Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kYXilKjM5Webi1mMLGb5znckMWA.roa
File: kYXilKjM5Webi1mMLGb5znckMWA.roa (raw, json)
Hash identifier: 1JBpYozA8uNvElhqFxfilSJ3RXWM+/U6o7HyohR2YKI=
Subject key identifier: 91:85:E2:94:A8:CC:E5:67:9B:8B:59:8C:2C:66:F9:CE:77:24:31:60
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01A06687F3B57A1BEFF1DEBE0FBA26B33FA4
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kYXilKjM5Webi1mMLGb5znckMWA.roa
Signing time: Thu 03 Sep 2026 09:09:40 +0000
ROA not before: Thu 03 Sep 2026 09:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 45.85.244.0/23 maxlen: 24
45.85.246.0/24 maxlen: 24
45.85.247.0/24 maxlen: 24
62.68.64.0/24 maxlen: 24
62.68.72.0/24 maxlen: 24
91.229.5.0/24 maxlen: 24
193.110.161.0/24 maxlen: 24
193.201.202.0/24 maxlen: 24
194.55.128.0/24 maxlen: 24
195.60.170.0/24 maxlen: 24
217.8.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:87:f3:b5:7a:1b:ef:f1:de:be:0f:ba:26:b3:3f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Sep 3 09:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9185e294a8cce5679b8b598c2c66f9ce77243160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:4d:a8:14:21:8e:08:b7:8e:cd:92:fc:5b:
58:62:a9:41:e5:b7:a3:47:00:ca:e1:3a:d0:5b:3d:
b7:f6:1d:fd:e6:8e:7f:2c:c1:38:22:7c:12:3d:01:
06:16:14:64:ce:d6:08:0d:15:90:d3:96:65:eb:62:
e9:9e:0a:56:a0:2a:94:99:2b:f2:0e:84:a8:4d:2e:
75:dc:ba:f0:69:90:5d:a2:e7:4f:dc:da:2e:59:64:
b2:b6:d7:ee:a7:30:be:85:f3:65:7d:f9:5e:1e:16:
1f:42:cd:0b:84:e0:e2:ca:d4:d0:26:2f:97:d8:5d:
47:cc:bc:73:f4:c6:93:c9:bd:53:df:31:55:cb:e8:
bf:a5:be:42:10:fd:c2:d3:ec:08:cc:90:7c:8b:42:
d8:a7:85:3e:c4:cf:89:97:a7:3f:99:e3:f1:fe:02:
cd:ff:7a:5a:00:6c:a2:9d:1d:2f:b4:32:d6:bf:b4:
c5:a7:8b:f0:a8:54:af:82:b1:c4:6c:cc:fc:e6:85:
80:47:69:6e:c6:7b:d2:cd:18:04:7f:56:7b:57:37:
3e:1f:fd:a0:18:f7:35:66:8a:1b:6f:78:ee:a2:75:
5c:34:7f:b5:56:cb:cb:c2:5f:73:c6:fe:98:cb:d2:
2e:c0:4f:c3:c7:f1:ce:d0:c1:1e:4f:f7:01:67:13:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:E2:94:A8:CC:E5:67:9B:8B:59:8C:2C:66:F9:CE:77:24:31:60
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kYXilKjM5Webi1mMLGb5znckMWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.244.0/22
62.68.64.0/24
62.68.72.0/24
91.229.5.0/24
193.110.161.0/24
193.201.202.0/24
194.55.128.0/24
195.60.170.0/24
217.8.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0f:ab:31:36:52:04:8a:fe:1b:60:1e:be:4f:cb:fd:d3:c2:
04:a0:2c:04:c2:b0:d2:69:de:af:2b:72:d1:ec:5d:d5:ae:5f:
6b:e3:09:7d:4b:0d:3c:c4:36:de:77:c9:0f:a5:de:6f:aa:06:
41:d2:e3:b5:09:e7:d3:6f:84:77:44:a3:f7:b2:9d:9e:a7:b7:
3f:9a:7a:45:ec:ea:d4:a5:07:a5:d5:da:84:f1:fe:27:72:39:
0d:87:92:7a:76:3d:2f:e2:4b:f4:be:b9:7a:ed:20:8d:09:56:
7a:44:44:68:e5:30:8a:70:9e:ed:c1:f1:76:90:ac:b7:54:ad:
f7:b5:6f:59:e8:be:5c:bf:fd:65:6e:9b:2b:4f:b4:cb:3f:19:
e2:ec:db:f5:de:c3:0f:20:7d:be:02:c0:58:70:19:72:55:0a:
6f:f2:ca:58:46:53:ad:f3:d3:7a:b3:1b:17:e4:83:91:59:0a:
15:41:2e:5a:7f:be:d6:87:c4:48:34:51:ba:2c:14:39:c9:7a:
2b:32:ab:03:a6:d7:11:96:d2:dc:72:99:f5:e9:0e:e4:65:81:
e1:16:ea:3b:47:27:52:f4:8f:34:ed:78:ae:ba:49:57:94:6d:
48:36:05:5f:68:28:ad:47:c3:9c:c4:5e:20:b7:db:51:fc:52:
cd:52:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:10 2026 by rpki-client