Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kgHlDFEQcnDzf-xYIEzkL5GQnsk.roa
File: kgHlDFEQcnDzf-xYIEzkL5GQnsk.roa (raw, json)
Hash identifier: PzMb1AlOM70DIXh6ulMATvB/64UtzO+/co3mYmYkiS0=
Subject key identifier: 92:01:E5:0C:51:10:72:70:F3:7F:EC:58:20:4C:E4:2F:91:90:9E:C9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A08687E36A9B12D8111892564DCB76F933
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kgHlDFEQcnDzf-xYIEzkL5GQnsk.roa
Signing time: Wed 09 Sep 2026 14:17:27 +0000
ROA not before: Wed 09 Sep 2026 14:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.86.16.0/22 maxlen: 22
89.39.242.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/23 maxlen: 23
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
146.19.50.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.180.145.0/24 maxlen: 24
185.214.166.0/24 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 22
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
213.134.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:87:e3:6a:9b:12:d8:11:18:92:56:4d:cb:76:f9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 9 14:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9201e50c51107270f37fec58204ce42f91909ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:ef:ec:cb:89:17:eb:2d:5d:be:4a:16:d2:
09:bc:ce:da:50:4b:5c:e5:b4:0e:33:a9:ef:5d:a1:
0e:4c:fc:19:b1:f9:5f:2d:dd:36:b4:51:ca:09:cb:
58:23:cc:58:4e:e1:d8:e4:b3:57:1e:c5:2f:8c:0a:
63:60:89:87:c2:77:f8:90:97:cc:c4:2e:bd:d8:80:
ea:22:cb:89:f3:7b:65:69:95:6c:dd:e6:8b:a1:7e:
77:c7:1d:e5:4d:fe:94:47:a9:95:04:13:9f:17:62:
cf:0f:fc:3a:fb:de:79:b6:65:e1:73:04:46:75:09:
dd:d4:17:4c:15:58:b8:c4:e7:66:d2:01:dc:ba:46:
ab:c2:88:20:ad:6b:ec:c1:31:8a:21:35:31:b8:3c:
c5:2b:4c:91:9f:69:d8:6f:09:99:4a:57:75:cc:0f:
c4:95:42:97:a5:c5:15:ad:c0:fb:ae:d2:52:76:24:
56:09:70:66:55:ce:76:ba:6a:31:20:ea:c9:a9:93:
03:e3:09:99:1f:84:11:38:af:e7:32:d1:31:2f:ec:
bc:94:4a:fe:82:d7:d4:b6:5a:ea:0a:03:16:b9:e0:
7f:0d:fb:c7:f1:f6:50:7b:52:02:66:ce:6a:7f:83:
d0:00:04:e1:03:ab:f0:14:06:90:c0:16:23:a3:45:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:E5:0C:51:10:72:70:F3:7F:EC:58:20:4C:E4:2F:91:90:9E:C9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kgHlDFEQcnDzf-xYIEzkL5GQnsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
5.182.28.0/22
45.86.16.0/22
89.39.242.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
94.231.198.0/24
146.19.50.0/24
178.175.176.0/22
185.180.145.0/24
185.214.166.0/24
195.138.103.0-195.138.107.255
195.138.112.0/24
195.138.120.0/24
195.138.122.0/23
213.134.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:81:af:a3:ad:f8:78:d8:83:cf:66:2a:3d:b2:7e:a0:c5:9a:
7c:40:60:20:d7:dc:a3:2f:6b:5f:f5:83:e8:68:38:b3:50:c1:
e1:28:77:b6:09:48:82:fb:6f:23:a0:04:0d:a8:11:e6:8e:b4:
57:0c:71:82:44:4a:1d:d7:b1:1f:07:d8:0f:c0:49:4b:4d:53:
54:00:d0:ae:7d:1a:b5:1a:65:9e:40:fa:ee:af:84:cd:00:9e:
9c:9a:e6:d3:07:44:25:65:9e:df:09:a3:37:93:b7:d9:2a:58:
19:16:8d:30:77:fb:b6:77:03:ad:2b:60:a9:8d:7e:bd:be:4f:
ab:dd:06:f6:05:2f:1c:14:dc:b6:3c:45:98:21:ab:e2:a5:48:
3b:06:cb:8d:28:41:50:18:b6:55:7d:b1:57:68:7e:a4:28:17:
ca:76:95:87:70:cc:5a:6a:06:80:32:55:0b:13:69:35:c2:59:
0c:88:4a:83:1d:57:11:3f:99:81:0f:18:42:d2:3d:a6:78:fb:
ac:59:60:27:35:84:ec:e5:a8:60:8e:40:8a:5f:6b:9d:97:36:
17:c0:1d:d8:0c:b7:24:20:5a:a4:0b:b5:b2:af:3f:f5:14:ea:
a7:5e:cc:48:ef:ed:93:2a:2a:9f:ac:0f:fd:67:16:2a:47:15:
16:a1:31:00
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAaCGh+NqmxLYERiSVk3LdvkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwOTA5MTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjAxZTUwYzUxMTA3MjcwZjM3ZmVjNTgyMDRjZTQyZjkxOTA5ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXjv7MuJF+stXb5KFtIJvM7aUEtc
5bQOM6nvXaEOTPwZsflfLd02tFHKCctYI8xYTuHY5LNXHsUvjApjYImHwnf4kJfM
xC692IDqIsuJ83tlaZVs3eaLoX53xx3lTf6UR6mVBBOfF2LPD/w6+955tmXhcwRG
dQnd1BdMFVi4xOdm0gHcukarwoggrWvswTGKITUxuDzFK0yRn2nYbwmZSld1zA/E
lUKXpcUVrcD7rtJSdiRWCXBmVc52umoxIOrJqZMD4wmZH4QROK/nMtExL+y8lEr+
gtfUtlrqCgMWueB/DfvH8fZQe1ICZs5qf4PQAAThA6vwFAaQwBYjo0UnSQIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFJIB5QxREHJw83/sWCBM5C+RkJ7JMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEva2dIbERGRVFjbkR6Zi14WUlFemtMNUdRbnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAgW0BAME
AgW2HAMEAi1WEAMEAFkn8gMEAlvySAMEAVvyXgMEAFvyZwMEAF7nxgMEAJITMgME
ArKvsAMEALm0kQMEALnWpjAMAwQAw4pnAwQCw4poAwQAw4pwAwQAw4p4AwQBw4p6
AwQA1YYZMA0GCSqGSIb3DQEBCwUAA4IBAQCaga+jrfh42IPPZio9sn6gxZp8QGAg
19yjL2tf9YPoaDizUMHhKHe2CUiC+28joAQNqBHmjrRXDHGCREod17EfB9gPwElL
TVNUANCufRq1GmWeQPrur4TNAJ6cmubTB0QlZZ7fCaM3k7fZKlgZFo0wd/u2dwOt
K2CpjX69vk+r3Qb2BS8cFNy2PEWYIavipUg7BsuNKEFQGLZVfbFXaH6kKBfKdpWH
cMxaagaAMlULE2k1wlkMiEqDHVcRP5mBDxhC0j2mePusWWAnNYTs5ahgjkCKX2ud
lzYXwB3YDLckIFqkC7Wyrz/1FOqnXsxI7+2TKiqfrA/9ZxYqRxUWoTEA
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:31 2026 by rpki-client