Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kkLteivaQR_szhazsrMD1vBsR3A.roa
File: kkLteivaQR_szhazsrMD1vBsR3A.roa (raw, json)
Hash identifier: eKpCx3+r745jNHB1PCurSrvvJYppnVR4KV0FebyIkJM=
Subject key identifier: 92:42:ED:7A:2B:DA:41:1F:EC:CE:16:B3:B2:B3:03:D6:F0:6C:47:70
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FF1EF3057786BC04BC9C0D85CD5B5D015
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kkLteivaQR_szhazsrMD1vBsR3A.roa
Signing time: Tue 11 Aug 2026 17:46:52 +0000
ROA not before: Tue 11 Aug 2026 17:46:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213495
IP address blocks: 5.175.183.0/24 maxlen: 24
5.175.188.0/24 maxlen: 24
5.175.234.0/24 maxlen: 24
5.231.56.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:ef:30:57:78:6b:c0:4b:c9:c0:d8:5c:d5:b5:d0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 11 17:46:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9242ed7a2bda411fecce16b3b2b303d6f06c4770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:2c:be:31:ed:f9:b7:f6:08:6c:fa:16:72:
cb:50:3a:97:6d:a6:1f:32:14:1e:48:84:a7:8d:ee:
e8:27:7b:3f:c8:40:31:ef:6b:0f:92:db:14:d1:18:
13:c2:59:e8:97:88:50:89:21:f5:ed:b8:ad:7c:b3:
83:e7:2f:40:87:f5:b2:d2:75:52:de:e8:2b:12:58:
f3:1a:1e:6d:24:bd:61:41:47:a4:d0:9b:f5:2b:65:
d8:ea:6f:e8:ca:e6:73:5b:f9:99:b6:53:9c:9e:d9:
fa:8e:b3:df:b5:2e:fe:54:dc:eb:11:f1:39:e4:f7:
d7:b6:cd:34:df:fe:15:ab:2b:a8:42:33:94:a3:69:
5a:5c:1b:13:71:38:9e:9b:54:3e:ff:da:fc:e9:b1:
d2:31:fd:92:44:17:19:de:bf:49:03:cb:25:5c:62:
1b:b2:b4:1e:21:6f:57:61:f7:fd:c1:eb:75:52:32:
ce:24:0b:cf:56:36:1c:61:86:56:2b:f0:7c:85:22:
99:04:76:df:d7:08:85:20:99:f9:aa:35:90:ad:fc:
30:23:f0:40:b7:ea:9b:b6:58:29:a5:88:1f:c4:8b:
cf:bf:34:8c:36:73:c8:6a:c5:c9:f2:9c:18:5c:00:
11:a2:af:2f:de:56:fa:68:11:28:16:c6:e6:4d:5f:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:ED:7A:2B:DA:41:1F:EC:CE:16:B3:B2:B3:03:D6:F0:6C:47:70
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kkLteivaQR_szhazsrMD1vBsR3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.183.0/24
5.175.188.0/24
5.175.234.0/24
5.231.56.0/24
5.231.106.0/24
77.90.40.0/24
89.144.47.0/24
94.249.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:04:b1:65:17:92:61:2b:00:d9:54:06:68:07:b3:90:af:3d:
a9:b5:5a:7d:85:50:aa:85:9f:78:74:8d:71:ca:8f:9f:a9:82:
2e:e2:d8:85:15:cb:8a:06:ee:b5:83:b5:85:f7:0f:97:d9:ab:
53:d1:a0:db:38:0a:31:09:5c:89:d4:b8:c2:50:d0:39:4b:f1:
d8:45:25:3b:8b:d0:b4:90:e6:5f:29:9b:30:fd:fe:c7:aa:25:
9b:bc:09:14:64:15:94:ec:d3:fb:c0:f9:87:1e:b8:86:df:e1:
6a:77:a6:41:d7:47:31:51:e1:9e:06:0b:1e:99:d6:9d:79:b2:
a6:b6:a7:bf:05:2f:87:65:41:6f:f4:cd:64:4b:d0:76:03:9c:
82:f9:b0:62:9d:cf:31:4d:d8:c9:4e:df:6c:cb:b0:43:fd:b9:
93:27:00:ec:c4:ca:05:36:83:0f:ec:db:e0:3a:bd:b7:cc:f4:
ff:c7:cc:77:e2:f7:14:3d:e2:c8:e9:04:15:ed:5d:82:e8:cf:
e5:c6:05:21:a4:ba:25:0c:56:39:a0:64:46:9b:2a:fb:e7:f6:
d1:51:21:ee:ae:fd:ff:41:80:e7:90:e4:49:f9:7c:61:f9:11:
72:87:bd:33:09:40:7c:bd:f9:0c:cd:e8:84:be:f4:09:c3:b5:
3c:86:fb:be
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ/x7zBXeGvAS8nA2FzVtdAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwODExMTc0NjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjQyZWQ3YTJiZGE0MTFmZWNjZTE2YjNiMmIzMDNkNmYwNmM0NzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUQsvjHt+bf2CGz6FnLLUDqXbaYf
MhQeSISnje7oJ3s/yEAx72sPktsU0RgTwlnol4hQiSH17bitfLOD5y9Ah/Wy0nVS
3ugrEljzGh5tJL1hQUek0Jv1K2XY6m/oyuZzW/mZtlOcntn6jrPftS7+VNzrEfE5
5PfXts003/4VqyuoQjOUo2laXBsTcTiem1Q+/9r86bHSMf2SRBcZ3r9JA8slXGIb
srQeIW9XYff9wet1UjLOJAvPVjYcYYZWK/B8hSKZBHbf1wiFIJn5qjWQrfwwI/BA
t+qbtlgppYgfxIvPvzSMNnPIasXJ8pwYXAARoq8v3lb6aBEoFsbmTV/p4QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJJC7Xor2kEf7M4Ws7KzA9bwbEdwMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEva2tMdGVpdmFRUl9zemhhenNyTUQxdkJzUjNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABa+3AwQA
Ba+8AwQABa/qAwQABec4AwQABedqAwQATVooAwQAWZAvAwQAXvnPMA0GCSqGSIb3
DQEBCwUAA4IBAQCiBLFlF5JhKwDZVAZoB7OQrz2ptVp9hVCqhZ94dI1xyo+fqYIu
4tiFFcuKBu61g7WF9w+X2atT0aDbOAoxCVyJ1LjCUNA5S/HYRSU7i9C0kOZfKZsw
/f7HqiWbvAkUZBWU7NP7wPmHHriG3+Fqd6ZB10cxUeGeBgsemdadebKmtqe/BS+H
ZUFv9M1kS9B2A5yC+bBinc8xTdjJTt9sy7BD/bmTJwDsxMoFNoMP7NvgOr23zPT/
x8x34vcUPeLI6QQV7V2C6M/lxgUhpLolDFY5oGRGmyr75/bRUSHurv3/QYDnkORJ
+Xxh+RFyh70zCUB8vfkMzeiEvvQJw7U8hvu+
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:49 2026 by rpki-client