Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/KYxqHBdlJM50_l8QVytJGND1lFU.roa
File: KYxqHBdlJM50_l8QVytJGND1lFU.roa (raw, json)
Hash identifier: NIzeGS795nzm0xWuHYzaf7CPiwKVqEugUFyuP5WF98U=
Subject key identifier: 29:8C:6A:1C:17:65:24:CE:74:FE:5F:10:57:2B:49:18:D0:F5:94:55
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 01A0A533726E520D0337048A46CFC28B9B73
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/KYxqHBdlJM50_l8QVytJGND1lFU.roa
Signing time: Tue 15 Sep 2026 13:13:27 +0000
ROA not before: Tue 15 Sep 2026 13:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209942
IP address blocks: 109.104.111.0/24 maxlen: 24
185.70.228.0/24 maxlen: 24
185.70.229.0/24 maxlen: 24
185.70.230.0/24 maxlen: 24
185.70.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:33:72:6e:52:0d:03:37:04:8a:46:cf:c2:8b:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Sep 15 13:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=298c6a1c176524ce74fe5f10572b4918d0f59455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:13:22:ae:4b:7a:04:3b:7f:5d:9c:c3:79:
01:f0:cf:cb:11:58:dc:bf:4b:98:69:dd:11:4e:c2:
94:52:5d:94:80:b3:dc:c8:29:99:9f:91:8c:c2:45:
a3:08:a8:9f:bc:3f:e2:01:77:75:91:1f:df:6f:80:
8a:f3:5f:ad:21:0c:d9:44:3c:d5:0c:83:7a:cd:56:
29:39:27:67:d4:f6:e0:cb:00:ad:0f:c7:e2:06:f1:
8d:a3:cb:e9:e9:2f:b9:bb:a0:b7:0a:70:f1:6d:f8:
76:04:c6:4d:c3:8e:74:f6:c3:e9:e3:80:aa:3a:b6:
3d:78:6d:33:82:22:e2:e5:44:73:f6:5e:cd:b6:67:
df:89:ed:e4:da:fa:fa:7a:0a:2d:b6:07:3f:61:2e:
8c:b1:df:40:e2:62:1f:c0:72:3b:6f:8b:15:87:5b:
b6:3b:0b:98:16:2e:c1:70:dd:e3:2c:72:bd:62:3e:
18:b9:0d:03:d7:8b:2d:cc:64:46:2f:bd:0d:86:25:
e2:f3:4d:d0:af:ef:72:b4:28:fc:81:f2:ae:9b:59:
64:92:f9:4a:e4:7b:f2:8e:5a:fb:53:18:17:e1:0c:
09:e0:05:ee:47:7a:23:a2:7d:cb:3f:47:a4:ff:04:
64:9b:79:22:54:ca:18:30:9d:b3:07:dc:13:16:30:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8C:6A:1C:17:65:24:CE:74:FE:5F:10:57:2B:49:18:D0:F5:94:55
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/KYxqHBdlJM50_l8QVytJGND1lFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.111.0/24
185.70.228.0/22
Signature Algorithm: sha256WithRSAEncryption
87:07:0b:f5:11:e6:f7:23:5b:73:63:3d:8b:90:0f:6d:6f:42:
30:0a:dd:51:0e:c1:82:e6:35:ba:f0:87:84:16:9f:96:fb:40:
01:a1:89:ad:27:e2:7c:7c:33:36:2f:e8:81:a6:55:21:79:bb:
e8:d3:f7:92:34:2d:a7:e3:45:83:67:fc:47:48:87:8d:a7:40:
58:17:f9:9b:bb:ac:59:d3:cb:4c:40:e3:43:83:3e:32:ac:48:
fe:51:29:f3:80:91:2a:cd:ec:83:79:2b:8a:3e:02:9c:b5:ad:
c8:95:cb:da:ba:80:3f:ec:14:5e:3c:f7:7a:05:a7:e5:a2:03:
f1:ae:f6:1f:9a:3e:02:74:ce:56:44:8b:cc:17:77:0e:15:c8:
74:b4:a9:d3:15:7a:b8:95:ff:4e:35:d3:1d:ff:8b:84:a6:ec:
9f:d3:05:0b:80:52:87:50:4d:52:5f:87:cc:cc:88:ed:bd:22:
d0:56:42:45:e2:9f:7f:74:de:89:20:5c:13:68:26:5b:b7:1f:
50:cb:33:e8:4e:7a:c1:af:b2:53:be:75:d1:a3:66:56:88:50:
5c:9a:f0:74:e4:32:70:1f:e4:67:84:c7:75:4f:43:2e:70:c1:
89:73:a3:2e:1b:7c:bd:61:c7:38:dd:45:22:be:7d:d2:2b:80:
ed:50:d5:50
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaClM3JuUg0DNwSKRs/Ci5tzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2QwMjMzODA4NTcwZTMxZmZiMmZjZGUxYjg3NzA3MWNi
YzY2MDMwHhcNMjYwOTE1MTMxMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOThjNmExYzE3NjUyNGNlNzRmZTVmMTA1NzJiNDkxOGQwZjU5NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT0TIq5LegQ7f12cw3kB8M/LEVjc
v0uYad0RTsKUUl2UgLPcyCmZn5GMwkWjCKifvD/iAXd1kR/fb4CK81+tIQzZRDzV
DIN6zVYpOSdn1PbgywCtD8fiBvGNo8vp6S+5u6C3CnDxbfh2BMZNw4509sPp44Cq
OrY9eG0zgiLi5URz9l7Ntmffie3k2vr6egottgc/YS6Msd9A4mIfwHI7b4sVh1u2
OwuYFi7BcN3jLHK9Yj4YuQ0D14stzGRGL70NhiXi803Qr+9ytCj8gfKum1lkkvlK
5Hvyjlr7UxgX4QwJ4AXuR3ojon3LP0ek/wRkm3kiVMoYMJ2zB9wTFjBWNwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCmMahwXZSTOdP5fEFcrSRjQ9ZRVMB8GA1UdIwQY
MBaAFPvNAjOAhXDjH/svzeG4dwccvGYDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04MENNNENGY09NZi15X040YmgzQnh5OFpnTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3
LTYxZDczMzNmODU3MC8xL0tZeHFIQmRsSk01MF9sOFFWeXRKR05EMWxGVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3LTYxZDczMzNmODU3
MC8xLzEtODBDTTRDRmNPTWYteV9ONGJoM0J4eThaZ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABtaG8D
BAK5RuQwDQYJKoZIhvcNAQELBQADggEBAIcHC/UR5vcjW3NjPYuQD21vQjAK3VEO
wYLmNbrwh4QWn5b7QAGhia0n4nx8MzYv6IGmVSF5u+jT95I0LafjRYNn/EdIh42n
QFgX+Zu7rFnTy0xA40ODPjKsSP5RKfOAkSrN7IN5K4o+Apy1rciVy9q6gD/sFF48
93oFp+WiA/Gu9h+aPgJ0zlZEi8wXdw4VyHS0qdMVeriV/0410x3/i4Sm7J/TBQuA
UodQTVJfh8zMiO29ItBWQkXin3903okgXBNoJlu3H1DLM+hOesGvslO+ddGjZlaI
UFya8HTkMnAf5GeEx3VPQy5wwYlzoy4bfL1hxzjdRSK+fdIrgO1Q1VA=
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:28:24 2026 by rpki-client