Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/kkpPZbU76qNNZ35OO5RDmFM1_eE.roa
File: kkpPZbU76qNNZ35OO5RDmFM1_eE.roa (raw, json)
Hash identifier: PpnVBr43d5uwTiHOd9tq/G2qBAqjByRBT4t+x/AhsXA=
Subject key identifier: 92:4A:4F:65:B5:3B:EA:A3:4D:67:7E:4E:3B:94:43:98:53:35:FD:E1
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019FAE8B5561B744B176511DEADB5A4122B7
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/kkpPZbU76qNNZ35OO5RDmFM1_eE.roa
Signing time: Wed 29 Jul 2026 15:43:14 +0000
ROA not before: Wed 29 Jul 2026 15:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.147.0/24 maxlen: 24
45.140.220.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.186.66.0/24 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.29.0/24 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.105.177.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
194.56.227.0/24 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b86:100::/40 maxlen: 48
2a0b:b86:fff0::/44 maxlen: 44
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffc0::/44 maxlen: 44
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0b:7086:fff0::/44 maxlen: 44
2a0b:7087:fff0::/44 maxlen: 44
2a0d:77c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 12:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:8b:55:61:b7:44:b1:76:51:1d:ea:db:5a:41:22:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jul 29 15:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=924a4f65b53beaa34d677e4e3b9443985335fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:13:fe:7a:66:ed:03:f2:d2:04:87:68:f2:
aa:b2:be:2d:77:ab:46:c7:88:1f:3e:a7:a9:50:fb:
ab:21:d2:b3:8f:ea:79:31:04:a3:ab:6e:30:6b:50:
06:46:36:d7:bc:74:a8:d2:42:c2:38:5c:69:a5:96:
c5:86:87:25:d0:82:bc:cc:4a:a4:19:22:ba:bb:fa:
4b:53:69:10:ae:bf:5c:4b:94:31:2f:84:87:17:d4:
f1:c2:65:d3:10:73:0a:b5:25:4f:fd:83:4f:0e:30:
53:8d:2f:67:ae:d7:86:d9:9f:be:f6:69:38:a3:a5:
ac:0d:61:68:ca:28:e8:90:dc:58:7e:65:57:99:4e:
f2:3a:88:0c:e1:f7:ae:08:bd:b9:9b:92:dc:8a:da:
d7:15:5e:62:4c:5b:db:ce:4b:a8:eb:36:ad:cd:9d:
f2:ed:a6:31:aa:0a:33:18:04:3c:3c:f3:e8:58:d1:
48:bf:bb:cf:16:3d:8a:c8:32:41:0e:b5:f8:8d:d3:
27:08:47:4b:2c:b5:eb:44:b2:1d:4a:75:b5:8e:b8:
f9:48:37:33:02:a2:12:5f:e1:7e:55:34:ed:a8:58:
7d:e4:56:33:1c:8b:48:e4:cd:69:d7:b2:de:38:b0:
2c:a2:10:5e:91:83:82:11:4d:b3:a7:46:4a:30:73:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:4F:65:B5:3B:EA:A3:4D:67:7E:4E:3B:94:43:98:53:35:FD:E1
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/kkpPZbU76qNNZ35OO5RDmFM1_eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.90.147.0/24
45.140.220.0/22
77.83.240.0/22
78.108.217.0/24
83.143.116.0/24
85.202.162.0/24
89.190.156.0/22
178.218.144.0/22
185.186.64.0/22
185.227.71.0/24
185.234.72.0/22
185.242.224.0/22
193.31.29.0-193.31.30.255
193.34.76.0/22
193.105.177.0/24
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:1ff:ffff:ffff:ffff:ffff:ffff
2a0b:b86:fff0::/44
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffc0::/44
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0b:7086:fff0::/44
2a0b:7087:fff0::/44
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
ca:61:ed:60:bf:db:ef:b2:78:e6:23:e3:1f:70:39:68:a0:7d:
ad:02:2e:12:00:db:b2:fa:57:b5:b3:a5:79:82:83:c1:9d:aa:
6d:c5:bb:b0:a9:b7:9b:70:7b:52:55:1d:ad:b6:e0:3e:ff:79:
c1:1e:82:8d:e7:92:57:3f:a6:31:df:46:20:51:50:26:7f:c1:
6a:a3:71:98:5f:40:5e:87:9f:0b:98:39:4b:64:2f:f6:8c:23:
4d:13:d0:a2:a0:fc:07:64:bd:b7:f0:34:d2:e3:6a:56:37:b2:
e7:e4:f7:c0:bd:a8:19:84:2d:67:92:fd:88:0c:19:85:98:34:
f5:c4:b8:a5:15:f7:e3:08:ee:83:69:c9:38:1f:6c:ad:55:00:
50:ae:1f:53:3b:c2:a2:83:0f:33:0c:b4:76:fd:9c:53:79:6b:
d3:b6:6f:9b:e8:b5:b9:c3:10:bf:bf:42:13:90:48:23:29:d6:
d0:0b:4f:da:0d:f3:a1:94:6c:1a:38:53:e2:71:f5:29:f8:06:
36:91:8c:63:46:2b:6f:2c:7f:18:02:20:4b:de:b8:32:10:6b:
4e:00:0d:e8:71:7c:8c:a2:ee:86:07:2b:8f:05:93:09:8e:89:
3d:2d:3a:dd:4a:f8:06:27:86:6b:72:af:c5:ef:ee:cc:36:75:
81:37:ca:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 17:28:49 2026 by rpki-client