Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/sKhtilA-qK5fJ-4wlEdSQcBVIhc.roa
File: sKhtilA-qK5fJ-4wlEdSQcBVIhc.roa (raw, json)
Hash identifier: rDS17IOmmmiz2piSl7sTAOyAnQJus72LtE5xOoy5IkE=
Subject key identifier: B0:A8:6D:8A:50:3E:A8:AE:5F:27:EE:30:94:47:52:41:C0:55:22:17
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 01A153A92E91576DC25E39A76B1ECDE6FAAE
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/sKhtilA-qK5fJ-4wlEdSQcBVIhc.roa
Signing time: Mon 19 Oct 2026 10:15:58 +0000
ROA not before: Mon 19 Oct 2026 10:15:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41959
IP address blocks: 84.234.113.0/24 maxlen: 24
84.234.122.0/24 maxlen: 24
84.234.123.0/24 maxlen: 24
91.206.96.0/23 maxlen: 23
185.79.32.0/22 maxlen: 22
193.242.146.0/23 maxlen: 23
194.126.229.0/24 maxlen: 24
194.140.250.0/24 maxlen: 24
195.80.229.0/24 maxlen: 24
195.93.142.0/23 maxlen: 23
195.226.207.0/24 maxlen: 24
195.245.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:a9:2e:91:57:6d:c2:5e:39:a7:6b:1e:cd:e6:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Oct 19 10:15:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0a86d8a503ea8ae5f27ee3094475241c0552217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:3f:e0:ed:93:a3:45:de:fc:3b:e7:ea:23:
53:5d:7f:ec:ce:7b:9d:4e:57:4f:62:24:e9:f3:14:
7a:e7:65:7e:e3:1a:9d:18:6b:ef:31:0b:dc:ad:6e:
5c:09:cd:46:91:30:08:72:00:f1:25:45:4e:45:d9:
e0:17:d9:5b:bc:e3:cf:0d:ba:9e:66:2e:3b:b1:1b:
3b:64:64:a0:fd:42:fc:af:aa:ec:f6:51:b5:a0:2f:
5d:fd:af:b1:0c:fe:38:ba:df:6c:a1:38:35:ef:82:
93:0f:81:3a:4c:f7:70:39:31:88:6c:44:5d:a6:a6:
e0:04:4c:c4:fd:02:a5:94:75:1c:ae:79:15:65:87:
0e:b0:c8:76:8e:24:e6:ca:6a:96:7d:a0:dc:69:6b:
fe:07:24:01:14:13:c8:e2:8f:25:27:85:aa:54:6c:
56:f4:46:fc:02:29:66:67:c2:49:3a:f4:22:c4:e1:
b3:b7:50:fc:6b:ec:10:5a:fd:b2:7a:ef:01:00:c2:
f0:a8:64:43:42:36:8e:eb:53:91:b4:35:c2:54:b3:
bf:5e:8d:a5:9a:e0:16:c0:61:8f:96:6d:49:28:c4:
8f:02:8d:88:8c:38:ec:b4:99:e3:3c:38:3c:bb:e6:
fd:37:21:0d:d7:ad:aa:88:b9:06:b9:c6:18:9c:d5:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A8:6D:8A:50:3E:A8:AE:5F:27:EE:30:94:47:52:41:C0:55:22:17
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/sKhtilA-qK5fJ-4wlEdSQcBVIhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.113.0/24
84.234.122.0/23
91.206.96.0/23
185.79.32.0/22
193.242.146.0/23
194.126.229.0/24
194.140.250.0/24
195.80.229.0/24
195.93.142.0/23
195.226.207.0/24
195.245.204.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ef:4f:70:24:2a:d2:36:30:a5:05:b6:47:4d:2d:30:b3:4a:
a7:83:21:bd:a6:22:66:87:5f:fb:f6:62:64:a2:dd:59:a0:4a:
de:03:b0:d0:9d:09:7e:c7:c0:5f:9b:ce:fa:8c:0f:40:e5:bc:
ef:4a:ce:d5:78:f4:fe:c3:3e:20:dd:70:a5:c7:0f:c1:42:2a:
3d:fe:17:7f:98:3d:e8:c8:e2:58:49:cf:2a:ed:b3:9f:95:51:
83:91:98:57:83:e8:f5:df:d7:17:92:41:44:0b:6d:9d:53:d8:
89:9b:ff:a1:25:a4:30:72:aa:b3:e5:1d:b9:06:79:8b:c9:58:
8b:eb:8a:95:71:e8:95:c7:4f:7b:ac:3f:c0:34:8b:a6:b4:a9:
87:17:3d:af:71:0b:c2:0a:05:49:03:09:49:6b:72:5d:77:c1:
16:c2:7a:74:dc:73:ad:f6:be:11:6f:97:bb:fd:73:48:07:ba:
5a:08:1b:c3:e4:0a:21:c4:91:b7:19:63:64:bc:83:db:6e:c9:
7f:f0:8f:18:ba:05:0e:bb:43:0c:f8:dc:d9:2e:28:28:74:d2:
5f:5a:6f:62:c4:0a:cd:59:33:ab:f8:0f:39:47:92:c4:d2:9c:
d6:41:92:7c:d1:5f:bb:a8:68:16:9d:51:b4:99:a5:be:e9:e7:
7b:ac:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:30 2026 by rpki-client