:f7:9b:ad:7c:8b:f6:59:38:ce:30:d6:e4:b0:c0:
8d:58:dc:f6:53:8a:cc:18:36:8e:86:ec:69:26:81:
57:80:2a:a0:6b:f8:0d:a4:37:d9:2f:b5:72:40:a8:
1a:ff:cf:80:98:03:35:e7:90:6a:df:fb:d9:a2:75:
60:d7:48:35:bb:d8:ff:8a:47:81:3e:5e:83:84:f7:
20:3b:61:57:9b:0e:62:93:39:57:27:98:0b:a9:38:
8f:35:be:92:ca:b2:3b:fe:8c:0b:71:b8:5f:1d:03:
54:dd:35:58:cf:81:43:d7:dc:4d:aa:f5:0f:42:40:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:68:B8:96:BD:CC:12:B3:0A:B9:DC:EF:3E:7A:40:FC:0E:51:07:76
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/kmi4lr3MErMKudzvPnpA_A5RB3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.127.0.0-89.127.19.255
IPv6:
2a0b:21c1:600c::/46
2a0b:21c1:6013::-2a0b:21c1:601a:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:601e::-2a0b:21c1:6022:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:6024::/46
2a0b:21c1:6032::/47
Signature Algorithm: sha256WithRSAEncryption
52:7a:3f:86:9b:24:a1:40:b6:ca:1f:96:1e:2d:f5:47:98:61:
67:6f:d5:c5:20:12:19:39:40:43:54:a5:ee:85:cb:5c:37:50:
46:79:f0:4d:9e:9a:19:05:aa:57:ab:ef:49:8b:f8:a8:09:f1:
91:6d:e4:eb:bd:98:10:fa:b6:06:8e:96:d9:15:c4:6f:b1:e6:
17:76:b4:65:2f:cd:0f:13:56:0a:97:8a:fd:0f:8d:db:50:ff:
8b:ac:7c:b5:cf:ff:ae:46:3b:49:54:c2:a7:14:c2:f8:40:57:
7a:69:dc:d7:ca:1f:fe:09:ca:4b:92:f0:e4:03:d3:c5:11:1f:
2c:60:d3:77:bf:ed:be:d8:d5:c6:0f:5f:ea:f1:ea:4f:a4:6b:
56:c1:39:5f:33:4b:d4:7f:d8:81:06:b6:ac:9d:f2:e4:06:6d:
2e:80:2a:6a:26:df:03:20:fb:aa:c7:c0:b0:9a:c8:fa:ef:af:
9b:8c:c4:25:b1:74:26:e9:24:fe:24:8b:1c:6c:8b:e6:95:3d:
a9:58:59:95:91:88:1b:89:4c:7b:36:1a:74:d1:2a:92:6f:21:
33:06:e8:bf:2c:0f:79:79:94:fe:38:50:3c:83:00:90:82:3c:
0f:70:64:d3:c6:cb:f6:98:74:6f:cb:92:de:7a:db:82:32:90:
3a:50:b7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:58:19 2026 by rpki-client