Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/K8y0v8xbRIAHJNfQb92ZFS9zmkM.roa
File: K8y0v8xbRIAHJNfQb92ZFS9zmkM.roa (raw, json)
Hash identifier: +Jvt7K7C2npld470zp55mSeL6prCT70kckBsxVr1DQU=
Subject key identifier: 2B:CC:B4:BF:CC:5B:44:80:07:24:D7:D0:6F:DD:99:15:2F:73:9A:43
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 01A05D7DFAD3EB3231C9C3BE49EBEC2A4778
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/K8y0v8xbRIAHJNfQb92ZFS9zmkM.roa
Signing time: Tue 01 Sep 2026 15:02:12 +0000
ROA not before: Tue 01 Sep 2026 15:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1273
IP address blocks: 37.25.128.0/17 maxlen: 17
46.108.0.0/16 maxlen: 24
46.190.128.0/17 maxlen: 24
46.190.137.0/24 maxlen: 24
46.190.254.0/24 maxlen: 24
47.73.0.0/16 maxlen: 24
47.73.182.0/24 maxlen: 24
47.73.183.0/24 maxlen: 24
47.73.184.0/24 maxlen: 24
47.73.239.0/24 maxlen: 24
47.73.240.0/22 maxlen: 22
62.213.128.0/23 maxlen: 24
62.213.156.0/22 maxlen: 24
85.205.0.0/16 maxlen: 24
108.179.64.0/18 maxlen: 24
139.47.192.0/18 maxlen: 24
176.125.0.0/19 maxlen: 19
195.233.0.0/16 maxlen: 24
2a01:818:1a00::/40 maxlen: 44
2a01:818:1b00::/40 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:7d:fa:d3:eb:32:31:c9:c3:be:49:eb:ec:2a:47:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Sep 1 15:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bccb4bfcc5b44800724d7d06fdd99152f739a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:9c:c2:70:cf:04:86:24:35:a4:3e:8e:e0:
94:e4:50:42:47:5e:d0:05:6f:ce:d6:7c:b4:ed:7c:
78:bc:5f:2e:af:d9:67:8e:3f:4e:00:ed:bd:88:16:
b3:46:5d:65:43:ad:06:01:7b:54:c3:eb:9e:6f:74:
89:c6:02:d9:a7:55:3f:77:87:14:08:5b:97:e7:e8:
b3:6f:72:db:30:39:6c:8f:e8:9c:f0:92:1d:cc:84:
da:46:1d:dc:e4:46:7c:5e:34:60:a7:84:b4:58:60:
26:67:5e:9c:b9:a8:25:71:ac:f7:05:97:55:36:fc:
32:97:c6:48:7b:19:4f:7f:eb:b5:a7:89:31:ae:a1:
e6:d6:f4:5f:0d:0b:2b:4b:0a:0c:78:b7:47:8e:a2:
7f:a2:36:52:56:fc:c2:33:7e:99:68:f4:83:64:eb:
68:ba:e8:c2:18:8e:6b:a7:52:92:e9:74:6e:3d:4d:
bd:c8:02:36:05:c2:41:22:a6:ba:aa:2f:14:54:71:
0f:32:99:a2:fe:9e:00:34:c9:e9:d8:4c:54:62:bd:
c3:ce:86:b4:2d:e6:3a:ef:41:5f:04:58:03:b8:a9:
35:5a:21:2a:cf:9f:59:bd:35:96:b5:26:d7:29:cf:
72:58:b4:c6:d9:01:55:fd:be:92:cc:f3:52:1e:3d:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CC:B4:BF:CC:5B:44:80:07:24:D7:D0:6F:DD:99:15:2F:73:9A:43
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/K8y0v8xbRIAHJNfQb92ZFS9zmkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.128.0/17
46.108.0.0/16
46.190.128.0/17
47.73.0.0/16
62.213.128.0/23
62.213.156.0/22
85.205.0.0/16
108.179.64.0/18
139.47.192.0/18
176.125.0.0/19
195.233.0.0/16
IPv6:
2a01:818:1a00::/39
Signature Algorithm: sha256WithRSAEncryption
49:1c:71:b0:25:4f:10:58:c0:49:12:08:75:e7:52:4c:7b:5b:
f1:43:bb:98:c9:08:6f:af:40:8b:f8:74:11:75:b2:cc:74:34:
1d:75:84:06:09:60:35:79:5e:84:2e:c6:ed:ba:d1:8c:69:28:
96:d6:49:5c:f8:6a:3c:d9:12:f6:f1:d1:75:04:b2:4d:8c:80:
7f:d9:78:bf:65:cf:b3:1c:e8:53:39:11:94:e9:d1:5e:0c:dc:
fc:d0:96:9d:6b:48:10:79:84:09:7a:cd:d8:56:17:3b:e8:14:
de:8b:38:de:93:81:4a:24:95:bb:73:bf:8e:12:c0:bf:c5:48:
67:1e:65:21:40:05:38:14:86:d8:73:d1:ae:c0:6d:85:50:a9:
8c:3b:c3:87:68:b8:f9:67:78:ed:a3:af:b0:f9:40:25:9d:bb:
2b:14:83:f7:20:bc:fe:3f:9d:c4:eb:8f:01:d9:c6:a3:0f:36:
7f:5f:0f:46:34:8d:2a:9e:1c:b7:5a:ef:54:93:c1:de:12:81:
f7:89:e1:23:29:59:ce:20:ae:4f:ef:5e:7e:5f:15:21:30:5a:
55:6e:6b:cf:d5:a4:5f:79:f5:fb:eb:08:e6:30:63:c5:ea:41:
17:91:c8:38:23:33:22:2d:23:75:1c:0d:34:ca:1e:32:f3:01:
72:5e:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:24 2026 by rpki-client